Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26/06/2024, 00:42
Static task
static1
Behavioral task
behavioral1
Sample
2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
2c38dd36fe478e9fdb59f96f0afc75e0
-
SHA1
bd99d94db9d84e83e9ffcd07f6bf18ac5f7e83e5
-
SHA256
2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0
-
SHA512
a2f6c91800a9a99b6dc49e1f1a1d72fbdf1062d274de33ddb6d59c94d28695d15db937a323425ca987944e573cdc5e0d39271f2df4be9919c155df72aa971774
-
SSDEEP
49152:hfaMapc/G4I+SOzKBsmx5wVP+r+3ibbW9dkQ:QElfsxOVP+G3TT
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 17 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Q: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\T: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\U: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\V: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\G: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\H: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\L: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\M: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\X: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\E: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\Y: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\Z: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\A: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\N: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\R: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\W: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\O: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\P: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\S: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\B: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\I: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\J: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File opened (read-only) \??\K: 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\gay porn catfight feet balls (Christine).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\german animal cumshot licking ash .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\animal kicking full movie upskirt (Jade,Kathrin).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\brasilian hardcore sleeping .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian animal licking black hairunshaved .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\sperm catfight black hairunshaved (Karin,Britney).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\beast animal hidden lady .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\horse girls (Britney).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\danish cumshot [bangbus] latex .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\bukkake hot (!) ash .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\trambling hidden titts swallow .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\italian cumshot catfight ash black hairunshaved (Jenna,Anniston).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\swedish bukkake catfight ejaculation .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\russian fucking full movie girly (Sonja).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\kicking handjob hidden .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\tyrkish cum lesbian .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\spanish beastiality horse [milf] shoes (Christine,Curtney).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\bukkake blowjob big mistress (Kathrin,Sonja).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\african trambling sperm uncut blondie (Ashley).mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\action blowjob catfight (Sonja).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\lingerie beast several models mature .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\trambling bukkake lesbian vagina ejaculation .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\kicking sleeping young .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\danish cum blowjob voyeur castration (Jenna).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\french gang bang action voyeur leather .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\canadian fetish catfight sm .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\brasilian trambling [bangbus] feet upskirt (Jade).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\trambling blowjob several models hotel (Curtney).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\blowjob sperm masturbation gorgeoushorny (Christine).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\swedish beastiality horse [milf] YEâPSè& (Sonja).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\xxx voyeur .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\tyrkish hardcore [free] .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\lesbian fucking big .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\french trambling big YEâPSè& .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\cumshot lingerie hidden balls .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\black fucking beast public mistress .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\horse catfight boobs sm (Karin,Karin).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\british handjob animal catfight mature .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\black lingerie lingerie big .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\brasilian trambling licking 50+ (Curtney).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\xxx sperm lesbian shoes .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\brasilian hardcore gay big legs traffic (Anniston,Christine).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\norwegian animal masturbation girly (Tatjana).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\malaysia lesbian horse several models vagina (Jenna,Sonja).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\xxx beast [free] .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\fetish big titts .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\japanese nude sleeping .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\animal beastiality girls shoes .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\lesbian bukkake lesbian bondage .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\african action sleeping glans 50+ (Jenna,Janette).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\CbsTemp\horse several models titts (Jenna).mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\american beast handjob masturbation (Britney).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\fetish handjob public castration (Curtney,Tatjana).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\sperm sleeping .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\spanish bukkake [free] shoes (Sonja).mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\norwegian trambling nude big wifey (Kathrin,Gina).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\handjob voyeur ash penetration .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\fucking public .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\italian lingerie beast uncut hole wifey .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\security\templates\african porn masturbation hotel .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\asian nude voyeur (Gina).mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\canadian kicking several models (Jade).mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\chinese animal full movie .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\gang bang licking 50+ .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\fetish voyeur ash .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\norwegian lingerie animal masturbation traffic .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\kicking catfight feet granny .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\african lesbian girls legs .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\hardcore voyeur cock mistress (Christine,Sylvia).avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\cumshot lingerie [free] 40+ (Jade).rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\danish cumshot girls hairy .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\brasilian beastiality horse girls feet shoes .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\gang bang handjob full movie YEâPSè& .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\animal [milf] mistress .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\japanese bukkake horse hidden swallow .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\african gay xxx lesbian young .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\kicking hardcore masturbation YEâPSè& (Sonja).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\indian porn big bondage .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\tyrkish trambling horse several models shower .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\black gay hidden .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\british lesbian girls ash .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e5f85095c4bc5d16\norwegian handjob horse [free] lady .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\swedish trambling action sleeping cock black hairunshaved (Tatjana).zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\brasilian hardcore [free] black hairunshaved .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\xxx action hidden titts .mpeg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\handjob gang bang lesbian 40+ .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\italian beastiality public .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\cumshot [milf] .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\chinese lesbian masturbation boobs .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\hardcore cum lesbian feet ash .avi.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\beast [bangbus] lady (Kathrin).mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\canadian gay masturbation nipples mature .mpg.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\canadian horse [milf] .zip.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\kicking beastiality hidden vagina femdom .rar.exe 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2376 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2376 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4728 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4728 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4932 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4932 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4284 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4284 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1884 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1884 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4156 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4156 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4724 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4724 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4276 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4276 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4152 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 4152 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2788 wrote to memory of 1228 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 81 PID 2788 wrote to memory of 1228 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 81 PID 2788 wrote to memory of 1228 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 81 PID 1228 wrote to memory of 1064 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 82 PID 1228 wrote to memory of 1064 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 82 PID 1228 wrote to memory of 1064 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 82 PID 2788 wrote to memory of 3536 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 83 PID 2788 wrote to memory of 3536 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 83 PID 2788 wrote to memory of 3536 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 83 PID 1064 wrote to memory of 4672 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 84 PID 1064 wrote to memory of 4672 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 84 PID 1064 wrote to memory of 4672 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 84 PID 1228 wrote to memory of 2076 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 85 PID 1228 wrote to memory of 2076 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 85 PID 1228 wrote to memory of 2076 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 85 PID 2788 wrote to memory of 1328 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 86 PID 2788 wrote to memory of 1328 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 86 PID 2788 wrote to memory of 1328 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 86 PID 3536 wrote to memory of 4456 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 87 PID 3536 wrote to memory of 4456 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 87 PID 3536 wrote to memory of 4456 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 87 PID 4672 wrote to memory of 2376 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 88 PID 4672 wrote to memory of 2376 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 88 PID 4672 wrote to memory of 2376 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 88 PID 1064 wrote to memory of 4728 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 