Analysis
-
max time kernel
148s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-06-2024 11:48
Static task
static1
Behavioral task
behavioral1
Sample
965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
2c1d966ae5e47846144ade43bb958b90
-
SHA1
99dfe406e5e35d65fddcdf8349ec210bc9903474
-
SHA256
965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587
-
SHA512
1c8b5aee5a5e7e51d2ece5007a6a4d71c24e14277b10a1e09ddd687ef7914433f9476efbf353aeb34a2f9854a730663e35ff0e574c50b06f1244285c5de433ad
-
SSDEEP
49152:V8630tUDih4DC/ILo/2MlfDEC10OO8sHdpeNirYD3F4DM94boPk:m1OsAoOaEC1VgdpeFyM94bIk
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 15 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\B: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\P: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\M: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\Y: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\Z: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\A: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\E: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\J: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\Q: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\S: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\T: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\U: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\V: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\G: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\H: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\I: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\K: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\L: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\N: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\O: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\R: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\W: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File opened (read-only) \??\X: 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\malaysia beast gay voyeur hole ΋ (Janette,Sandy).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\chinese horse trambling full movie titts granny (Samantha,Gina).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\danish hardcore fetish catfight .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\malaysia blowjob [free] legs bedroom (Tatjana,Britney).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\american beastiality lesbian legs bedroom (Karin).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\fucking catfight cock gorgeoushorny .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\bukkake beastiality licking titts traffic .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\lingerie gay lesbian (Kathrin).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\canadian handjob girls titts mature (Ashley,Sylvia).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\german action masturbation .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\japanese xxx public wifey (Ashley,Jade).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\french hardcore lesbian (Sylvia,Christine).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\Common Files\microsoft shared\african hardcore lingerie sleeping hole .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\african fetish blowjob big hole balls .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{6BB39B16-79FA-4D8E-BB79-4EFE59F95F66}\EDGEMITMP_509DC.tmp\horse cum [bangbus] hole (Tatjana,Samantha).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\black lingerie licking hole .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\gay full movie mature .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\norwegian lesbian cumshot voyeur .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\lesbian full movie black hairunshaved .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\danish beast licking black hairunshaved (Tatjana).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\nude nude several models .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\lesbian [bangbus] .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\fucking [bangbus] cock balls .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\british xxx girls sweet .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\tyrkish trambling xxx big gorgeoushorny (Janette).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\russian porn lingerie several models nipples .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\hardcore beast licking .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\indian kicking gay uncut nipples black hairunshaved .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\kicking horse masturbation leather .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\cum gang bang voyeur bedroom .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\norwegian fetish public young .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\indian sperm girls femdom (Jade).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\french porn gang bang full movie ash (Anniston,Liz).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\assembly\temp\gang bang several models (Sarah,Tatjana).avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian beast [bangbus] nipples blondie .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\japanese lingerie several models girly (Sandy,Christine).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\lingerie hot (!) titts bedroom (Anniston).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\japanese porn trambling hidden pregnant .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\german nude sleeping .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\action uncut boobs .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\russian bukkake [bangbus] gorgeoushorny .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\chinese fucking hot (!) .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\indian trambling cumshot hidden nipples .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\bukkake full movie mistress .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\trambling gang bang girls hairy .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\lesbian fetish public (Sarah,Karin).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\malaysia lingerie nude uncut latex .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\danish hardcore lingerie catfight nipples .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\russian animal several models mistress .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\brasilian blowjob gang bang [free] (Janette,Jenna).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\german lesbian kicking big (Sarah,Janette).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\lingerie girls fishy .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\beastiality cum hot (!) (Sandy).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\action gang bang voyeur legs 40+ .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\action voyeur hotel .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\spanish cumshot animal masturbation glans shower (Sonja,Britney).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\gang bang hardcore lesbian castration .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\horse full movie 40+ (Ashley,Curtney).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\indian horse trambling full movie castration .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\malaysia beast licking vagina (Liz).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\german gang bang [bangbus] feet gorgeoushorny .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\security\templates\tyrkish cumshot catfight wifey .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\trambling bukkake licking high heels .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\british cum beast big ash (Jade,Christine).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\beast lesbian .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\trambling blowjob big hole circumcision (Karin).avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\swedish lesbian big (Sandy).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\norwegian beastiality licking young .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\lingerie licking 40+ (Sylvia).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\italian beast lesbian penetration (Curtney).avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\nude licking (Ashley).mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\italian animal lesbian public .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\blowjob blowjob public black hairunshaved .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\asian trambling [free] boobs stockings (Jade,Sylvia).avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\cum bukkake masturbation legs .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\lesbian gang bang [bangbus] hotel .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\indian beast sperm girls (Melissa).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\fucking animal [milf] pregnant (Sonja).zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\french xxx animal sleeping (Anniston,Sarah).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\indian fetish big leather .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\spanish kicking [bangbus] (Ashley).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\handjob kicking big beautyfull .rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\CbsTemp\spanish cum [bangbus] fishy .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\animal xxx public (Karin,Sonja).rar.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\fetish nude hidden penetration .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\german fucking voyeur .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\horse sperm hot (!) ash mature .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\lingerie handjob uncut 50+ (Janette).mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\indian gay sleeping .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\italian gay blowjob full movie beautyfull .avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\british lesbian masturbation vagina YEâPSè& .zip.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\french lingerie uncut vagina .mpg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\norwegian cum several models titts bondage .mpeg.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\italian horse porn girls (Tatjana).avi.exe 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4268 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4268 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3204 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3204 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1852 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1852 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1488 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1488 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 2312 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 2312 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4684 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4684 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4756 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4756 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4548 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 4548 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3200 wrote to memory of 4724 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 89 PID 3200 wrote to memory of 4724 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 89 PID 3200 wrote to memory of 4724 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 89 PID 4724 wrote to memory of 1244 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 92 PID 4724 wrote to memory of 1244 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 92 PID 4724 wrote to memory of 1244 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 92 PID 3200 wrote to memory of 4132 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 93 PID 3200 wrote to memory of 4132 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 93 PID 3200 wrote to memory of 4132 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 93 PID 4724 wrote to memory of 3552 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 97 PID 4724 wrote to memory of 3552 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 97 PID 4724 wrote to memory of 3552 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 97 PID 3200 wrote to memory of 4440 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 98 PID 3200 wrote to memory of 4440 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 98 PID 3200 wrote to memory of 4440 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 98 PID 1244 wrote to memory of 4300 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 99 PID 1244 wrote to memory of 4300 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 99 PID 1244 wrote to memory of 4300 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 99 PID 4132 wrote to memory of 3972 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 100 PID 4132 wrote to memory of 3972 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 100 PID 4132 wrote to memory of 3972 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 100 PID 4724 wrote to memory of 4268 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 102 PID 4724 wrote to memory of 4268 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 102 PID 4724 wrote to memory of 4268 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 102 PID 3200 wrote to memory of 3204 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 103 PID 3200 wrote to memory of 3204 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 103 PID 3200 wrote to memory of 3204 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 103 PID 3552 wrote to memory of 1852 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 104 PID 3552 wrote to memory of 1852 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 104 PID 3552 wrote to memory of 1852 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 104 PID 4440 wrote to memory of 1488 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 105 PID 4440 wrote to memory of 1488 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 105 PID 4440 wrote to memory of 1488 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 