Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 13:20
Static task
static1
Behavioral task
behavioral1
Sample
6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe
-
Size
663KB
-
MD5
899ae4892b11e0cd83805e0fa7ce7db0
-
SHA1
a1afa66af5ae1044e9565eaf850622fbe705c983
-
SHA256
6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e
-
SHA512
3f5d25c4c6f7dec9e705d4fef32c719df13db507053f5771de104736b4301a699a50d8b70f23b2059533b1fcf0cdcdc6df5741cfb2d8f4cc12af6b42066392c7
-
SSDEEP
12288:dXCNi9BPf3lRVU7ZDmrZp4OfLlaCSgeJs58tTVH3WPZYIXJGzwjPg:oWPdR67ZirZ2OfZaCSgWs58tTVGiIJGD
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 14 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\G: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\B: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\H: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\L: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\M: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\O: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\S: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\V: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\W: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\Y: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\E: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\I: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\P: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\U: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\J: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\K: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\N: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\Q: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\R: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\T: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\X: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File opened (read-only) \??\Z: 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\xxx sleeping cock traffic (Curtney).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\japanese horse hardcore hot (!) penetration .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\italian porn beast public glans .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\swedish gang bang horse [bangbus] (Melissa).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\spanish beast catfight (Sylvia).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\lesbian masturbation feet sweet (Samantha).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\bukkake full movie hole wifey .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\swedish gang bang xxx uncut titts bedroom .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\japanese nude sperm hot (!) mature .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\danish horse lingerie licking (Liz).avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\lesbian several models titts .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\horse full movie cock (Gina,Sylvia).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files\Common Files\microsoft shared\xxx licking (Sylvia).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\hardcore [milf] cock sm (Tatjana).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\blowjob full movie feet .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\beastiality blowjob [bangbus] .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\black beastiality xxx girls circumcision .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\indian handjob gay public (Jade).avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\danish nude xxx sleeping .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\xxx girls titts .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\xxx public hole high heels (Jade).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\horse masturbation glans femdom .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\horse masturbation (Sylvia).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\hardcore hot (!) cock redhair .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\brasilian horse blowjob [free] ash .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\blowjob girls .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\tyrkish horse sperm lesbian redhair .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\canadian trambling girls cock ash .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\indian animal trambling full movie feet ,Ó (Janette).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\bukkake masturbation upskirt (Jenna,Jade).avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\swedish porn blowjob several models 50+ (Ashley,Sarah).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\kicking xxx big lady (Sandy,Jade).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\chinese sperm girls femdom .rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\fucking voyeur traffic .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\brasilian kicking xxx big .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\african trambling lesbian .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\japanese fetish lingerie hot (!) hole girly (Sylvia).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\chinese beast hidden cock wifey (Janette).avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\brasilian fetish trambling catfight glans mistress .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\action trambling public mature .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\trambling licking hole (Britney,Sylvia).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\handjob lingerie big .rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\hardcore [free] cock beautyfull (Liz).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\american action fucking sleeping fishy .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\sperm [bangbus] hairy .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\horse uncut hairy .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\sperm full movie .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\blowjob catfight lady .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\lesbian hot (!) .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\kicking hardcore several models .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\japanese cum blowjob full movie castration (Sandy,Tatjana).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\bukkake lesbian feet .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\CbsTemp\danish horse trambling hot (!) feet mistress (Jade).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\italian action trambling lesbian pregnant .rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\canadian xxx hot (!) cock .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\security\templates\blowjob uncut bedroom .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\action sperm licking latex (Sonja,Tatjana).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\russian animal horse [bangbus] (Jade).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\hardcore lesbian castration .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\fucking full movie cock girly .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\danish cumshot hardcore [free] (Janette).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\gay masturbation titts YEâPSè& .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\russian nude fucking full movie hole ejaculation (Tatjana).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\cumshot gay lesbian bedroom .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\british bukkake masturbation cock ejaculation .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\handjob lesbian [free] granny .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\bukkake hidden upskirt .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\handjob bukkake [bangbus] .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\chinese blowjob full movie gorgeoushorny .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\swedish porn sperm voyeur titts .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\black kicking beast voyeur glans (Jenna,Liz).avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\beastiality lingerie catfight young (Gina,Jade).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\cumshot trambling lesbian 50+ .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\nude hardcore [bangbus] gorgeoushorny .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\black porn hardcore big titts bondage .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\gay public titts 40+ (Liz).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\assembly\temp\bukkake public sweet .mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\japanese porn lingerie licking bedroom .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\norwegian hardcore hot (!) blondie (Kathrin,Curtney).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\hardcore licking 50+ .mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\porn gay masturbation feet YEâPSè& .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\african trambling [free] gorgeoushorny .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\black beastiality xxx full movie cock pregnant (Sarah).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\handjob sperm [bangbus] granny (Ashley,Samantha).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\hardcore big .avi.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\brasilian cumshot sperm lesbian titts .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\danish action trambling girls hole ¤ç (Janette).rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\sperm uncut pregnant .rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\italian porn lesbian big ejaculation (Sonja,Tatjana).mpg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\german lingerie uncut titts fishy .rar.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\cum lesbian uncut hole hotel (Karin).zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\beastiality hardcore several models .zip.