Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 14:40
Behavioral task
behavioral1
Sample
9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
a4a389517378993704fe37c57e4c2ef0
-
SHA1
5de1f42d1a41fc845d35c509bdeeff31c650c9c7
-
SHA256
9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4
-
SHA512
f7892ea2c5abd9ccd2aad58e79860fff2ba64c2d6d4d43edf369e5b87d70711755934e9c944bf11cbf9da25b4f1e344f6e9b25c3804160164b7ff9ce3a606467
-
SSDEEP
24576:lYpiFSNxjuKsv89u+S8s/Z5PyO7/YUz+NYoySQ+sLWf2rRj9fv/rN:qpaSNxuKsvija1yu+dy5z3DN
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 13 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4676-0-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/files/0x00070000000233fe-5.dat upx behavioral2/memory/2536-111-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1300-163-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4156-165-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3180-182-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3152-183-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/228-184-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2840-185-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3900-186-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1124-189-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2992-188-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3476-187-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2288-191-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4676-190-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2536-192-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3012-193-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1300-194-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1256-196-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/732-195-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4156-198-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2308-199-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3320-201-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3180-200-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2844-203-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3152-202-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2840-205-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4704-206-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3900-207-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4452-215-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2152-214-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2288-216-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3012-218-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2132-217-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1124-213-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2992-212-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3476-211-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4964-210-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1064-209-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1476-208-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/228-204-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4092-219-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/732-220-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2188-222-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1256-221-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4484-224-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2308-223-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3320-225-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3964-227-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2844-226-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4580-247-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4092-248-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4784-255-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3548-254-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2280-253-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3648-252-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/876-251-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2360-250-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2364-249-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2132-246-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4884-245-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2152-243-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4964-241-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1476-239-0x0000000000400000-0x0000000000456000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\X: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\Y: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\K: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\L: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\S: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\W: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\Q: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\T: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\J: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\N: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\R: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\U: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\E: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\G: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\H: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\I: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\V: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\Z: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\P: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\A: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\B: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\M: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File opened (read-only) \??\O: 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\SHARED\tyrkish gang bang blowjob [bangbus] hole .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\danish cumshot lesbian [milf] hole hotel .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\lesbian big glans (Sonja,Jade).zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\gay several models .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\lingerie several models .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\italian porn lesbian catfight penetration .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian porn lesbian full movie swallow .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\swedish action gay [milf] .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\horse full movie high heels .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\brasilian fetish lesbian [milf] feet sm .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\bukkake several models cock .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\gay sleeping titts .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Temp\fucking hidden hole blondie .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\japanese handjob lingerie girls latex .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\japanese animal xxx full movie pregnant .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\horse [free] (Karin).avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\indian action lingerie [milf] granny .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\american beastiality gay hot (!) wifey (Sonja,Sarah).avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\japanese beastiality beast [free] ejaculation .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\danish horse beast [bangbus] black hairunshaved .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\italian beastiality sperm masturbation .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\swedish horse blowjob uncut feet swallow .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\brasilian action lingerie girls sm .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\beast [milf] (Sylvia).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\xxx licking .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\danish animal blowjob lesbian castration .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish horse fucking big mature .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\swedish animal xxx full movie shoes .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\russian gang bang lesbian public feet fishy .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\tyrkish horse xxx big hole .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\fetish hardcore sleeping (Liz).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\cum lingerie voyeur hole sm (Liz).mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\cum xxx several models .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\asian fucking full movie fishy .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\hardcore full movie 40+ .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\assembly\temp\american cumshot horse [free] sm .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\swedish kicking fucking several models (Melissa).avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\russian cum sperm full movie glans .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\swedish kicking horse voyeur blondie (Jenna,Jade).zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\tyrkish cum sperm hot (!) hole .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\xxx hot (!) glans .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\tyrkish beastiality beast uncut circumcision (Sonja,Tatjana).zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\cum bukkake [free] glans upskirt (Janette).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\bukkake masturbation titts high heels .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\spanish sperm [milf] sm .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\cumshot hardcore several models .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\norwegian horse hidden glans .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\fucking licking (Sarah).mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\asian sperm hot (!) glans .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\cum hardcore catfight feet .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\CbsTemp\indian gang bang horse [free] traffic .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\brasilian porn bukkake public .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\brasilian animal gay hot (!) ash .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\indian fetish blowjob [bangbus] cock Ôï .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\black animal xxx masturbation young (Kathrin,Samantha).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\action bukkake [free] titts mistress .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\japanese gang bang xxx sleeping .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\nude bukkake masturbation hole mistress (Tatjana).mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\swedish fetish hardcore uncut .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\nude lesbian lesbian hole redhair .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\american fetish horse big titts .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\tyrkish cum bukkake hidden (Sylvia).avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\malaysia beast voyeur penetration .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\indian action lesbian several models 50+ .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\swedish handjob trambling full movie YEâPSè& .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\horse hardcore catfight .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\nude horse girls .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\german trambling uncut .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\british horse voyeur (Curtney).zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\spanish lingerie catfight (Tatjana).zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\horse hot (!) titts blondie .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\security\templates\trambling hot (!) .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\spanish trambling [milf] beautyfull .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\black cumshot hardcore [free] glans mature (Janette).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\canadian horse catfight .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\brasilian fetish trambling uncut feet ash (Samantha).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\beast hidden cock young (Liz).rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\african gay catfight hole circumcision (Jade).rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\trambling catfight 50+ .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\horse [free] pregnant .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\canadian lesbian lesbian glans YEâPSè& .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\hardcore full movie boots .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\russian fetish lesbian licking hole .mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\japanese animal blowjob lesbian hole redhair (Curtney).mpeg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\norwegian hardcore [bangbus] titts .avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\african trambling uncut ash .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\gay girls shoes (Christine,Tatjana).avi.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\kicking beast masturbation lady .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\brasilian gang bang horse hot (!) 50+ .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_72a319bf8ee74a9b\blowjob masturbation .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\asian trambling catfight .zip.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\british fucking public 40+ .mpg.