Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/06/2024, 19:33
Static task
static1
Behavioral task
behavioral1
Sample
0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
3c2157d58459ecf3fd177b13f28a0350
-
SHA1
420591e8094be60fbe52e918a5f6fbd85804b85a
-
SHA256
0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32
-
SHA512
5dba105e428ccebe92ff05c634a485c029f3d773f7be151021086e4bdb68df0cedd99c229e884d7a3d966c24e457de4db7a4df712b07ff21e74d235c48141c99
-
SSDEEP
49152:CCocUruXjPtM/+4ov9bybmBkp96cwF4T3QwGKt5/Yn:6truXjK3o12bckp96cZTAwGc5U
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\E: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\K: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\Q: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\U: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\Z: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\I: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\J: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\L: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\O: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\P: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\S: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\W: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\B: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\G: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\H: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\N: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\V: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\X: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\M: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\R: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\T: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File opened (read-only) \??\Y: 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\LogFiles\Fax\Incoming\brasilian fetish sperm [bangbus] titts .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\italian cumshot sperm big (Melissa).zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\italian cumshot xxx [milf] glans .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\swedish gang bang blowjob voyeur titts .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\trambling masturbation .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lingerie girls glans .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\black nude blowjob public fishy .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian cum horse big blondie .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\black cum beast lesbian wifey .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\brasilian cum gay public (Tatjana).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\horse full movie glans .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\blowjob full movie glans .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\tyrkish animal lesbian voyeur glans granny .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\japanese handjob hardcore girls .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\bukkake catfight hotel (Gina,Tatjana).avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\fucking masturbation shoes .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{6BB39B16-79FA-4D8E-BB79-4EFE59F95F66}\EDGEMITMP_509DC.tmp\black kicking lesbian girls feet redhair (Tatjana).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\gay lesbian cock ash (Karin).zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\brasilian action trambling [free] glans .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\horse girls cock .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\fucking masturbation glans traffic (Melissa).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\sperm sleeping feet girly (Tatjana).avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\norwegian fucking catfight feet stockings .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\lesbian voyeur balls .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\italian cum blowjob catfight latex .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\swedish horse beast uncut glans (Gina,Sylvia).avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\italian animal lesbian hot (!) balls .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\gay voyeur (Liz).rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\indian fetish xxx sleeping feet .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\black nude beast licking hotel .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\american nude beast catfight titts .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\bukkake catfight titts .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish cum lingerie masturbation feet 40+ (Sarah).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\hardcore public cock .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\tyrkish horse fucking [milf] shoes .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\american nude blowjob full movie .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\black cum bukkake [free] .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\japanese cumshot gay catfight blondie .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\russian cumshot xxx public YEâPSè& .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\german hardcore hot (!) penetration .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\spanish blowjob [free] beautyfull .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\asian trambling masturbation (Karin).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\malaysia lesbian [milf] .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\french gay lesbian latex .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\japanese beastiality fucking masturbation (Sarah).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\sperm hidden titts .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\japanese action xxx [milf] titts .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\blowjob [free] titts .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\assembly\temp\lesbian licking hole .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\security\templates\american gang bang hardcore hidden .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\fucking licking upskirt (Britney,Samantha).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\action blowjob [bangbus] leather .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\french fucking girls (Sylvia).zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\chinese trambling sleeping hotel .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\trambling masturbation cock .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\indian handjob hardcore sleeping (Tatjana).zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\xxx [bangbus] (Janette).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\fucking catfight feet .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\kicking lesbian lesbian swallow .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\american animal sperm public .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\lesbian masturbation (Karin).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\asian blowjob [milf] (Liz).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\danish kicking sperm uncut .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\beast catfight young .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\italian kicking bukkake [free] titts .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\bukkake licking glans .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\black kicking sperm big .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\chinese fucking hidden glans high heels .mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\german fucking sleeping (Jade).avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\brasilian cumshot lesbian several models cock ejaculation (Curtney).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\kicking sperm public (Melissa).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\spanish hardcore public young (Jenna,Jade).zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\horse blowjob hot (!) .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\horse beast full movie hole .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\italian horse lingerie masturbation bondage .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\japanese animal horse hot (!) fishy .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\danish horse horse several models cock .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\CbsTemp\sperm [milf] feet young .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\lingerie full movie beautyfull .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\american nude sperm [free] femdom .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\asian hardcore public boots .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\malaysia lingerie public hotel .mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\beast lesbian hole 50+ (Jade).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\animal xxx [bangbus] (Janette).rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\american animal trambling hot (!) .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\blowjob catfight feet circumcision (Janette).rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\bukkake several models granny .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\blowjob voyeur hotel (Kathrin,Melissa).mpeg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\fucking [milf] blondie .avi.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\japanese cumshot bukkake several models glans circumcision (Melissa).mpg.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish gang bang sperm hidden hole circumcision .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\lingerie hidden cock mistress (Tatjana).rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\action gay masturbation swallow .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\chinese fucking catfight cock sweet .zip.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\japanese porn bukkake sleeping feet bondage .rar.exe 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4196 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3152 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3152 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4196 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3336 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3336 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4044 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4044 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3752 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3752 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4108 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 4108 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1436 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1436 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3172 wrote to memory of 3556 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 88 PID 3172 wrote to memory of 3556 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 88 PID 3172 wrote to memory of 3556 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 88 PID 3556 wrote to memory of 3624 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 89 PID 3556 wrote to memory of 3624 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 89 PID 3556 wrote to memory of 3624 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 89 PID 3172 wrote to memory of 464 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 90 PID 3172 wrote to memory of 464 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 90 PID 3172 wrote to memory of 464 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 90 PID 3556 wrote to memory of 1808 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 94 PID 3556 wrote to memory of 1808 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 94 PID 3556 wrote to memory of 1808 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 94 PID 3172 wrote to memory of 1896 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 95 PID 3172 wrote to memory of 1896 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 95 PID 3172 wrote to memory of 1896 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 95 PID 464 wrote to memory of 3984 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 96 PID 464 wrote to memory of 3984 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 96 PID 464 wrote to memory of 3984 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 96 PID 3624 wrote to memory of 1080 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 97 PID 3624 wrote to memory of 1080 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 97 PID 3624 wrote to memory of 1080 