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\sperm [bangbus] (Melissa).mpeg.exe 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 972 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4872 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 972 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4872 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1856 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1856 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4076 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4076 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2088 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2088 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 5040 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 5040 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4156 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4156 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3156 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 3156 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1980 wrote to memory of 4548 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 80 PID 1980 wrote to memory of 4548 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 80 PID 1980 wrote to memory of 4548 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 80 PID 1980 wrote to memory of 1180 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 81 PID 1980 wrote to memory of 1180 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 81 PID 1980 wrote to memory of 1180 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 81 PID 4548 wrote to memory of 3924 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 82 PID 4548 wrote to memory of 3924 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 82 PID 4548 wrote to memory of 3924 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 82 PID 1180 wrote to memory of 4132 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 83 PID 1180 wrote to memory of 4132 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 83 PID 1180 wrote to memory of 4132 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 83 PID 1980 wrote to memory of 4632 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 84 PID 1980 wrote to memory of 4632 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 84 PID 1980 wrote to memory of 4632 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 84 PID 3924 wrote to memory of 4304 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 85 PID 3924 wrote to memory of 4304 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 85 PID 3924 wrote to memory of 4304 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 85 PID 4548 wrote to memory of 2676 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 86 PID 4548 wrote to memory of 2676 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 86 PID 4548 wrote to memory of 2676 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 86 PID 4132 wrote to memory of 972 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 87 PID 4132 wrote to memory of 972 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 87 PID 4132 wrote to memory of 972 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 87 PID 1180 wrote to memory of 4872 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 88 PID 1180 wrote to memory of 4872 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 88 PID 1180 wrote to memory of 4872 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 88 PID 1980 wrote to memory of 1856 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 89 PID 1980 wrote to memory of 1856 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 89 PID 1980 wrote to memory of 1856 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 89 PID 4632 wrote to memory of 4076 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 90 PID 4632 wrote to memory of 4076 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 90 PID 4632 wrote to memory of 4076 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 90 PID 3924 wrote to memory of 2088 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 91 PID 3924 wrote to memory of 2088 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 91 PID 3924 wrote to memory of 2088 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 91 PID 4548 wrote to memory of 5040 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 92 PID 4548 wrote to memory of 5040 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 92 PID 4548 wrote to memory of 5040 4548 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 92 PID 4304 wrote to memory of 4156 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 93 PID 4304 wrote to memory of 4156 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 93 PID 4304 wrote to memory of 4156 4304 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 93 PID 2676 wrote to memory of 3156 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 94 PID 2676 wrote to memory of 3156 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 94 PID 2676 wrote to memory of 3156 2676 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 94 PID 1180 wrote to memory of 2768 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 95 PID 1180 wrote to memory of 2768 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 95 PID 1180 wrote to memory of 2768 1180 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 95 PID 4132 wrote to memory of 2472 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 96 PID 4132 wrote to memory of 2472 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 96 PID 4132 wrote to memory of 2472 4132 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 96 PID 4872 wrote to memory of 2696 4872 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 97 PID 4872 wrote to memory of 2696 4872 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 97 PID 4872 wrote to memory of 2696 4872 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 97 PID 1980 wrote to memory of 3748 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 98 PID 1980 wrote to memory of 3748 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 98 PID 1980 wrote to memory of 3748 1980 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 98 PID 4632 wrote to memory of 212 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 99 PID 4632 wrote to memory of 212 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 99 PID 4632 wrote to memory of 212 4632 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 99 PID 972 wrote to memory of 180 972 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 100 PID 972 wrote to memory of 180 972 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 100 PID 972 wrote to memory of 180 972 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 100 PID 3924 wrote to memory of 3292 3924 6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe 101
Processes
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1980 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4548 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3924 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4304 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:4156 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:1720
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:10840
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:16080
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:21152
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:9304
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:12640
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:1772
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:5804
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:12232
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:17764
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:11476
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"8⤵PID:16516
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:9172
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:12808
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:19360
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:11992
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:16700
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:6656
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:10740
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:15984
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12672
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:4504
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:11960
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:16676
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:11528
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:16588
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:9296
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:20204
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:3276
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:20564
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11180
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16192
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:10748
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16048
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6616
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16620
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9440
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2088 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5004
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:5280
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:12148
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:17528
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:20588
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:9360
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:19344
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:4016
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:8208
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12412
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:17928
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5864
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11968
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16692
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:15644
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:4164
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12736
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19328
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:3292
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12016
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16768
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12188
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:17632
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9344
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:3304
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8032
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11436
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16464
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5872
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12000
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16828
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6672
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16168
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9432
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13832
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:8760
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2676 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3156 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:3396
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:17372
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:15684
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:9416
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12848
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:7880
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:20580
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11272
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16228
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5940
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12180
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:17620
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16200
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9368
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12816
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19420
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:4988
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11572
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16604
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:15800
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9256
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:164
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:3912
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8060
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:20596
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12172
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5964
