Analysis
-
max time kernel
12s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
09-05-2024 18:56
Behavioral task
behavioral1
Sample
cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe
-
Size
588KB
-
MD5
cb3dd89fa9751328c91f755063219ab0
-
SHA1
6ec48a1925f28f8714fcaecdf147285e47379fda
-
SHA256
8e41324a98f6d51470106a3773a8c3ff63e44a1a5fa511d29edb20d1783cfca0
-
SHA512
451cd287c6392248288aa063652be62c4b05222e40c2b89b32b6011f23c05b965252e4b1c2e722153f3b25a70c3d85d4d5e7e1459345fde900a931aefdf804d0
-
SSDEEP
12288:sPKLXqCKLZQ/+9NV5JXlRL3rxYtlR1UTu2ST61tjCtwMK5JVU:sSLelDNtld7xYDRl2STSCtw5JVU
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4152-0-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/files/0x00070000000233b3-5.dat upx behavioral2/memory/4584-17-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1892-152-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3396-151-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2908-178-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5084-179-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3100-180-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4316-181-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3912-182-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2576-183-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4252-184-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4584-186-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4152-185-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4576-187-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1272-190-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1892-189-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4492-192-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2908-191-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3396-188-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/32-195-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5084-194-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/208-197-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4316-198-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/220-199-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2576-202-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2944-203-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4376-201-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3912-200-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3944-205-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4252-204-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3248-207-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3100-196-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4492-206-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1792-209-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/32-208-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/208-210-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/220-211-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3660-212-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3996-214-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/980-217-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4564-216-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3944-215-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/956-219-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4604-218-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3120-221-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/652-220-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4708-222-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5388-226-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5360-225-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5504-227-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5548-228-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5612-232-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/956-231-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4604-230-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1052-229-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5744-234-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5704-233-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5752-240-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5812-239-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5712-238-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4708-237-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3616-236-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3120-235-0x0000000000400000-0x000000000041C000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\U: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\Y: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\B: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\E: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\G: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\H: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\O: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\W: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\X: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\A: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\L: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\M: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\P: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\S: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\Z: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\I: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\K: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\N: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\Q: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\R: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\J: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\T: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File opened (read-only) \??\V: cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\chinese gay masturbation glans balls .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\horse full movie YEâPSè& .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\gay [milf] cock mature (Janette).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\fucking public femdom .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\swedish cum trambling lesbian redhair .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\swedish beastiality sperm [free] cock .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\swedish handjob trambling licking granny .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\xxx [milf] cock (Sonja,Tatjana).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\brasilian beastiality lingerie licking pregnant .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\bukkake voyeur bondage .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast girls fishy .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\russian gang bang beast big titts pregnant (Samantha).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files\dotnet\shared\american beastiality hardcore [milf] feet redhair .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\fetish hardcore several models (Karin).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\black cumshot hardcore uncut mistress .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\black kicking lingerie catfight titts young (Samantha).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian porn sperm girls glans 40+ .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\black fetish fucking sleeping redhair .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\swedish cumshot horse girls balls .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\lingerie big sm .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\swedish cumshot lesbian catfight .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\lesbian lesbian pregnant .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\italian gang bang fucking public mature .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish beastiality lesbian hidden hole boots .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\russian horse hardcore public glans high heels (Samantha).rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\italian nude lesbian sleeping girly .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\japanese animal blowjob girls (Curtney).rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\trambling [bangbus] (Sarah).zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\italian horse horse uncut titts castration .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\hardcore uncut high heels .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\horse lingerie [free] leather .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\norwegian hardcore hidden feet .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\action hardcore [milf] sweet .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\asian beast [free] cock .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\spanish horse [milf] redhair .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\blowjob several models cock hairy .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\tyrkish action beast public .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\brasilian fetish horse [free] hole .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\handjob lesbian masturbation boots (Gina,Samantha).zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\russian porn hardcore [milf] mature (Sonja,Sarah).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\porn hardcore full movie beautyfull .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\xxx hidden .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\chinese gay uncut sweet .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\cumshot xxx [free] (Sylvia).rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\asian blowjob [milf] cock .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\beast full movie pregnant .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\horse voyeur glans boots (Liz).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\black nude xxx lesbian .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\black horse horse [free] wifey .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\lesbian uncut 40+ (Christine,Sylvia).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\cumshot beast [milf] titts mature (Samantha).avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\animal blowjob voyeur titts .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\swedish horse lesbian girls hairy .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\swedish action sperm [bangbus] feet lady .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\italian porn trambling hot (!) .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\beast voyeur swallow .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\tyrkish gang bang blowjob hot (!) .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\chinese xxx public feet .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\swedish animal lesbian several models glans boots .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\kicking bukkake girls blondie .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\cum beast public hotel .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\animal lingerie hidden (Samantha).zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\indian cumshot bukkake [milf] feet bedroom .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\black beastiality blowjob [free] hole black hairunshaved .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\malaysia lingerie licking bedroom .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\american animal hardcore hidden hole lady .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\russian gang bang sperm lesbian cock young .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\lingerie several models femdom .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\trambling [free] (Karin).zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\beast big bedroom .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\brasilian nude hardcore [bangbus] swallow .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\japanese gang bang lesbian masturbation hole 40+ (Melissa).rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\lingerie hidden feet mistress .rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\brasilian horse lingerie uncut .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\cumshot sperm several models sweet .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\japanese handjob fucking licking .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\french bukkake public feet .avi.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\black cumshot lesbian girls .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\american cum bukkake sleeping hole black hairunshaved (Melissa).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\sperm voyeur hole .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\french sperm [bangbus] cock young .zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\russian animal hardcore licking feet high heels .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\lingerie lesbian shower (Jenna,Sylvia).zip.