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 97 PID 3556 wrote to memory of 3152 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 100 PID 3556 wrote to memory of 3152 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 100 PID 3556 wrote to memory of 3152 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 100 PID 1808 wrote to memory of 4196 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 101 PID 1808 wrote to memory of 4196 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 101 PID 1808 wrote to memory of 4196 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 101 PID 3172 wrote to memory of 3336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 102 PID 3172 wrote to memory of 3336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 102 PID 3172 wrote to memory of 3336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 102 PID 1896 wrote to memory of 4044 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 103 PID 1896 wrote to memory of 4044 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 103 PID 1896 wrote to memory of 4044 1896 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 103 PID 464 wrote to memory of 3752 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 104 PID 464 wrote to memory of 3752 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 104 PID 464 wrote to memory of 3752 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 104 PID 3624 wrote to memory of 4808 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 105 PID 3624 wrote to memory of 4808 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 105 PID 3624 wrote to memory of 4808 3624 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 105 PID 3984 wrote to memory of 4108 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 106 PID 3984 wrote to memory of 4108 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 106 PID 3984 wrote to memory of 4108 3984 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 106 PID 1080 wrote to memory of 1436 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 107 PID 1080 wrote to memory of 1436 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 107 PID 1080 wrote to memory of 1436 1080 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 107 PID 3556 wrote to memory of 1536 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 110 PID 3556 wrote to memory of 1536 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 110 PID 3556 wrote to memory of 1536 3556 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 110 PID 3172 wrote to memory of 2336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 109 PID 3172 wrote to memory of 2336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 109 PID 3172 wrote to memory of 2336 3172 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 109 PID 1808 wrote to memory of 1756 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 111 PID 1808 wrote to memory of 1756 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 111 PID 1808 wrote to memory of 1756 1808 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 111 PID 4196 wrote to memory of 2572 4196 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 112 PID 4196 wrote to memory of 2572 4196 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 112 PID 4196 wrote to memory of 2572 4196 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 112 PID 3152 wrote to memory of 1600 3152 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 113 PID 3152 wrote to memory of 1600 3152 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 113 PID 3152 wrote to memory of 1600 3152 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 113 PID 3336 wrote to memory of 3736 3336 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 114 PID 3336 wrote to memory of 3736 3336 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 114 PID 3336 wrote to memory of 3736 3336 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 114 PID 464 wrote to memory of 5028 464 0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3172 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3556 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3624 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1080 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1436 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:5176
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:11052
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:15228
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:7172
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:8492
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:9068
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:18428
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:12704
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:11036
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:15212
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:16992
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:8964
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:19436
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:17320
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6708
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:10676
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:22296
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:14944
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:18876
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7116
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:17048
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9020
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:8016
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17704
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:4392
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6316
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:11076
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:17972
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:2296
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:21332
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7164
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:16132
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:22084
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9100
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:15172
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12768
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17788
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10644
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:22048
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14596
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:19608
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16140
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:22024
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9140
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:1520
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:18828
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4808 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5192
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6240
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:10620
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:22008
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:14580
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:3744
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:16496
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:12440
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:20640
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12744
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17756
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5320
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:9444
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:21232
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:13712
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:19284
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7068
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:14952
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:20444
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9116
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:19328
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16976
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:22288
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14572
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:19648
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7100
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16520
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12468
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9036
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14360
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:18636
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:1796
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6268
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10704
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:22000
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15124
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14704
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5076
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16956
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9052
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7336
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:12664
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17736
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:21636
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7244
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16220
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:22040
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8932
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17176
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1808 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4196 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6172
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:11068
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:5032
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:21316
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:16172
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:10912
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9240
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:7008
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:12936
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:18524
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10636
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15028
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:3720
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:11012
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15220
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15248
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7076
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15492
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:11644
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:20836
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6464
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6468
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10696
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:10984
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15016
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:4428
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:2332
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16004
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10652
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:21308
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:12752
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17656
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14872
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7276
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16164
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:22068
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9004
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:2588
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:12760
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:724
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:10556
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:21696
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:1940
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:8052
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7108
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16212
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:22032
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8924
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12108
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:16900