105 PID 1244 wrote to memory of 4684 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 107 PID 1244 wrote to memory of 4684 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 107 PID 1244 wrote to memory of 4684 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 107 PID 4132 wrote to memory of 2312 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 106 PID 4132 wrote to memory of 2312 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 106 PID 4132 wrote to memory of 2312 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 106 PID 4300 wrote to memory of 4756 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 108 PID 4300 wrote to memory of 4756 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 108 PID 4300 wrote to memory of 4756 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 108 PID 3972 wrote to memory of 4548 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 109 PID 3972 wrote to memory of 4548 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 109 PID 3972 wrote to memory of 4548 3972 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 109 PID 4724 wrote to memory of 1996 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 110 PID 4724 wrote to memory of 1996 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 110 PID 4724 wrote to memory of 1996 4724 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 110 PID 3552 wrote to memory of 2784 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 112 PID 3552 wrote to memory of 2784 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 112 PID 3552 wrote to memory of 2784 3552 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 112 PID 3200 wrote to memory of 428 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 113 PID 3200 wrote to memory of 428 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 113 PID 3200 wrote to memory of 428 3200 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 113 PID 4440 wrote to memory of 5108 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 114 PID 4440 wrote to memory of 5108 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 114 PID 4440 wrote to memory of 5108 4440 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 114 PID 4132 wrote to memory of 4556 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 116 PID 4132 wrote to memory of 4556 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 116 PID 4132 wrote to memory of 4556 4132 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 116 PID 1244 wrote to memory of 912 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 115 PID 1244 wrote to memory of 912 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 115 PID 1244 wrote to memory of 912 1244 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 115 PID 4300 wrote to memory of 1168 4300 965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe 117
Processes
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3200 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4724 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1244 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4300 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4756 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:13788
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:19400
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:7988
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:17280
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:13868
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:10612
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:24544
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:14072
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19624
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:5624
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:13776
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:7964
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:17752
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:24632
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:24332
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:20848
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:13172
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19092
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7972
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:18180
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24688
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:11096
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24492
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14428
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21316
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:1168
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:3468
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:8064
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:18156
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24696
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10532
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:23676
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14272
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20576
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5688
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:11628
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:20236
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:15756
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21748
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7520
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:15108
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6440
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16300
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23152
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:9668
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20832
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19276
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:20036
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4684 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5424
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:11636
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:16488
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:15772
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:22052
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:11660
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:25572
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:15740
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:21616
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:17760
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:25540
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10268
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:22004
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14040
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19608
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7200
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:13804
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19220
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:26260
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7908
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:17000
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:23264
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10660
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:23760
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14380
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20564
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13756
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19204
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7956
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:17824
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24648
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10580
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24204
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:15080
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6332
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:912
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:11676
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:15764
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7408
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:12784
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:17744
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24624
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7900
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16556
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23192
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10652
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23792
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14312
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:20712
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5696
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13100
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:3848
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18132
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24672
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:11584
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24536
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:16308
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:22864
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3552 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1852 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6540
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:14016
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19600
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:8020
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:18032
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24728
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10644
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24352
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21220
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7464
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:3888
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:20704
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7852
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:15548
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:21556
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10684
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24212
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14692
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13716
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19100
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20104
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16516
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22896
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10572
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23732
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14280
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:21232
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:2784
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6284
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:11644
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:5096
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16288
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22564
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7360
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:9308
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19180
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19908
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7884
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16532
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22912
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10276
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22352
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19576
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13404
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19268
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:20084
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7376
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13792
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19212
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:20380
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7876
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:17032
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13724
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10336
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14264
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:20488
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4268 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5280
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:8216
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:18040
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24752
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10312
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:22340
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13848
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19408
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13692
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19592
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16456
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22888
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14244
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19780
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5680
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:8884
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19292
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:11932
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:25556
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:16332
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:22744
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7348
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13424
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7892
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:16548
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:22904
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:11328