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\beastiality blowjob hidden cock .rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_3d077a9cd5de5151\british lingerie [free] (Jade).rar.exe 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3900 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3900 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3476 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3476 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2992 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2992 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1124 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1124 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2288 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2288 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3012 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 3012 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 732 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 732 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1256 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 1256 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4676 wrote to memory of 2536 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 80 PID 4676 wrote to memory of 2536 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 80 PID 4676 wrote to memory of 2536 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 80 PID 4676 wrote to memory of 1300 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 81 PID 4676 wrote to memory of 1300 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 81 PID 4676 wrote to memory of 1300 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 81 PID 2536 wrote to memory of 4156 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 82 PID 2536 wrote to memory of 4156 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 82 PID 2536 wrote to memory of 4156 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 82 PID 1300 wrote to memory of 3180 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 83 PID 1300 wrote to memory of 3180 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 83 PID 1300 wrote to memory of 3180 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 83 PID 4676 wrote to memory of 3152 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 84 PID 4676 wrote to memory of 3152 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 84 PID 4676 wrote to memory of 3152 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 84 PID 2536 wrote to memory of 228 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 85 PID 2536 wrote to memory of 228 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 85 PID 2536 wrote to memory of 228 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 85 PID 4156 wrote to memory of 2840 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 86 PID 4156 wrote to memory of 2840 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 86 PID 4156 wrote to memory of 2840 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 86 PID 1300 wrote to memory of 3900 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 87 PID 1300 wrote to memory of 3900 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 87 PID 1300 wrote to memory of 3900 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 87 PID 4676 wrote to memory of 3476 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 88 PID 4676 wrote to memory of 3476 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 88 PID 4676 wrote to memory of 3476 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 88 PID 3180 wrote to memory of 2992 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 89 PID 3180 wrote to memory of 2992 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 89 PID 3180 wrote to memory of 2992 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 89 PID 3152 wrote to memory of 1124 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 90 PID 3152 wrote to memory of 1124 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 90 PID 3152 wrote to memory of 1124 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 90 PID 4156 wrote to memory of 2288 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 91 PID 4156 wrote to memory of 2288 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 91 PID 4156 wrote to memory of 2288 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 91 PID 2536 wrote to memory of 3012 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 92 PID 2536 wrote to memory of 3012 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 92 PID 2536 wrote to memory of 3012 2536 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 92 PID 228 wrote to memory of 732 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 93 PID 228 wrote to memory of 732 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 93 PID 228 wrote to memory of 732 228 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 93 PID 2840 wrote to memory of 1256 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 94 PID 2840 wrote to memory of 1256 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 94 PID 2840 wrote to memory of 1256 2840 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 94 PID 3900 wrote to memory of 2308 3900 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 95 PID 3900 wrote to memory of 2308 3900 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 95 PID 3900 wrote to memory of 2308 3900 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 95 PID 1300 wrote to memory of 3320 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 96 PID 1300 wrote to memory of 3320 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 96 PID 1300 wrote to memory of 3320 1300 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 96 PID 3152 wrote to memory of 2844 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 97 PID 3152 wrote to memory of 2844 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 97 PID 3152 wrote to memory of 2844 3152 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 97 PID 3180 wrote to memory of 2492 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 98 PID 3180 wrote to memory of 2492 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 98 PID 3180 wrote to memory of 2492 3180 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 98 PID 4676 wrote to memory of 4704 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 99 PID 4676 wrote to memory of 4704 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 99 PID 4676 wrote to memory of 4704 4676 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 99 PID 3476 wrote to memory of 1476 3476 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 100 PID 3476 wrote to memory of 1476 3476 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 100 PID 3476 wrote to memory of 1476 3476 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 100 PID 4156 wrote to memory of 1064 4156 9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe 101
Processes
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4676 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4156 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2840 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1256 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:2284
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"9⤵PID:20824
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:11192
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:14720
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:9564
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:20136
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:6008
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:10164
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:15428
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:17112
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:2280
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:8988
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:11592
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:15348
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:21148
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:3132
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:16720
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:8024
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:16216
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12220
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:2152
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:5488
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:14828
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:16792
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:12008
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:16704
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:6740
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:16728
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:8256
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:14220
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:992
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11332
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15544
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20888
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:1644
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:7896
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:17048
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11136
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15384
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20912
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:17012
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7180
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20128
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:10084
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11232
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15052
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9176
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2288 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:5744
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:14020
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"8⤵PID:13296
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:12360
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:17228
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:16920
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9756
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11252
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15616
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20896
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:7732
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:20152
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:10376
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11224
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15136
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:3104
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11700
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15764
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:8100
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:7224
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12252
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16956
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:1064
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:7204
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11720
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16612
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20088
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5840
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:10368
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11600
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:21124
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:4884
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:8844
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14240
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:13096
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12056
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:17460
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6096
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:14088
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11504
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8040
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:14776
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16396
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16240
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:228 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:732 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:3964
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:9212
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:11348
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:15452
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:20856
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9092
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11988
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16696
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:3800
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9020
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11160
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:13664
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:17300
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:4280
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11684
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15624
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7784
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14272
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:13172
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12172
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:17212
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:4452
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9140
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:19284
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11324
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15472
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20808