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\lingerie voyeur pregnant (Ashley,Sarah).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\animal fucking sleeping (Janette).rar.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\brasilian beastiality bukkake licking hole .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\danish kicking hardcore uncut high heels (Kathrin,Sylvia).mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\tyrkish gang bang sperm masturbation (Curtney).mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\brasilian porn bukkake [bangbus] fishy .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\handjob gay voyeur black hairunshaved .mpeg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\horse hot (!) blondie .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\trambling [free] .mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\japanese animal fucking public hole (Kathrin,Jade).mpg.exe cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3912 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3912 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2576 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2576 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4252 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4252 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4560 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4560 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4576 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4576 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1272 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 1272 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2372 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 2372 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4492 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4492 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4152 wrote to memory of 4584 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 84 PID 4152 wrote to memory of 4584 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 84 PID 4152 wrote to memory of 4584 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 84 PID 4584 wrote to memory of 3396 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 85 PID 4584 wrote to memory of 3396 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 85 PID 4584 wrote to memory of 3396 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 85 PID 4152 wrote to memory of 1892 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 86 PID 4152 wrote to memory of 1892 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 86 PID 4152 wrote to memory of 1892 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 86 PID 4584 wrote to memory of 2908 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 87 PID 4584 wrote to memory of 2908 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 87 PID 4584 wrote to memory of 2908 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 87 PID 4152 wrote to memory of 5084 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 88 PID 4152 wrote to memory of 5084 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 88 PID 4152 wrote to memory of 5084 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 88 PID 3396 wrote to memory of 3100 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 89 PID 3396 wrote to memory of 3100 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 89 PID 3396 wrote to memory of 3100 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 89 PID 1892 wrote to memory of 4316 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 90 PID 1892 wrote to memory of 4316 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 90 PID 1892 wrote to memory of 4316 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 90 PID 2908 wrote to memory of 3912 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 91 PID 2908 wrote to memory of 3912 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 91 PID 2908 wrote to memory of 3912 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 91 PID 4152 wrote to memory of 2576 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 92 PID 4152 wrote to memory of 2576 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 92 PID 4152 wrote to memory of 2576 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 92 PID 4584 wrote to memory of 4252 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 93 PID 4584 wrote to memory of 4252 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 93 PID 4584 wrote to memory of 4252 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 93 PID 3396 wrote to memory of 4560 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 94 PID 3396 wrote to memory of 4560 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 94 PID 3396 wrote to memory of 4560 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 94 PID 1892 wrote to memory of 4576 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 95 PID 1892 wrote to memory of 4576 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 95 PID 1892 wrote to memory of 4576 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 95 PID 3100 wrote to memory of 1272 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 97 PID 3100 wrote to memory of 1272 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 97 PID 3100 wrote to memory of 1272 3100 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 97 PID 4316 wrote to memory of 2372 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 96 PID 4316 wrote to memory of 2372 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 96 PID 4316 wrote to memory of 2372 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 96 PID 5084 wrote to memory of 4492 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 98 PID 5084 wrote to memory of 4492 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 98 PID 5084 wrote to memory of 4492 5084 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 98 PID 2908 wrote to memory of 32 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 99 PID 2908 wrote to memory of 32 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 99 PID 2908 wrote to memory of 32 2908 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 99 PID 4584 wrote to memory of 208 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 100 PID 4584 wrote to memory of 208 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 100 PID 4584 wrote to memory of 208 4584 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 100 PID 4152 wrote to memory of 220 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 101 PID 4152 wrote to memory of 220 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 101 PID 4152 wrote to memory of 220 4152 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 101 PID 3396 wrote to memory of 4376 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 102 PID 3396 wrote to memory of 4376 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 102 PID 3396 wrote to memory of 4376 3396 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 102 PID 1892 wrote to memory of 2944 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 103 PID 1892 wrote to memory of 2944 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 103 PID 1892 wrote to memory of 2944 1892 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 103 PID 3912 wrote to memory of 2856 3912 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 104 PID 3912 wrote to memory of 2856 3912 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 104 PID 3912 wrote to memory of 2856 3912 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 104 PID 4316 wrote to memory of 3944 4316 cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe 105
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4152 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4584 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3396 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3100 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1272 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:1792
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"8⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"8⤵PID:16880
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:7436
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:10872
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:8784
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:11392
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:12976
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:16932
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7016
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7176
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10112
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:16960
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:18792
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:3992
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:5764
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:13384
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:16408
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7444
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16612
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5088
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:8808
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:12936
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16584
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6500
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7284
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11172
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13020
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:4528
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4560 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:1524
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:11840
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:12920
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:16900
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7468
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10704
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16592
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5168
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:9004
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13376
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:18560
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6700
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7276
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10616
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16656
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13208
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:19040
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:4376
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:3616
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:8816
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:11608
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:12984
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17520
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:376
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:18568
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6776
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10076
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17220
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11964
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17544
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6348
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7340
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10680
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13240
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16576
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6060
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12872
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:456
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7396
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17212
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10656
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16852
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3912 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:18784
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7500
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:11020
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13096
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17436
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:956
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:6420
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:1088
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:18540
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7316
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:17196
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10920
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13200
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5476
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7380
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17228
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10688
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13264
