Analysis
-
max time kernel
16s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-06-2024 17:08
Behavioral task
behavioral1
Sample
93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe
-
Size
693KB
-
MD5
6808ee01a4d124805b545d05bfc371d0
-
SHA1
294335ba9c7e98515e54745e6cdb4574057bbe7d
-
SHA256
93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075
-
SHA512
9802e03379514ba6edcdbdc8d68488801c4bb3c7c2bde706466551cc6d7647fa03c974c85c5e1dd236c34704eb321b93e9ec1036738c448a8694f3e8fde7d24b
-
SSDEEP
12288:lEQoSfqDqLquiacYv6QVr8Qq1ZAZSNXsxcrdjnW5dbS8j8FrY9MAI+GNvtH5:lxOXaIDAQBnhbW55njf9M5jn
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1828-0-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/files/0x00070000000233f5-5.dat upx behavioral2/memory/4200-72-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3880-160-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3420-161-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3292-179-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5112-181-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1336-180-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4476-182-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4116-183-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3068-184-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1572-186-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2732-185-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2952-187-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1784-189-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1828-188-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/548-191-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4200-190-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3880-192-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4000-193-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3928-196-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3420-195-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3292-198-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/876-197-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1336-199-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5112-200-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2280-203-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2732-207-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/432-206-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3068-205-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4116-204-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4476-202-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2176-201-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1644-210-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2928-212-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2952-211-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3344-214-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1784-213-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2368-217-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3948-219-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4000-218-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4960-216-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/548-215-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2652-209-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1572-208-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2944-221-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3928-220-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1112-223-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4196-225-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/876-224-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3436-222-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1168-230-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2280-231-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1036-234-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/432-232-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2176-229-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2652-237-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3040-236-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/676-235-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/376-233-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1788-242-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3864-241-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2384-240-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1884-239-0x0000000000400000-0x0000000000456000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\N: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\S: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\T: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\V: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\I: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\J: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\K: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\Q: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\P: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\U: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\B: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\G: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\H: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\L: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\M: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\O: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\X: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\Z: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\A: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\E: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\R: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\W: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File opened (read-only) \??\Y: 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\LogFiles\Fax\Incoming\beast hot (!) balls (Ashley,Liz).avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\russian horse beast full movie .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\russian action lesbian [free] titts redhair (Sarah).avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\xxx lesbian .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\lesbian masturbation cock .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\tyrkish gang bang xxx uncut (Liz).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\black handjob blowjob [bangbus] .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lesbian catfight sweet (Christine,Sylvia).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\beastiality lingerie [free] glans shoes .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\japanese cumshot xxx hot (!) stockings .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\american cum beast sleeping glans ΋ .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish nude fucking hot (!) shower .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\blowjob hot (!) (Jade).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\blowjob [free] .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\russian kicking sperm uncut ¼ë .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\swedish animal gay public (Liz).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\russian animal lingerie [free] .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\gay [free] cock .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\gay [bangbus] feet .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\bukkake uncut feet .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\tyrkish action bukkake girls YEâPSè& .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\american cumshot sperm catfight feet sweet .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\swedish horse beast [free] traffic .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\american cum gay [milf] wifey .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\sperm big wifey .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian porn fucking lesbian boots .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\russian handjob bukkake public glans balls (Samantha).avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\american nude lesbian hot (!) wifey .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\swedish horse xxx public hotel .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\danish beastiality blowjob several models cock .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\hardcore uncut .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\black handjob trambling licking titts (Sonja,Liz).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\indian animal blowjob sleeping (Sarah).mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\danish animal xxx [free] boots (Ashley,Samantha).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\danish horse trambling [bangbus] feet penetration .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\beastiality beast voyeur cock .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\handjob fucking full movie fishy .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\beast several models feet granny .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\sperm uncut (Liz).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\norwegian bukkake [milf] feet .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\spanish bukkake hot (!) .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\italian cum gay masturbation upskirt (Sonja,Samantha).mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\gay [bangbus] .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\sperm voyeur hole wifey .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\canadian horse masturbation hairy (Kathrin,Karin).mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\gang bang hardcore uncut glans latex .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\cum trambling hot (!) cock .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\lingerie uncut .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\japanese horse xxx several models .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\brasilian cum bukkake masturbation 50+ .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\brasilian cum sperm full movie (Sylvia).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\beastiality beast girls glans castration (Sarah).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\CbsTemp\blowjob uncut .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\indian handjob blowjob [milf] hole (Sonja,Tatjana).avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\chinese beast several models ash .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\british horse several models glans (Britney,Karin).mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\german blowjob masturbation feet (Ashley,Melissa).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\chinese gay voyeur .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\canadian blowjob big mistress (Ashley,Liz).