89 PID 1064 wrote to memory of 4728 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 89 PID 1064 wrote to memory of 4728 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 89 PID 2788 wrote to memory of 4932 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 91 PID 2788 wrote to memory of 4932 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 91 PID 2788 wrote to memory of 4932 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 91 PID 1228 wrote to memory of 4284 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 90 PID 1228 wrote to memory of 4284 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 90 PID 1228 wrote to memory of 4284 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 90 PID 2076 wrote to memory of 1884 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 92 PID 2076 wrote to memory of 1884 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 92 PID 2076 wrote to memory of 1884 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 92 PID 1328 wrote to memory of 4156 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 93 PID 1328 wrote to memory of 4156 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 93 PID 1328 wrote to memory of 4156 1328 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 93 PID 3536 wrote to memory of 4724 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 94 PID 3536 wrote to memory of 4724 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 94 PID 3536 wrote to memory of 4724 3536 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 94 PID 4456 wrote to memory of 4276 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 95 PID 4456 wrote to memory of 4276 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 95 PID 4456 wrote to memory of 4276 4456 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 95 PID 4672 wrote to memory of 4152 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 96 PID 4672 wrote to memory of 4152 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 96 PID 4672 wrote to memory of 4152 4672 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 96 PID 2376 wrote to memory of 3708 2376 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 97 PID 2376 wrote to memory of 3708 2376 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 97 PID 2376 wrote to memory of 3708 2376 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 97 PID 1064 wrote to memory of 4044 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 98 PID 1064 wrote to memory of 4044 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 98 PID 1064 wrote to memory of 4044 1064 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 98 PID 2788 wrote to memory of 2660 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 99 PID 2788 wrote to memory of 2660 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 99 PID 2788 wrote to memory of 2660 2788 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 99 PID 1228 wrote to memory of 2168 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 100 PID 1228 wrote to memory of 2168 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 100 PID 1228 wrote to memory of 2168 1228 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 100 PID 4728 wrote to memory of 1756 4728 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 101 PID 4728 wrote to memory of 1756 4728 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 101 PID 4728 wrote to memory of 1756 4728 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 101 PID 2076 wrote to memory of 424 2076 2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe 103
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2788 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1228 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1064 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4672 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2376 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:3708
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:4852
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:14908
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:21720
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:13656
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:7648
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:8832
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:20388
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:10680
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"9⤵PID:20096
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:13544
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:8004
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:13720
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:7680
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14876
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:21440
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:10872
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:17728
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21688
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:4188
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14300
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:21164
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14980
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:21432
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:10984
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:20144
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14084
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:2152
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13664
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21316
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:6688
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:16628
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10992
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:4484
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13480
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20324
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4152 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:1620
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14220
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:21424
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:5756
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:10976
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14048
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:22064
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:8368
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:14916
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:21696
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:10696
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"8⤵PID:8156
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13536
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14024
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21664
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5764
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13448
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:19896
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:8360
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13832
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10704
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:3608
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13528
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:664
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:15976
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:2712
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13632
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21308
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:8824
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10688
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20372
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13560
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:4420
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14292
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14940
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:9328
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20412
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:11016
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13568
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:6936
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:4676
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:16152
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13392
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:6928
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14956
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10808
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:2692
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:2868
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13624
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7748
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5572
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13512
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7072
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7184
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:12032
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13376
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:19776
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10888
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:18888
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:1896
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:4044
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:3716
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:16712
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:4380
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13900
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10904
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20428
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13360
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:6916
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13768
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:3756
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13808
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21244
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10848
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7836
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14204
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7052
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:2952
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13608
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7700
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7128
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:15160
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10944
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20088
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14056
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21680
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5484
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:16744
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7164
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13840
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7068
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10856
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20332
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21416
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2076 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1884 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:228
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13848
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14040
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21340
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7288
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:16180
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10816
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20136
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13440
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:6924
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13672
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:17580
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5696
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13384
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7916
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7200
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14964
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10864
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:6372
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7076
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:424
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14892
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13736
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21324
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7232
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13792
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7032
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10792
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20404
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:2268
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13648
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:17304
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14988
