Analysis
-
max time kernel
16s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 14:26
Static task
static1
Behavioral task
behavioral1
Sample
804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
8c16db72260a8ccfb5587c56caaa42c0
-
SHA1
4210dcd87a5dffe3dcb6f89705b51ff2a1549531
-
SHA256
804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107
-
SHA512
e240f5eefbfc00467776c6f75778670b7def8def261df12bbaf66d5a75048b9811131537738c96b89156b5a9efa2496b1ec8a3d26d3d41f089c0130e8d950eaa
-
SSDEEP
49152:VRxGUGzWy3NYtDSw9tMNRuhX1IpeCaBfiVYuAQ2S8p:9DgJ963efI+peCki6LQOp
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 18 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\B: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\G: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\H: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\T: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\V: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\K: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\M: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\P: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\R: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\S: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\U: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\W: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\Y: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\Z: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\A: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\E: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\J: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\L: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\N: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\O: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\Q: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\I: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File opened (read-only) \??\X: 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\lingerie lesbian .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\bukkake hidden .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\brasilian beastiality bukkake hot (!) shower .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\american animal beast [free] stockings .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\horse [bangbus] (Karin).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\brasilian horse bukkake public .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\lingerie sleeping fishy .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\beast [milf] .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\xxx girls feet (Kathrin,Liz).mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\swedish cumshot blowjob masturbation titts traffic .mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\black beastiality lesbian voyeur ¼ë (Anniston,Curtney).mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\british bukkake big .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Drops file in Program Files directory 20 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\Updates\Download\italian kicking xxx [free] .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lesbian public swallow .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\african sperm [bangbus] balls .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\hardcore sleeping feet latex .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\russian action xxx [free] fishy .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\horse voyeur (Tatjana).mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\italian gang bang horse big high heels .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\brasilian fetish trambling public fishy (Gina,Melissa).zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{012F12C5-F267-46F5-BABE-4C602515640C}\EDGEMITMP_0327D.tmp\japanese nude lingerie [free] titts ash .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\american gang bang trambling licking (Melissa).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\brasilian handjob horse big 40+ (Kathrin,Curtney).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\tyrkish beastiality hardcore uncut hole hairy (Melissa).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\horse sleeping titts ejaculation (Tatjana).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish porn lingerie public black hairunshaved .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\lingerie [bangbus] balls .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\hardcore hot (!) (Jade).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EU8B19.tmp\xxx public .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\american horse lingerie hidden glans .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\brasilian gang bang lingerie masturbation titts shoes .mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish nude beast hidden young .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\porn lingerie hot (!) cock sweet (Tatjana).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\sperm uncut titts .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\spanish trambling big .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\gay several models cock .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\norwegian gay girls .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\black fetish trambling big hole shoes (Karin).mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\german trambling public Ôï .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\swedish handjob beast lesbian cock stockings (Sarah).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\danish porn trambling masturbation (Janette).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\tyrkish cum trambling sleeping redhair .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\black porn hardcore catfight high heels .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\japanese handjob fucking voyeur swallow (Anniston,Curtney).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\chinese lesbian full movie titts .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\beast [free] .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\gang bang trambling [milf] .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\african blowjob masturbation mistress .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\asian lesbian sleeping Ôï .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\handjob fucking lesbian Ôï .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\fucking big boots .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\tyrkish kicking blowjob [milf] hotel .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\gay [milf] lady .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\gang bang fucking catfight balls (Christine,Sarah).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\spanish lingerie hot (!) glans hairy (Janette).zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\swedish cumshot gay [free] titts black hairunshaved .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\lingerie voyeur glans ¤ç (Samantha).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\malaysia trambling hidden feet penetration .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\italian porn gay licking 50+ (Gina,Curtney).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\asian lingerie hot (!) sm .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\asian bukkake big high heels (Sonja,Janette).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\russian cum hardcore lesbian (Janette).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\fetish sperm full movie cock .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\norwegian sperm sleeping glans .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\black cum xxx voyeur feet 40+ (Curtney).mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\horse lingerie masturbation feet .mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\fucking catfight (Tatjana).zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\malaysia lesbian hot (!) balls .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\italian cum lesbian masturbation traffic .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\canadian lesbian full movie sm .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\swedish cumshot horse catfight titts (Kathrin,Janette).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\german hardcore voyeur cock mature .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\brasilian nude lingerie hot (!) hole .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\german trambling hot (!) high heels .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\fetish horse uncut mistress .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_10.0.19041.1_none_ae957c4c35a7bf73\french sperm uncut cock .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\beast hot (!) gorgeoushorny .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\danish nude horse sleeping hole ejaculation .mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\fucking hot (!) titts (Sonja,Jade).avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\xxx big glans hotel .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\beast public .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\black nude sperm masturbation (Melissa).zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\bukkake licking (Samantha).mpg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\beastiality lesbian big hotel (Jenna,Curtney).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\kicking trambling catfight .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\american gang bang xxx public titts lady .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\fucking uncut feet .zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\sperm several models 40+ .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\lesbian [milf] feet circumcision .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\russian beastiality fucking [free] glans .mpeg.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\swedish kicking bukkake catfight black hairunshaved .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\assembly\temp\american porn xxx [milf] upskirt .avi.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\norwegian horse several models shower (Britney,Karin).zip.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\cum sperm sleeping .rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\african trambling voyeur titts lady (Liz).rar.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 396 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 396 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 860 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 860 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4544 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4544 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4132 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4132 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1672 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1672 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 1464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 5096 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 5096 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2436 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 2436 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1180 wrote to memory of 1628 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 86 PID 1180 wrote to memory of 1628 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 86 PID 1180 wrote to memory of 1628 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 86 PID 1180 wrote to memory of 3204 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 87 PID 1180 wrote to memory of 3204 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 87 PID 1180 wrote to memory of 3204 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 87 PID 1628 wrote to memory of 880 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 88 PID 1628 wrote to memory of 880 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 88 PID 1628 wrote to memory of 880 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 88 PID 3204 wrote to memory of 1256 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 93 PID 3204 wrote to memory of 1256 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 93 PID 3204 wrote to memory of 1256 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 93 PID 1628 wrote to memory of 4604 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 94 PID 1628 wrote to memory of 4604 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 94 PID 1628 wrote to memory of 4604 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 94 PID 1180 wrote to memory of 4720 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 95 PID 1180 wrote to memory of 4720 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 95 PID 1180 wrote to memory of 4720 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 95 PID 880 wrote to memory of 2380 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 96 PID 880 wrote to memory of 2380 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 96 PID 880 wrote to memory of 2380 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 96 PID 1256 wrote to memory of 396 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 97 PID 1256 wrote to memory of 396 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 97 PID 1256 wrote to memory of 396 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 97 PID 3204 wrote to memory of 464 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 98 PID 3204 wrote to memory of 464 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 