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\handjob lingerie several models (Melissa).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondownloads_31bf3856ad364e35_10.0.19041.1_none_a914e3e3f19ceda1\asian sperm public cock pregnant (Melissa).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\african sperm girls circumcision .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\lingerie girls (Tatjana).rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\trambling full movie boots .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\french fucking sleeping granny .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\spanish xxx [free] leather .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\japanese kicking gay licking black hairunshaved .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\horse [bangbus] hole wifey .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\trambling big hole young .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\gay catfight titts (Sonja,Janette).mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\black fetish trambling girls pregnant .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\assembly\temp\swedish gang bang gay voyeur glans castration (Tatjana).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\horse public wifey (Jenna,Sylvia).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\gang bang bukkake masturbation mature .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\malaysia sperm hot (!) girly .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\tyrkish kicking lesbian girls hole 50+ .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\british gay uncut .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\lesbian hidden hole sm .avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\sperm several models .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\hardcore girls penetration .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\horse xxx catfight sweet .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\beastiality lingerie sleeping .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\german lesbian sleeping hole granny (Jade).zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\russian nude lingerie catfight mature .mpg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\cum trambling [free] gorgeoushorny (Jenna,Samantha).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\norwegian horse public titts .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\porn trambling [free] .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\xxx girls stockings .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\hardcore masturbation .rar.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\italian kicking sperm hidden hole leather .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\indian cumshot lingerie full movie .mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\fucking hidden (Sylvia).mpeg.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\danish fetish beast public .zip.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\african sperm catfight cock (Jenna,Liz).avi.exe 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4116 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4116 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3068 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3068 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 2732 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 2732 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1572 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1572 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 2952 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 2952 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1784 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 1784 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 548 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 548 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4000 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4000 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3928 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 3928 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1828 wrote to memory of 4200 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 81 PID 1828 wrote to memory of 4200 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 81 PID 1828 wrote to memory of 4200 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 81 PID 4200 wrote to memory of 3880 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 82 PID 4200 wrote to memory of 3880 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 82 PID 4200 wrote to memory of 3880 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 82 PID 1828 wrote to memory of 3420 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 83 PID 1828 wrote to memory of 3420 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 83 PID 1828 wrote to memory of 3420 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 83 PID 3880 wrote to memory of 3292 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 84 PID 3880 wrote to memory of 3292 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 84 PID 3880 wrote to memory of 3292 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 84 PID 1828 wrote to memory of 1336 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 85 PID 1828 wrote to memory of 1336 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 85 PID 1828 wrote to memory of 1336 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 85 PID 4200 wrote to memory of 5112 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 86 PID 4200 wrote to memory of 5112 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 86 PID 4200 wrote to memory of 5112 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 86 PID 3420 wrote to memory of 4476 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 87 PID 3420 wrote to memory of 4476 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 87 PID 3420 wrote to memory of 4476 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 87 PID 3292 wrote to memory of 4116 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 88 PID 3292 wrote to memory of 4116 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 88 PID 3292 wrote to memory of 4116 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 88 PID 3880 wrote to memory of 3068 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 89 PID 3880 wrote to memory of 3068 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 89 PID 3880 wrote to memory of 3068 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 89 PID 1336 wrote to memory of 2732 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 91 PID 1336 wrote to memory of 2732 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 91 PID 1336 wrote to memory of 2732 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 91 PID 1828 wrote to memory of 2952 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 92 PID 1828 wrote to memory of 2952 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 92 PID 1828 wrote to memory of 2952 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 92 PID 4200 wrote to memory of 1572 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 90 PID 4200 wrote to memory of 1572 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 90 PID 4200 wrote to memory of 1572 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 90 PID 3420 wrote to memory of 1784 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 93 PID 3420 wrote to memory of 1784 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 93 PID 3420 wrote to memory of 1784 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 93 PID 5112 wrote to memory of 548 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 94 PID 5112 wrote to memory of 548 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 94 PID 5112 wrote to memory of 548 5112 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 94 PID 4476 wrote to memory of 4000 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 95 PID 4476 wrote to memory of 4000 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 95 PID 4476 wrote to memory of 4000 4476 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 95 PID 3292 wrote to memory of 3928 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 96 PID 3292 wrote to memory of 3928 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 96 PID 3292 wrote to memory of 3928 3292 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 96 PID 3880 wrote to memory of 876 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 97 PID 3880 wrote to memory of 876 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 97 PID 3880 wrote to memory of 876 3880 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 97 PID 4116 wrote to memory of 2176 4116 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 98 PID 4116 wrote to memory of 2176 4116 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 98 PID 4116 wrote to memory of 2176 4116 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 98 PID 1828 wrote to memory of 2280 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 100 PID 1828 wrote to memory of 2280 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 100 PID 1828 wrote to memory of 2280 1828 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 100 PID 4200 wrote to memory of 432 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 99 PID 4200 wrote to memory of 432 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 99 PID 4200 wrote to memory of 432 4200 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 99 PID 1336 wrote to memory of 2652 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 101 PID 1336 wrote to memory of 2652 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 101 PID 1336 wrote to memory of 2652 1336 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 101 PID 3420 wrote to memory of 1644 3420 93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe 102
Processes
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1828 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4200 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3880 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3292 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4116 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:2176
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:5808
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:11484
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"9⤵PID:23264
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:14196
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:17020
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:14292
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:19024
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:23644
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14392
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:7612
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:3040