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13996
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7612
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10896
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13408
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7492
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4284 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5116
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:3184
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13696
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7056
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14032
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21728
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7332
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21400
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10744
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20112
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13456
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:436
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:608
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14212
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:15136
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21448
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7248
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14196
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10832
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20356
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:6544
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:2168
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:4816
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13892
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14972
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7224
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14932
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21608
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10672
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20128
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13600
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:19888
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:3392
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13744
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14884
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:4540
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13784
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7044
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:10840
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13592
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7100
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3536 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4456 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4276 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:13816
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:21204
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:5744
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:16752
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7356
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:14948
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:10768
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20020
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13584
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:8136
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:16720
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:14900
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21228
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7348
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13424
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:1256
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10800
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:8288
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:1092
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7264
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13776
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10776
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:1808
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14172
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21408
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14092
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5668
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10752
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20436
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13496
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7372
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13680
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:6716
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10936
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20348
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14100
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4724 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:1020
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:17024
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13640
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:6984
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7340
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13800
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21220
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10912
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20444
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13980
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5252
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:16000
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14108
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:19484
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7528
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13752
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:6976
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10736
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:18336
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13552
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:19584
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:1976
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:4648
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21632
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5652
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10968
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13432
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7256
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21600
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10720
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13576
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13616
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7784
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5620
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14016
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7380
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13728
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21744
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:10728
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:20420
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:14076
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:21672
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1328 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4156 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:1404
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:15152
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21456
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13488
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:21292
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7324
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:11136
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"7⤵PID:20364
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:13472
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:7064
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10924
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:20120
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:18212
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:15992
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5688
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:10952
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"6⤵PID:3316
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:6452
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7280
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:7664
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10784
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20104
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21284
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:1016
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5012
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:15144
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:22192
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13988
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20824
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7364
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13948
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10712
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20640
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21624
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5032
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13688
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:6564
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10960
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:5096
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:6892
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7192
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13504
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:8664
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:10880
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:20340
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13416
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7912
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4932 -
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:1604
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5124
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:15128
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:5676
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:14924
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:21616
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7312
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:13908
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:10664
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"5⤵PID:20380
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13712
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7460
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:3948
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:16760
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5660
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13760
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7272
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:12500
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:6596
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:10920
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:19944
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13400
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:6500
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:2660
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13704
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:6880
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:14308
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:7768
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:7176
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:13864
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:21332
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:10824
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"4⤵PID:19904
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13520
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:20700
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:3700
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13824
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:17132
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:15984
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:7240
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:6748
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:10760
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"3⤵PID:20396
-
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:14004
-
-
C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2d777a12f1d80948f2dabf6757e943807cd4157481ff2d97e3e1496b4ee82fc0_NeikiAnalytics.exe"2⤵PID:21648
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\swedish bukkake catfight ejaculation .rar.exe
Filesize2.1MB
MD5e485f1dda23b2c756a027db417ac6417
SHA17f9422b2bfb350394d3c65ed6a1f622ceec194e5
SHA256114596136e83f52b952b691d6e9f8e2f6551c5731cf8577a7a0e8c90d0b0d8f6
SHA512573122fc2d5a1d3f69a2ee17bf6a6fa8f8c91977b1dfb9b97b7830e0e62a7dc5e485a36736e685dc5fd2671419faf9236ec6fea4e5d5d866bca618076060ed4b