Analysis
-
max time kernel
16s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/05/2024, 13:10
Behavioral task
behavioral1
Sample
b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
b97755b6f186a87290ba70346f170ed0
-
SHA1
089d607b85f67793af15170b4e304408786b5cc2
-
SHA256
ee52e4251750bfd2fc51d49ccb2a96feeddae00ab8969754772483a49a99ecc5
-
SHA512
d2166d8a2a043b30701b6e504d5762e845fb97470ba70df863532f114bb7a4bf3420662cbd0bd1da0d00ebda53e666bc1138cfa790a1f13ea380890bb43cb2de
-
SSDEEP
24576:VJFfJJuX15VpYZM3LU0t/ntXM7PunL0mjVtHzwZuexinFCJC7D12A19pv:PFfJJuXFaZ8UInt8DEjVZcZzxQ7r19pv
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4252-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x0007000000023408-5.dat upx behavioral2/memory/4848-26-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4208-180-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3832-181-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3052-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4916-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4588-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4252-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/808-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4764-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2344-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4848-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4280-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2816-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4252-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3160-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1988-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3900-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3052-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1736-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4992-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3832-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4208-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/212-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3616-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4916-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2276-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1248-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4588-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4784-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4928-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3216-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/808-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/516-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2344-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4528-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4592-213-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1772-214-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2104-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/636-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4280-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/212-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5012-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3140-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3160-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1644-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2788-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2240-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1180-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1736-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3348-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1648-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5512-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4928-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3216-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5604-241-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5596-240-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2276-239-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1248-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1960-245-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5776-244-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3768-247-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4528-246-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\J: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\R: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\S: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\T: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\W: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\A: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\B: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\I: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\U: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\V: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\Q: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\Y: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\E: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\H: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\K: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\L: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\N: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\Z: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\G: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\M: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\O: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\P: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File opened (read-only) \??\X: b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\danish xxx big titts boots .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\japanese gang bang [free] feet sm .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\horse handjob sleeping boobs pregnant (Jenna,Sylvia).zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\french action lesbian .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\animal blowjob hot (!) granny (Anniston,Melissa).rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\hardcore handjob [milf] feet 40+ .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\british cumshot hardcore [bangbus] .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\chinese fucking porn licking ejaculation .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\british nude handjob uncut legs castration .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\beastiality beastiality lesbian pregnant .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian hardcore beastiality voyeur ash boots .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\black cum cumshot [free] titts castration (Sonja).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Windows Sidebar\Shared Gadgets\danish fetish big bedroom (Liz).mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\malaysia porn horse girls .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\german fetish lingerie lesbian swallow .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\porn catfight granny (Melissa,Sonja).mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\gay lesbian black hairunshaved .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\norwegian nude fucking girls ash circumcision .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\french horse fucking lesbian .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\malaysia action porn licking ash femdom .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\blowjob action sleeping mature .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\african xxx hot (!) .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\russian animal nude hidden ash .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\beast handjob hot (!) hole .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\danish fetish fetish voyeur hole lady (Jade).rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\american gay [bangbus] fishy .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\cumshot big .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\nude animal big shower .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\chinese gang bang handjob licking mature .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\black horse fetish [milf] fishy .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\action kicking masturbation traffic (Melissa).avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\malaysia porn cumshot hidden glans .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\tyrkish hardcore masturbation .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\black cum fucking girls glans .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\indian cumshot big (Britney,Jade).mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\porn public glans black hairunshaved (Sonja,Jade).zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\american gang bang kicking hot (!) .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\norwegian action public .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\canadian handjob porn full movie titts shower .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\chinese gang bang horse [free] .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\swedish horse beastiality full movie .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\xxx [free] glans .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\danish cumshot several models YEâPSè& .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\malaysia action cumshot masturbation .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\spanish kicking hardcore masturbation titts leather .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\indian cum blowjob sleeping (Karin).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\african porn hot (!) leather .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\black bukkake kicking voyeur sm .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\tyrkish handjob licking nipples shoes .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\malaysia gang bang big fishy .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\black gang bang gang bang [milf] hole .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\gang bang beast catfight .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\sperm bukkake masturbation hole .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\african hardcore trambling catfight .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\CbsTemp\beastiality hot (!) sweet .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\swedish horse catfight (Sarah,Kathrin).zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\black animal masturbation (Britney,Sandy).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\trambling action sleeping .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\chinese xxx cumshot several models (Sandy,Sonja).mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\tyrkish handjob full movie (Sonja).avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\gang bang full movie blondie .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\tyrkish lesbian [bangbus] castration .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\gang bang big traffic .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\security\templates\swedish action big .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\lingerie nude uncut upskirt .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\action blowjob uncut titts latex .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\asian handjob gang bang [free] mistress .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\horse blowjob girls redhair .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\indian bukkake sleeping pregnant .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\nude gay catfight swallow .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\african beastiality several models titts Ôï (Sonja).mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\porn trambling girls titts fishy .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\cumshot public cock beautyfull .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\sperm licking black hairunshaved (Janette).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\german horse lesbian mature (Sonja,Kathrin).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\malaysia gang bang horse [milf] ash wifey .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\french trambling [bangbus] young .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\gay cumshot lesbian vagina penetration .mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\japanese animal licking .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\horse public wifey (Melissa).mpeg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\norwegian porn sleeping high heels .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\norwegian lesbian public wifey .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\malaysia lesbian beastiality uncut castration .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\american cum fucking hot (!) .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\fucking licking .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\horse [milf] vagina sm .mpg.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\lingerie masturbation mistress .zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\brasilian xxx several models .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\spanish sperm lingerie voyeur .rar.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\british kicking horse [free] (Tatjana).avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\gang bang voyeur (Anniston).zip.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\cumshot sleeping traffic .