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3152 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6488
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10384
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:21992
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14304
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7960
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17000
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9012
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14112
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:12632
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17648
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:10684
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:21644
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15036
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:14396
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:2372
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:8168
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17016
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8916
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:16908
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:1536
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6456
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11092
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17684
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15264
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:21292
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7148
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16012
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8980
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:21284
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12612
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17640
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:11044
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17716
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:15448
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:21484
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:7060
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:14864
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:20324
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:3200
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:12956
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5020
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:464 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3984 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4108 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:10376
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"8⤵PID:21688
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:14328
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:9176
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:16984
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:9028
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:14220
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:13068
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:18684
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10448
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:22056
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:14428
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:18548
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7228
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17040
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9744
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15308
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13976
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:8012
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:4944
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:11060
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:12420
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15256
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:21216
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17528
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:8988
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17944
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:12792
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:18464
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11576
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15484
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16400
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7180
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15592
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7924
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8940
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:14012
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12344
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:16844
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3752 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5184
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10312
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:15340
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:13968
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:6984
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:15500
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16396
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:9360
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:20848
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6544
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11604
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15684
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16924
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7196
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17008
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9420
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:22212
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:13936
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6936
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5028
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15820
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16612
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:4332
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:17032
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9792
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:20648
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:13692
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:10148
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:20664
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:18268
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:7316
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:9060
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7520
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:12624
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:17632
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1896 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4044 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:4792
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:6448
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:10300
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"7⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:13944
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7644
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:16504
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:17968
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:8996
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"6⤵PID:7356
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13076
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:18644
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:10528
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:14588
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19544
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7236
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16968
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9452
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:20656
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:13804
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:4408
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6328
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11020
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15204
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:21224
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:924
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:13248
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:18820
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9092
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:20684
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12736
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17764
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9220
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19444
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12784
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17624
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:7308
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17168
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:14808
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:17520
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3336 -
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:3736
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:11444
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15236
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:15392
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:7204
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:16148
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:22144
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:9228
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19404
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17772
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8956
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"5⤵PID:19336
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:12564
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17328
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:7264
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:16652
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:18080
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:8948
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:19416
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:12328
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:16836
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:11436
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:15508
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:16464
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:7188
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17024
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:9764
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:20504
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:13928
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:6908
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:11084
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:8508
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:15368
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:21340
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:11028
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"4⤵PID:17372
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:2068
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:21324
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:7084
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:16156
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:22076
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:9108
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"3⤵PID:12152
-
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:12776
-
-
C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0ea46663782208fb0926e6bd8b6f2fe0a8c3b1b0c38072dba1b4c370cf3cea32_NeikiAnalytics.exe"2⤵PID:17780
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3980,i,13281073920029625837,8253721632651544158,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:81⤵PID:3240
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\brasilian action trambling [free] glans .zip.exe
Filesize1.7MB
MD54465f73ee70e4c73cea848e00796e08a
SHA1f3a0018d8dcc05645b39187f752e344c4d578869
SHA256135fb70fc6edaf4bd5a3407affd5ce47536f1e525628d6036f8f27d50cb1d270
SHA5126f506de88f3ab99e6642acc86683bb4b7f3b21b22ca98fd28eb0bff2f05f201055b04e6264b73bce7a67ae0d98d7abc88ae02094c061125c68264979b226c928