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16208
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:10036
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11240
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16380
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:21140
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:4784
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7912
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12344
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6120
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11664
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15784
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8016
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6284
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:17204
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3012 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9068
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:13468
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:12748
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:17040
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16736
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9516
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11152
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:18252
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:1464
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7968
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14676
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16268
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11216
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20752
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2656
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11708
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15924
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8084
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16272
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12284
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16988
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:5672
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9060
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14264
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12716
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11168
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15152
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:18332
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16744
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8700
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11176
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:14632
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:10532
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:3228
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:9036
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11284
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15392
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20768
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12516
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:17004
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:8032
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16712
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:12260
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:16924
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1300 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3180 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2992 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:4092
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:9748
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:2856
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:15676
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:20840
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:17136
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:10172
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:17028
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:2240
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:3096
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:12768
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16972
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:400
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:12124
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6944
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:19268
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:17332
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2492
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:21116
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11276
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15376
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20736
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:7200
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7276
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11144
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15128
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20600
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2364
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:7904
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16164
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:17220
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11964
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16224
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12268
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16980
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3900 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2308
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5572
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"7⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11396
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16932
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:8372
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11268
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15368
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20760
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:3648
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:8996
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14960
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:16808
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11828
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15316
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6080
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12328
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:17020
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:7992
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15796
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11200
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15144
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20904
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:3320
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:5760
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:14668
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15884
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11184
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15176
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16888
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:9252
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:19276
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8004
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15568
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20800
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:876
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8644
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15536
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20872
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11584
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15560
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20792
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:8068
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:17244
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:11208
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:15060
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:20728
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3152 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1124 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:2132
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:9728
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:15576
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:20848
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:17196
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:8368
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9440
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20864
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:824
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9012
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:4460
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11316
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15520
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:21060
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:3384
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11692
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20832
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:7064
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16232
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12200
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:17236
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:2844
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9004
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"6⤵PID:10876
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:10548
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:15184
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20744
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16964
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:13656
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:12732
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11356
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15552
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20784
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:2360
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8412
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:14684
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16252
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16940
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:6128
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15528
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20776
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:4264
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:11300
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:15444
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:20924
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3476 -
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:1476
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:9204
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:11308
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:16372
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20100
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11340
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15460
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:20880
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:3548
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:8108
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"5⤵PID:20144
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:17156
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:6136
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:11612
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15964
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:8092
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16156
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:12236
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:16900
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:4704
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:9716
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:10156
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:15324
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:16200
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:4828
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:21404
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:11292
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:15632
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:21108
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:4580
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:8628
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:1940
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"4⤵PID:13496
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:11640
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:15776
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:19292
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:8076
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"3⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:12228
-
-
C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9cb99c4aace85e8b077275f5874bfc7c9eca492356b69d240ea33381c03052f4_NeikiAnalytics.exe"2⤵PID:19124
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\swedish horse blowjob uncut feet swallow .zip.exe
Filesize1.5MB
MD5f4fd57a14427a3b6ccc5d202e084c8c7
SHA181bf5618395698d95f69377db06b77bd8d4cc3f3
SHA256d559e1e34599a2f9f76e0e6f2699509bc18f0d72fbcf2af34c10db88935f6ef4
SHA5126d3cdaad8fdb1928a931b18881a8e9b93c19e1c57c2e6f5c0d3a112fd04d551430f2d53e69addf6362e6fd47d5c5fca790854617f61cb14edb09dc9d105013f8