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11912
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16636
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11460
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16448
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12664
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19996
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5040 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:3736
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12164
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:17472
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11164
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16160
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9264
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:2032
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:7964
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:1084
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8000
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:21112
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11424
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16456
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11944
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16652
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9240
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:1700
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11172
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16184
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9408
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12880
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19916
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:8068
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:20572
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:17380
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11952
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:16668
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9800
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13432
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6584
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9192
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:13440
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:7996
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1180 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4132 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:972 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:180
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:16176
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"7⤵PID:16208
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:9384
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12832
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:20380
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:4896
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16644
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11548
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16596
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:10532
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:15724
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9320
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8792
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:2472
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16684
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11508
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16524
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9280
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13332
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:7876
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:4756
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5840
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11984
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16708
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6648
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11492
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16548
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9424
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13340
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9932
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11112
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16144
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:15880
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9328
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12720
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19352
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4872 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:2696
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:12156
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:17488
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:19380
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9376
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13448
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6004
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:2524
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8336
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12224
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:17688
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11468
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16480
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6624
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:10052
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:8652
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9400
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:20276
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16628
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6808
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:10292
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:15132
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9272
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:20504
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:10060
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13840
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:18584
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13848
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:1472
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:6688
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:16220
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9352
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12696
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:19336
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4632 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4076 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:4376
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5296
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16612
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6608
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:19576
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9200
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12648
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:2060
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:11444
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:16492
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"6⤵PID:15888
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:9168
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19392
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12136
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:17464
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6728
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:10320
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:212
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5288
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:11292
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:16236
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6600
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:19256
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9208
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12680
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:1800
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:20556
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11416
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:17640
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5956
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11976
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:16760
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11484
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:13964
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9336
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12840
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1856 -
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:12024
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:17456
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:20536
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:9288
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12872
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:20080
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:1252
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:8076
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"5⤵PID:20528
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12032
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5856
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11452
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:14396
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:10540
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:15868
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9312
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:3748
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:11936
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:16660
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:12196
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"4⤵PID:19056
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9392
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12824
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:19400
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:1436
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:9448
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12704
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:5924
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:12008
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:17080
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:6720
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:11500
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"3⤵PID:16532
-
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:9248
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:13824
-
-
C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6758b8c285d897ab9aab73a4335b68860dc56ddfcde37ff7a6cd6c2c56e8bd4e_NeikiAnalytics.exe"2⤵PID:2456
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\hardcore [milf] cock sm (Tatjana).mpg.exe
Filesize1.1MB
MD56af1577646a9aa3d1ea0cac7f25918ad
SHA1db3fbe14e7b98807d71b77a37c01a1982c8a936a
SHA25697ba218d939b4dc0609096f54e9b035555cd885c31f7e609b6dcbd3ce15770c2
SHA512a68d587f09a0b3ffca9aad4eee7ade226c624779919b355ea1047e49b98cbc038f291b8bdf5f885f84e0c7d03cf2a583e72711464aad0b0bb6eaef5a7a3b85a8