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:32
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:6340
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:16872
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7348
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10852
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13192
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:4900
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:18532
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17204
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10200
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12992
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16696
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3996
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:15104
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7332
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:1516
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13248
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17496
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:15896
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7428
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10816
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13064
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16724
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4252 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5744
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16844
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7484
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13044
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16836
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:2672
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:8792
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11400
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12956
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16916
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6720
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:15604
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7260
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10212
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13296
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17584
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:208
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:4920
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:18776
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7204
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:9988
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16664
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17616
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5580
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7388
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10844
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3052
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:980
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:14820
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7356
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10744
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13072
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16972
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13392
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16924
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7404
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17512
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:10860
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:13028
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1892 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4316 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2372 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:3660
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:5812
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:13504
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"7⤵PID:17464
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:7460
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10928
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13036
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17448
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:8996
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:12880
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16548
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7520
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11032
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3944
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:10352
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:13272
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17504
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7476
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:17624
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10332
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12964
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16688
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:4708
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:9024
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16784
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6708
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12836
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17488
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7268
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10520
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16640
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13256
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17560
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4576 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:652
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:15536
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7452
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10736
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17688
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:8800
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11524
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12948
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17472
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13860
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:9980
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16680
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:11252
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:18524
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:2944
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7912
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:12444
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10564
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13152
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5072
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:2552
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7184
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:9972
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16672
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3152
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17592
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:1052
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6428
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:4452
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:4780
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7324
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10752
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13216
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3884
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13332
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7372
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:10664
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:5112
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5084 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4492 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3708
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:5824
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:7420
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10696
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13080
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:17456
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:10344
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"6⤵PID:16648
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13280
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:18280
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:6956
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7192
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:9956
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:12204
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17556
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:1884
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5692
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:11572
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:13000
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:16940
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7492
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10936
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:4520
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:3120
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:9036
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13340
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:6516
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:1644
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16620
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7296
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:17600
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:10836
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:16600
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2576 -
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:8988
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:12820
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"5⤵PID:18548
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:7508
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:10944
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13088
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16824
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:2560
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:8120
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:11156
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13012
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3060
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:6508
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:15504
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7304
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16860
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:10608
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:13232
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:464
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:220
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:8048
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:11040
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13056
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:6988
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7128
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:9964
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:16628
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:3892
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:17572
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:5092
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:13348
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:3644
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:7248
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:10204
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"4⤵PID:4364
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"3⤵PID:17576
-
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:5916
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:7364
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cb3dd89fa9751328c91f755063219ab0_NeikiAnalytics.exe"2⤵PID:820
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\swedish cumshot lesbian catfight .avi.exe
Filesize1.7MB
MD583a6d8e948ee1602f8e1e86b3965fbf4
SHA1e8bad1a84c52df9325dc731e28a4be8aa40f9fe2
SHA256899ae52631342120902f2b8d799b990e53b1d5a0975ccb79d0fb820befe6717d
SHA512fd3e373ede91ac87825d7b75ad5c5355fe582a34c477ff5811f3765db21c4b9bd691c1c8c2fc973582e5f2f6f34df71050b2c33fece54b2de2becc9071525a8f
-
Filesize
146B
MD57a7305d58ffcef7f458d1262fce9c877
SHA14207e5034b5aee04b04bd96d4b5edab8ec370103
SHA2562f0cf099fecb8e17d90973e931d6c3b14f8c4b8acbcb92c2ec61b73c759028dc
SHA5125ec57ff58e2ac17595d19ef3f3b835fb8e4d244d1fd9e8865ab45088affd4f1f01b2302a9030546640526c248605f17f61473b19fcb7150290a5fc4c4f47ed08