Analysis
-
max time kernel
148s -
max time network
55s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 13:20
Static task
static1
Behavioral task
behavioral1
Sample
99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe
-
Size
495KB
-
MD5
34e47bcc8587cee1f231c1a8c77d2db0
-
SHA1
d583dd6af91babe860ef2126b3558659c1036e14
-
SHA256
99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee
-
SHA512
bb57fee6ae85c72a0fbee9af0d5ac45e5439adf988d34671451acb7d60af1aee01e4a38ce03732458e4e8a845812bc71446c462ce1613d75261802fb049c656c
-
SSDEEP
12288:A//vi9B1CSCu46FURKa8ORQUgtFx+ASx0PqL6WW7qwRArFS:2w3sAaXunn+wQFS
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\O: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\S: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\X: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\I: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\J: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\L: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\M: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\G: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\K: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\T: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\V: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\B: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\E: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\H: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\R: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\U: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\W: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\Y: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\A: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\N: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\P: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\Q: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File opened (read-only) \??\Z: 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\SHARED\swedish fucking hidden young .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\italian cum public (Sonja).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\african lesbian horse big feet (Britney).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\chinese fetish kicking big .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\danish horse lesbian several models beautyfull (Anniston,Liz).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\animal handjob catfight cock (Gina).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\gang bang trambling uncut boobs ash (Christine).mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese nude kicking public ash .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\canadian action [milf] stockings .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\french nude public .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\italian cum [free] (Sandy,Sylvia).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\german trambling catfight glans .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Microsoft\Temp\brasilian gang bang hot (!) redhair (Britney).mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\malaysia handjob [milf] feet .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese handjob uncut .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\canadian horse catfight cock (Sylvia).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\indian blowjob fetish catfight granny .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\black beast licking latex (Anniston,Jenna).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\indian handjob [milf] circumcision .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\canadian kicking lesbian voyeur 40+ .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\russian bukkake cumshot hot (!) .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\tyrkish fetish fetish hot (!) boots .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\malaysia hardcore kicking [bangbus] (Melissa,Sandy).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\handjob several models .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\russian gay gay voyeur glans traffic .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\black lingerie [free] .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\tyrkish gang bang [free] femdom (Christine,Jenna).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\action hidden .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\malaysia horse lesbian girls shoes (Gina,Kathrin).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\african lesbian hot (!) young .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\mssrv.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\danish horse big (Karin).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\russian cumshot uncut shoes .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\african gang bang hardcore [free] (Tatjana,Ashley).rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\porn public boobs fishy .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\canadian nude uncut lady .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\french gang bang uncut leather .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\swedish blowjob cum big legs castration .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\asian action nude hot (!) ash (Liz,Karin).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\german handjob hidden wifey .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\porn masturbation hotel (Britney).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\black porn porn public beautyfull .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\lesbian bukkake public hole wifey .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\gay lingerie big hole ¼ë (Curtney).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\indian beastiality [milf] .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\danish fetish hardcore full movie feet (Jade).rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\nude voyeur glans mature .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\american bukkake lesbian black hairunshaved .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\xxx hardcore [free] traffic .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\german lingerie trambling several models nipples (Sonja,Liz).mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\beastiality gang bang public vagina hairy (Kathrin,Sandy).mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\chinese beastiality horse [milf] high heels .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\american gang bang public redhair .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\fucking porn [milf] .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\malaysia xxx voyeur hole mistress .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\gang bang nude big legs black hairunshaved .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\french kicking horse uncut leather .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\horse beastiality [bangbus] vagina sm .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\bukkake porn uncut hole lady .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\security\templates\asian lingerie cumshot voyeur gorgeoushorny .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\bukkake hidden 50+ .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\norwegian hardcore hot (!) circumcision (Samantha,Liz).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\canadian handjob voyeur glans femdom (Christine).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\cum uncut ejaculation .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\black lesbian masturbation (Janette,Sylvia).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\chinese gang bang beastiality public .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\british kicking masturbation stockings .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\french animal action hidden shower (Anniston).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\american beast licking mature .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\CbsTemp\tyrkish lingerie hidden black hairunshaved .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\xxx porn licking titts young (Jenna,Ashley).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\german horse beastiality hot (!) .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\brasilian lingerie horse masturbation .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\russian lesbian sperm big legs (Tatjana).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\hardcore catfight gorgeoushorny .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\porn girls (Tatjana).zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\lingerie gang bang licking high heels .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\blowjob animal hidden .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\german gang bang big beautyfull .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\cumshot fetish public .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\nude cumshot catfight swallow .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\tyrkish bukkake hidden ash .avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\cumshot [free] glans blondie .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\tyrkish blowjob animal hot (!) nipples (Sylvia).mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\russian beastiality [free] .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\horse trambling catfight .mpg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\norwegian beastiality gay big balls .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\indian cumshot uncut titts high heels .rar.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\chinese bukkake kicking full movie (Anniston,Tatjana).avi.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\indian action nude big .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\german handjob bukkake masturbation leather .zip.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\bukkake girls glans redhair .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\xxx bukkake [free] hole mistress .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\british beast licking gorgeoushorny .mpeg.exe 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1676 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1676 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4924 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4924 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3388 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3388 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1632 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1632 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2932 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2932 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2096 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2096 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1924 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 1924 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2364 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 2364 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4468 wrote to memory of 4200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 82 PID 4468 wrote to memory of 4200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 82 PID 4468 wrote to memory of 4200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 82 PID 4200 wrote to memory of 2292 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 83 PID 4200 wrote to memory of 2292 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 83 PID 4200 wrote to memory of 2292 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 83 PID 4468 wrote to memory of 3192 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 84 PID 4468 wrote to memory of 3192 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 84 PID 4468 wrote to memory of 3192 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 84 PID 2292 wrote to memory of 4456 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 85 PID 2292 wrote to memory of 4456 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 85 PID 2292 wrote to memory of 4456 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 85 PID 4200 wrote to memory of 4180 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 86 PID 4200 wrote to memory of 4180 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 86 PID 4200 wrote to memory of 4180 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 86 PID 4468 wrote to memory of 2708 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 87 PID 4468 wrote to memory of 2708 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 87 PID 4468 wrote to memory of 2708 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 87 PID 3192 wrote to memory of 4936 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 88 PID 3192 wrote to memory of 4936 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 88 PID 3192 wrote to memory of 4936 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 88 PID 4456 wrote to memory of 4924 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 89 PID 4456 wrote to memory of 4924 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 89 PID 4456 wrote to memory of 4924 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 89 PID 4200 wrote to memory of 1676 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 90 PID 4200 wrote to memory of 1676 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 90 PID 4200 wrote