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\sperm sperm full movie .avi.exe b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4916 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4916 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4588 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4588 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4784 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4784 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4764 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4764 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 808 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 808 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2344 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 2344 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1772 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4592 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1772 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4592 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4280 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 4280 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4252 wrote to memory of 4848 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 87 PID 4252 wrote to memory of 4848 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 87 PID 4252 wrote to memory of 4848 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 87 PID 4848 wrote to memory of 2816 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 88 PID 4848 wrote to memory of 2816 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 88 PID 4848 wrote to memory of 2816 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 88 PID 4252 wrote to memory of 3616 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 89 PID 4252 wrote to memory of 3616 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 89 PID 4252 wrote to memory of 3616 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 89 PID 2816 wrote to memory of 4208 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 90 PID 2816 wrote to memory of 4208 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 90 PID 2816 wrote to memory of 4208 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 90 PID 4848 wrote to memory of 3832 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 91 PID 4848 wrote to memory of 3832 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 91 PID 4848 wrote to memory of 3832 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 91 PID 4252 wrote to memory of 1988 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 92 PID 4252 wrote to memory of 1988 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 92 PID 4252 wrote to memory of 1988 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 92 PID 3616 wrote to memory of 3052 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 93 PID 3616 wrote to memory of 3052 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 93 PID 3616 wrote to memory of 3052 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 93 PID 3832 wrote to memory of 4916 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 94 PID 3832 wrote to memory of 4916 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 94 PID 3832 wrote to memory of 4916 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 94 PID 4848 wrote to memory of 4784 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 95 PID 4848 wrote to memory of 4784 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 95 PID 4848 wrote to memory of 4784 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 95 PID 2816 wrote to memory of 4588 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 96 PID 2816 wrote to memory of 4588 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 96 PID 2816 wrote to memory of 4588 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 96 PID 4252 wrote to memory of 4764 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 97 PID 4252 wrote to memory of 4764 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 97 PID 4252 wrote to memory of 4764 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 97 PID 3616 wrote to memory of 808 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 98 PID 3616 wrote to memory of 808 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 98 PID 3616 wrote to memory of 808 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 98 PID 4208 wrote to memory of 2344 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 99 PID 4208 wrote to memory of 2344 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 99 PID 4208 wrote to memory of 2344 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 99 PID 1988 wrote to memory of 4592 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 100 PID 1988 wrote to memory of 4592 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 100 PID 1988 wrote to memory of 4592 1988 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 100 PID 3052 wrote to memory of 1772 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 101 PID 3052 wrote to memory of 1772 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 101 PID 3052 wrote to memory of 1772 3052 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 101 PID 3832 wrote to memory of 4280 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 102 PID 3832 wrote to memory of 4280 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 102 PID 3832 wrote to memory of 4280 3832 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 102 PID 4848 wrote to memory of 212 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 103 PID 4848 wrote to memory of 212 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 103 PID 4848 wrote to memory of 212 4848 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 103 PID 2816 wrote to memory of 3160 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 104 PID 2816 wrote to memory of 3160 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 104 PID 2816 wrote to memory of 3160 2816 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 104 PID 3616 wrote to memory of 3900 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 105 PID 3616 wrote to memory of 3900 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 105 PID 3616 wrote to memory of 3900 3616 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 105 PID 4252 wrote to memory of 4992 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 106 PID 4252 wrote to memory of 4992 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 106 PID 4252 wrote to memory of 4992 4252 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 106 PID 4208 wrote to memory of 1736 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 107 PID 4208 wrote to memory of 1736 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 107 PID 4208 wrote to memory of 1736 4208 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 107 PID 4916 wrote to memory of 3216 4916 b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe 108
Processes
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4252 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4848 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2816 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4208 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2344 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:4528
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:5572
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"8⤵PID:12896
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"8⤵PID:15636
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"8⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:7044
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"8⤵PID:18972
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:9236
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:11684
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:16064
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18660
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:5012
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:7348
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"8⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:9544
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:16088
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:10200
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:4940
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18932
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:6968
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:17704
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9268
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11944
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15832
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20132
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:1736
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:15704
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:20068
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7084
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18868
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9340
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11952
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:19476
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7864
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:1992
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:10320
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11768
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15856
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20124
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6208
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18616
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6880
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9916
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10012
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4588 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:2276
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18408
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18272
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9944
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15976
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:1648
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7856
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:17624
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:10428
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15596
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17844
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:3116
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:19004
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18876
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9896
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11936
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15648
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:17836
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:3160
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18956
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7068
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18940
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9976
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15904
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18648
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2764
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18184
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15840
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:8240
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6160
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11616
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15768
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20188
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:19024
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9172
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11692
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15628
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20052
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15728
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20164
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3832 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4916 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:3216
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:6028
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:17416
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18224
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9956
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11864
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15808
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20196
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:5156
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:10448
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11668
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:16048
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:10080
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6168
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17652
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18216
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9992
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15792
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5908
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:4280 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17576
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7060
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18908
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9244
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18176
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11968
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15816
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2240
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18916
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10312
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11756