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:7888
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:6720
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:11428
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:18488
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:12128
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:23620
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:13872
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6796
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14704
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:19256
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:9400
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14432
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19080
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:3928 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:9904
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:23636
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:2380
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:15940
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:20528
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:23500
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13852
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:4156
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:376
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6308
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:10836
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14236
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:19008
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:1160
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:4656
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:8208
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:3648
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6044
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14608
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:22800
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13828
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7652
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9068
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14624
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5636
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3068 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:12120
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14092
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:5648
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:15932
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:20492
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10168
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:17008
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13868
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:18588
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:1788
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7060
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:17092
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:16964
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10676
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14252
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14640
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:22808
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14260
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19128
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9408
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14488
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:20544
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:876
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5484
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10872
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:16984
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14076
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5500
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13820
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19324
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6728
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14512
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:1144
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10448
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23612
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:7472
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6600
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14584
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:23032
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5080
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16992
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14648
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5112 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:548 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:2944
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:12144
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:23464
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14108
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:5608
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:16700
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:20476
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10036
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14456
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19796
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4440
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7900
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:11744
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:8128
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7108
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:2616
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9140
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14368
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19348
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:2928
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5760
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:12556
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13984
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:8000
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:16568
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23144
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9876
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14448
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19096
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:2236
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:15908
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:20276
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9564
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14480
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19152
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6396
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:11604
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23596
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:18984
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16536
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19184
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1572 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:1112
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:12104
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:23216
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14100
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:3212
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6948
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:16560
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:22828
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10020
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23492
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14424
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19120
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:676
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:11784
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:23628
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7952
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14316
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19064
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9200
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:212
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:12092
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14048
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:2120
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:3896
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6828
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:17392
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16976
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:7072
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14568
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19208
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:432
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5784
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10228
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4784
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16544
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9660
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:23456
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5072
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:7592
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:2384
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5744
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:10148
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:1040
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:13908
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:4600
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:13976
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14300
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19232
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:7424
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14536
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:19744
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3420 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4476 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4000 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:12136
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"8⤵PID:23208
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:14084
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:4872
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:15892
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10176
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14400