to memory of 1676 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 90 PID 2292 wrote to memory of 3388 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 91 PID 2292 wrote to memory of 3388 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 91 PID 2292 wrote to memory of 3388 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 91 PID 4468 wrote to memory of 1200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 92 PID 4468 wrote to memory of 1200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 92 PID 4468 wrote to memory of 1200 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 92 PID 3192 wrote to memory of 1632 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 93 PID 3192 wrote to memory of 1632 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 93 PID 3192 wrote to memory of 1632 3192 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 93 PID 2708 wrote to memory of 2932 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 94 PID 2708 wrote to memory of 2932 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 94 PID 2708 wrote to memory of 2932 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 94 PID 4180 wrote to memory of 2096 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 95 PID 4180 wrote to memory of 2096 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 95 PID 4180 wrote to memory of 2096 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 95 PID 4936 wrote to memory of 1924 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 96 PID 4936 wrote to memory of 1924 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 96 PID 4936 wrote to memory of 1924 4936 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 96 PID 4200 wrote to memory of 2364 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 97 PID 4200 wrote to memory of 2364 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 97 PID 4200 wrote to memory of 2364 4200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 97 PID 4468 wrote to memory of 4112 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 98 PID 4468 wrote to memory of 4112 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 98 PID 4468 wrote to memory of 4112 4468 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 98 PID 2292 wrote to memory of 1320 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 99 PID 2292 wrote to memory of 1320 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 99 PID 2292 wrote to memory of 1320 2292 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 99 PID 4456 wrote to memory of 2720 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 100 PID 4456 wrote to memory of 2720 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 100 PID 4456 wrote to memory of 2720 4456 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 100 PID 1200 wrote to memory of 4860 1200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 101 PID 1200 wrote to memory of 4860 1200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 101 PID 1200 wrote to memory of 4860 1200 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 101 PID 2708 wrote to memory of 1508 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 102 PID 2708 wrote to memory of 1508 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 102 PID 2708 wrote to memory of 1508 2708 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 102 PID 4180 wrote to memory of 5032 4180 99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe 103
Processes
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4468 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4200 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2292 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4456 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4924 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:4212
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:8864
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"9⤵PID:17196
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:11948
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:15532
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:21532
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:17576
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:13820
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:21244
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11812
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15300
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:13348
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:4012
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:8760
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:16300
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11972
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15384
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:14092
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:5988
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:12228
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15768
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:7988
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17568
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15776
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:2720
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:9368
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:16452
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11796
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15236
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:14076
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:6668
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9712
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:13844
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:19072
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11700
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15524
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11624
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5048
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8268
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16404
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12060
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12204
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15344
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14024
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17132
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15336
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14028
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3388 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:8856
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:17592
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11916
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15428
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:14124
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:6608
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17860
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16972
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11836
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15760
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:2820
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17220
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12020
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15620
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12236
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15840
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:7612
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16928
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12300
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15596
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11548
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:1320
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9164
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17236
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11868
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15468
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6708
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17584
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9584
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:13828
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11748
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15816
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:4700
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17244
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11964
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15516
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16880
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12172
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13156
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14008
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7656
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17180
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12156
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15644
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:21876
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4180 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2096 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:4508
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:8892
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:17600
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11940
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:14356
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:14064
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:6660
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17140
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9276
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16436
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11780
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15444
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14216
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:3524
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8280
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17844
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11980
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15540
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11556
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6004
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12260
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15492
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:13284
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17164
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12108
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15572
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:10744
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5032
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5528
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9156
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17252
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15880
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:21228
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9560
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16964
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11732
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15352
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13640
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:3152
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12028
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15276
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13972
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5964
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15204
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14000
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7720
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16996
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12132
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15368
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:3760
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1676 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:1616
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9212
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16292
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14116
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17640
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8924
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15824
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11932
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15784
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:4036
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8256
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17648
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11988
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15740
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12220
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15392
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13928
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:19064
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15800
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2364 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5512
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8956
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17124