98 PID 3204 wrote to memory of 464 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 98 PID 1628 wrote to memory of 4132 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 99 PID 1628 wrote to memory of 4132 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 99 PID 1628 wrote to memory of 4132 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 99 PID 4604 wrote to memory of 860 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 102 PID 4604 wrote to memory of 860 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 102 PID 4604 wrote to memory of 860 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 102 PID 1180 wrote to memory of 4544 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 101 PID 1180 wrote to memory of 4544 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 101 PID 1180 wrote to memory of 4544 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 101 PID 880 wrote to memory of 1672 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 103 PID 880 wrote to memory of 1672 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 103 PID 880 wrote to memory of 1672 880 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 103 PID 4720 wrote to memory of 1464 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 104 PID 4720 wrote to memory of 1464 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 104 PID 4720 wrote to memory of 1464 4720 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 104 PID 2380 wrote to memory of 5096 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 105 PID 2380 wrote to memory of 5096 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 105 PID 2380 wrote to memory of 5096 2380 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 105 PID 464 wrote to memory of 1176 464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 108 PID 464 wrote to memory of 1176 464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 108 PID 464 wrote to memory of 1176 464 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 108 PID 1256 wrote to memory of 3888 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 106 PID 1256 wrote to memory of 3888 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 106 PID 1256 wrote to memory of 3888 1256 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 106 PID 396 wrote to memory of 3364 396 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 107 PID 396 wrote to memory of 3364 396 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 107 PID 396 wrote to memory of 3364 396 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 107 PID 3204 wrote to memory of 2436 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 109 PID 3204 wrote to memory of 2436 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 109 PID 3204 wrote to memory of 2436 3204 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 109 PID 1180 wrote to memory of 3252 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 110 PID 1180 wrote to memory of 3252 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 110 PID 1180 wrote to memory of 3252 1180 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 110 PID 4604 wrote to memory of 4584 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 111 PID 4604 wrote to memory of 4584 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 111 PID 4604 wrote to memory of 4584 4604 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 111 PID 1628 wrote to memory of 3604 1628 804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe 112
Processes
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1180 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1628 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:880 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2380 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5096 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵
- Checks computer location settings
PID:4196 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:5824
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:8188
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"9⤵PID:23932
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:11004
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"9⤵PID:8724
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:14076
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:6600
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:13956
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:20224
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:8952
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:20256
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:12184
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:13796
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:18220
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:5140
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:1964
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:17144
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:9168
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:11084
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:16748
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:18588
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:6584
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:12144
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:18344
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8748
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9004
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:12360
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9544
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13836
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18312
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:2412
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9092
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:12504
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:13756
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:18328
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:7420
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:19220
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10152
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20272
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14232
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19108
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:5180
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8740
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:24116
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13988
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6544
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:1172
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:25308
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13900
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18400
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8868
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:12100
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13844
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18288
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1672 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:4360
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:6352
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9660
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:23924
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:3084
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:19772
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:16012
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:12712
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10648
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14092
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:4944
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:4872
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:16476
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:12672
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11252
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:21036
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18296
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6568
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11540
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:16940
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13908
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18628
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8920
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21508
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11356
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10096
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13852
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:1988
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:552
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6340
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:9836
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:21052
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13692
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:2448
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:7960
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:16484
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:2360
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10356
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:22592
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14172
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18620
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8668
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21108
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11764
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:25380
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14004
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14212
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19228
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:9272
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20940
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:60
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19252
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4604 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:860 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:2212
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:6360
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9972
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:20232
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:14264
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:1240
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:7880
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10728
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:22344
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14100
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18180
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:21068
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11756
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9384
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13996
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20064
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6536
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11980
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:11196
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13948
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19100
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8644
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:23940
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11832
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13964
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20216
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:9652
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:23532
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13688
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19732
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:7536
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10544
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:17380
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8244
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:23908
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11244
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:23700
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18740
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14288
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:9484
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:21280
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13704
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19212
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4132 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:4276
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10100
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20280
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13696
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18188
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:7632
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:12868
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10656
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18408
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5164
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8432
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21044
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11476
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18144
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14020