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:4472
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:2244
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:11100
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14228
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19040
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:15900
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19316
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9208
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23580
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14616
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19224
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5692
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:10280
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14212
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:3104
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:16636
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23024
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9960
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23444
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14440
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19104
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:7828
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:17076
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:16988
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9436
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14344
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19332
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9928
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14220
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:18960
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6740
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:12552
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19056
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:24380
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:13900
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:4428
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1784 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:3436
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:11456
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14172
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:19000
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:17128
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:20900
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10056
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14384
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:7628
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:1168
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:11752
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"7⤵PID:23248
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:4908
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6788
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:14324
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:6040
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9416
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14504
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19192
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:9908
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23240
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14204
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5068
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16552
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:22848
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:8200
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14544
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:1644
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4900
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14632
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6616
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9976
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14408
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19112
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:1036
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6268
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:13860
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:4028
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6764
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:17068
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:22840
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9356
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14520
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:13476
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:7140
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14284
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14464
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:19136
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1336 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2732 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:4960
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:5816
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:4660
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:13808
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:7596
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:7492
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14552
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:7908
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:11628
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23232
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:18968
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6368
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:10620
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:16380
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14244
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:18992
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14268
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19168
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:8664
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:23588
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14560
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:2652
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:12060
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23224
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14308
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:19048
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:9392
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14472
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19160
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6656
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:13836
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:6496
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:8480
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:23472
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:11344
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:23604
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14068
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:220
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:5576
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:12332
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:13996
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5652
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:6748
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14276
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19088
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:15452
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:13292
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2952 -
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:3948
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:11596
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"6⤵PID:23508
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:1772
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:16648
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:10012
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14416
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19072
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:2264
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:15884
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"5⤵PID:20472
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:10136
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14352
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:19340
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:17084
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:16968
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:9260
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:23256
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14360
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:7764
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:2280
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:14332
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:21460
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:20536
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:23516
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:1768
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:1884
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:17060
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:16960
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:10236
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14376
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:7648
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:11760
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"4⤵PID:23380
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:8308
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"3⤵PID:4272
-
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:9376
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:14496
-
-
C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\93988976e752029fcc67dae65503d08028e202c79d02e7145af2cd47b40f1075_NeikiAnalytics.exe"2⤵PID:19144
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian porn fucking lesbian boots .avi.exe
Filesize820KB
MD5e4a2ff64cc21d2faa51d720513762079
SHA1ea9d7dde893160832268726af185c47fe8c4520c
SHA2562171a18bbd433f27c7ba8e2ffba66aee36945c8ab34d81655f8aa526fa191ec2
SHA512812fb3ab12bb83e9f6032fc818c25c34ab8c38b4d7e6c29cacc319bb362208c3493a54abcd27a357d680f731c988a3000b4d13aa6482132f4eac3e26e59fc08a
-
Filesize
146B
MD5f89ef4260391b2cfa9254664ab5b95b4
SHA12619e3898d8385e14ebf15d61488c297ade599af
SHA256778843149a4d05d5faa65a5ccd5d0d5bcd75ce08e488f5217569f90497a1159d
SHA51232505e1c1a102e839c7e4e9adcff075b937cb4c58cd5da9a09808e85ef224fbb11febcf06f90e1b798ca9d3fe0a5d290f9d1dd84720cc57286de13be131f58f3