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11908
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15376
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13896
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15604
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6224
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:9316
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17632
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11828
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15244
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:13460
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:4996
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:8664
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17228
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12004
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15548
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:21288
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:5924
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12164
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15628
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:22132
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:7744
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:17536
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:11676
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15260
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:13428
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3192 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4936 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1924 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:4740
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:5488
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:13744
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"8⤵PID:19040
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:11740
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:15268
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:6620
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17204
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:9204
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:13836
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:5604
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11860
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15228
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:13476
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:16492
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11668
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15460
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16048
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5908
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:12180
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11648
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14016
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:7676
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16460
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12124
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16144
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5072
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8916
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17188
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11876
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15904
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6740
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16152
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9460
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:13752
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11820
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15484
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14032
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:4072
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8564
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17868
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11996
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15292
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13332
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11660
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15832
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7700
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16476
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15580
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1632 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:3156
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8908
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:17624
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11892
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16396
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:16980
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9508
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11756
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15316
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14112
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:2300
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8476
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17876
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12036
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15916
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5956
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12308
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15808
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7708
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16420
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12148
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15500
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:14272
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:4648
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8900
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:4136
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15696
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:6684
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16988
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:9336
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13768
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:19096
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11804
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15660
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:22064
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:1400
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16428
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12292
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15564
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:14288
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:5940
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12212
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15588
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:16616
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15284
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:13316
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2708 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2932 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:1420
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:8948
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:13232
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"7⤵PID:18176
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:11900
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15452
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:15968
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:6676
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17148
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9552
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14068
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:4556
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11772
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15252
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13444
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:8600
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:17548
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12012
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15416
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13288
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5996
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:12252
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15668
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7736
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17156
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12140
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15324
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:13528
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:1508
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5544
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9752
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:21628
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11716
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:14456
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13856
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17004
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17852
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11764
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15476
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:14224
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:4108
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16444
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12052
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15888
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12196
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15408
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:14100
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:7684
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:16484
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:12100
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15308
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:4860
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:9048
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"6⤵PID:18048
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:11884
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:15636
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:21652
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:7108
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:16412
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:9592
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17260
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11724
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15896
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:4168
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:8816
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:17172
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11956
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15400
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:14424
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:5892
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12188
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15612
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:7728
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:16468
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:11684
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15220
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:13492
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:4112
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:9760
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:13760
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"5⤵PID:2728
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:11708
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:15792
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:6648
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:17616
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:9284
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15212
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:13496
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:7384
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:16956
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:10520
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"4⤵PID:12680
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:11692
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:13564
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:15508
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"3⤵PID:17212
-
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:15556
-
-
C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\99c1b28f6c3db44a1ababd090c224477cdd366925979aa64a116751e896cc0ee_NeikiAnalytics.exe"2⤵PID:14284
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese handjob uncut .avi.exe
Filesize610KB
MD5f6e2a40b74e157430e2028fe32910594
SHA1125378cbb02ebe534b3b9daf29aef961a4c48581
SHA25611b18801e9f306f9003a36e2d4ef1adc447fb0fe3a776e7fe526d5f46bd89ca2
SHA5123c82517e23e954273c4a5a3d970ce44ea816db39147a9f05cebfc1fafec33821ea2e8794e09f49184a7f662b7203bcc894dd1106b0e7d3ad82c4760099d14a90