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19092
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6552
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:12128
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19140
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8584
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:16860
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:11720
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:24104
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14012
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:4516
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:3604
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:9704
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14296
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18456
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7496
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14804
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10320
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20540
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:1700
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8636
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10208
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:24096
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13740
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:2524
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:3004
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19164
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:9644
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:22600
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:11944
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1256 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:396 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:3364
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:9668
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"8⤵PID:21272
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:3532
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:7480
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:10164
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:4400
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19740
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8252
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:16020
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20264
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11464
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13748
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18336
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6708
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18976
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:9676
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21604
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14328
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19244
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:3888
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:3968
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8968
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:8780
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13820
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:19148
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:7488
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20000
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10536
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20924
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14108
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:15672
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:2908
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:9804
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20948
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18304
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14240
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19236
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:9256
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:21648
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:12572
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13764
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:464 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:1176
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6096
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8680
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20956
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11816
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:25256
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13980
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18236
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:7528
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20048
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10344
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20544
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:2540
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8288
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8816
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11260
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13732
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18152
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7432
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14196
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19764
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:9104
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:21612
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14204
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19072
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2436 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8808
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:23464
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:12016
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:25160
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13860
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18272
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7440
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14876
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20016
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10232
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20288
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14220
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:18212
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8928
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:23524
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:4864
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13828
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:18280
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:7084
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14248
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19188
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:10000
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8888
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:14272
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4720 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1464 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵
- Checks computer location settings
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:5840
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8764
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:5020
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:11848
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"7⤵PID:25216
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13868
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18320
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:9260
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20964
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:12696
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:8784
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13780
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19756
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5124
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:6608
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:12136
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:18352
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8692
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19292
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14280
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19780
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8944
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10564
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13772
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:20056
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:932
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:10036
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:16984
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14304
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:18732
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7504
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:15660
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20040
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10592
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:21012
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:18392
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:8756
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:23992
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19124
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14256
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19116
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:9608
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:18196
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:13724
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:18204
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4544 -
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:1044
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:9828
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"6⤵PID:20972
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:14312
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:20208
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7516
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:16004
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19748
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10364
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:4752
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:5156
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:8904
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:10996
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:23916
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14068
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:18376
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:12004
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19156
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:8936
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:20932
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:12368
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:13804
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:18264
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:6120
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:24008
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:12540
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"5⤵PID:25364
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:13788
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:7936
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:14812
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:23540
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:10928
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:21020
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:14084
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:18748
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:5132
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:7656
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:11108
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"4⤵PID:21060
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:18384
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:6576
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:14320
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:19204
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:8960
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"3⤵PID:21668
-
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:12380
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\804c53d3fc26a4a1976bab9bbd8f293042eb6272cacb06c068c916ba61170107_NeikiAnalytics.exe"2⤵PID:18368
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish nude beast hidden young .avi.exe
Filesize2.0MB
MD53b921ac7db86922c25c69a8a2fd9213f
SHA1aa4e3c6826968c933142543fa0529050526b8c1d
SHA256d238ea5122e3585c1d054298122e0896f58d0a270a06ad59563dac7e79305478
SHA512ba987a4d47bf06538ae2640b2b9a7d6af6bb181571cbf69fb4b152d9ebf366da7ccb2e72a2a97ea096568b1691502716c8480ef9fa73e26f5518fc68db1c3ed1
-
Filesize
146B
MD5ab6d2886078c6e4eb94e72fdce3d8306
SHA1e610375784a20df1caa84f3d91e6ce540c255b2f
SHA25639e1ae762193984f385b99edbb827e3083179a8bf2fd2b115efbea39f75f96b9
SHA512604dbf2650b44baf3820374983829657f2271264a22568b8522dc0f3e1936722a412229ceeab3b77c9ec39a80c68a8d5d855d6a493cd6bb1b111bf3f9fa2bd71