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16008
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18632
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6228
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16200
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12988
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6888
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9180
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:17768
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15688
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20044
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4784 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:1248
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20020
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7116
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17776
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9984
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11880
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16016
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:19484
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:3348
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7828
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10344
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11660
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16080
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6928
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:2952
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9204
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18376
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12056
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15896
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:212
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20140
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:7108
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18884
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9252
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:16072
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12612
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:4372
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:7648
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15612
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20028
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6492
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17456
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6864
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17592
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:9888
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:11912
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15880
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:9952
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3616 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3052 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1772 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:636
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18540
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7076
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18964
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9348
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:12016
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15960
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:3140
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:7652
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"7⤵PID:18292
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:9432
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11636
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15888
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20180
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6176
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:1520
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15712
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20652
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17600
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18320
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12328
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15620
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15592
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:516
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5776
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:164
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:15752
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:20212
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18900
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9936
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20092
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:652
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18192
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10376
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11744
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16032
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10016
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:1820
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18392
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18152
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9276
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12000
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:22856
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:808 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:1960
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5620
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:11644
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:16056
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7100
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18924
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9392
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12032
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20100
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2788
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18168
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:1412
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15784
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20204
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2964
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18608
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18256
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:10060
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11872
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:16024
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20220
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:3900
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:5512
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15664
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9356
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:4496
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9324
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11984
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15864
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20156
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:3748
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18200
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:10440
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11704
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15936
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:10124
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18108
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6936
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18996
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:9212
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17696
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:12040
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15720
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1988 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4592 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2104
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18232
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7024
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18248
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:9316
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:18312
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11676
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15604
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20076
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:2812
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"6⤵PID:17792
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10632
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:11696
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15824
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20116
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6412
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:372
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:20172
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18240
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9724
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11800
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:16040
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18684
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:5988
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18400
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:17584
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:8172
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18384
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11976
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15928
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18640
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:1644
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18280
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:10552
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11716
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15920
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18676
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15800
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6944
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17760
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:7776
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:4348
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:12048
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15680
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:20060
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4764 -
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:3768
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:16096
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:10076
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:7032
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"5⤵PID:18892
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:9376
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:12008
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15696
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:19500
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:1180
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:456
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15656
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20036
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:11624
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:15776
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6960
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17616
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:7984
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18208
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:11992
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15912
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:9776
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:4992
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:6004
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18560
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18264
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:7976
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:4360
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15672
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:18672
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:2220
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:12024
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15872
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:20148
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:5996
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:12780
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"4⤵PID:18948
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:15760
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:20012
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"3⤵PID:17784
-
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:9260
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:11960
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:15968
-
-
C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b97755b6f186a87290ba70346f170ed0_NeikiAnalytics.exe"2⤵PID:20084
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\gay lesbian black hairunshaved .mpeg.exe
Filesize1.5MB
MD5239d0d1ca67efad28888e8ceb53eb394
SHA1eba4e191730a77a47ea42c47f80b057cbe9c3ff6
SHA256aeda3388ea70aa0ad6ac4e17aa3821d709525eec55f840036853c4f66d4fbd5b
SHA512056ce67e7fb60068e70e182acadb02e1e41584587fc368646fab67eb9f5cce58e9400d0804dc3e33b762754cb885739a24d4129c8601556fa6ff8f9b5332826d