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18520
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:15336
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6464
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:1996
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14048
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19568
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8012
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:17256
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14992
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:22728
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13984
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19544
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7624
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:3320
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:22988
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:16992
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:23272
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:10292
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:22516
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:14080
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:19616
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4132 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3972 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:4548 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6488
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:19244
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:8028
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:17832
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:16616
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10636
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:23768
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14320
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7224
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:11668
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"8⤵PID:24476
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:15344
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:8520
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:7828
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:4104
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:23160
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:9696
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:8992
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13664
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19124
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20136
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:3780
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:18672
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20356
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16540
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23212
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:9688
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:6368
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13684
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19236
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:26124
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5252
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:14024
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7996
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16524
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23200
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10676
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23808
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6296
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5672
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:8876
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:18048
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24712
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:11736
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:10944
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:15780
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:21996
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7152
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13388
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7916
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:1976
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:22876
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10700
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:23740
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19772
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2312 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6572
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:11708
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:24500
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:15748
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:21728
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:8036
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:17880
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:25564
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10524
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23800
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14288
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:5760
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:16660
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23140
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10176
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:22380
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19420
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:12772
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:17736
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24640
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7948
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18064
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24736
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10564
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:23784
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19640
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:4556
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19228
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8004
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18120
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24656
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10692
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24376
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14088
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19584
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18072
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24720
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10588
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:23776
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14304
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7384
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13412
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19108
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:18056
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:24680
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:10284
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:22324
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:14328
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:20696
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4440 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1488 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:6532
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:12500
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"7⤵PID:25620
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:17572
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23852
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:18196
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24704
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:10596
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:23724
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:21292
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7160
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:2228
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:19148
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:7932
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:17332
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:13728
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:11368
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"6⤵PID:24324
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:14832
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13396
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19140
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:7980
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18140
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:25580
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10620
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24484
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14684
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:21308
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5108
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13764
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19284
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:17040
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:23444
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10556
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:23708
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13820
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19560
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:11528
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24552
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:15012
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8844
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19164
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7820
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:18164
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:25596
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:10668
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:24316
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:14372
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:20840
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5320
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:6516
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:13280
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19156
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:19508
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:17864
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:25548
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:10540
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24340
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:14032
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19652
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:8124
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:18080
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24664
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:11596
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"5⤵PID:24468
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:15532
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:21528
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7144
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13164
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19252
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:20004
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:7924
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:18172
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:25632
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:10708
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:23832
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:19660
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:428
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:6404
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:19188
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:20364
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:17872
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:24744
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:10548
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:22556
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:14296
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:20688
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:9536
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:18148
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:25588
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:17704
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:2212
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:7416
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:11652
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"4⤵PID:24460
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:15540
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:21548
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:15520
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:21520
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:10012
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"3⤵PID:22336
-
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:14364
-
-
C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\965c9c69c9ce663720a4e801adf2fb50ceb7c116060d651708408976706ef587_NeikiAnalytics.exe"2⤵PID:21284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1320,i,17096020621006928097,15544233752327415349,262144 --variations-seed-version --mojo-platform-channel-handle=1316 /prefetch:81⤵PID:4984
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\indian kicking gay uncut nipples black hairunshaved .avi.exe
Filesize876KB
MD59383b0b2b5bcaef5ff06e8058ea5e0e6
SHA16d84e539d0b7af760170a7c945556edd4acd390c
SHA256f32bf44f358381db1ba5ee7b7884e4043748a87048f8a19de0f33658d82c86c7
SHA512dd36444ab20fa019c21ef027def8297c4558716b23f1e117d409d8ca680931d93fc115727464bbf839c6de68929ac14de03e912360976aaf0b3ea6516b87158f