Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
29/06/2024, 09:09
Behavioral task
behavioral1
Sample
92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
17a0700e7617fd8c881240e6ffb08ab0
-
SHA1
43f10e0aa633cffa8d9cce59b180d34be29bcea5
-
SHA256
92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62
-
SHA512
b7f4b92126ca75cb83be80c7bbaf5f86d1540823a3ca2e0e6e500ddbf4d9e98017e8f04abf29820648129e6a047d17c0de86c24575a14542f7a8db0c5e0862a8
-
SSDEEP
24576:lJpvLitaW4+a6GqaUB1cagibr2vL7XAC06svyx5dHdAFw3wUYGclD3PI9yeRRII:fpfd76Btc2eMLyZHO+ADXbPI9FRh
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1656-0-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/files/0x00070000000233ed-5.dat upx behavioral2/memory/2116-84-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2232-154-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4716-155-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2880-174-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4268-175-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4316-176-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1848-177-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4700-178-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4132-179-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4980-181-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1656-180-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4724-183-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2232-185-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4396-186-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1404-188-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1896-189-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4716-187-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3108-184-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2116-182-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4472-192-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2880-191-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4268-193-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4316-195-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1108-194-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4656-196-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1848-197-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4764-202-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4792-201-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2108-200-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/2408-199-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/316-198-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4356-206-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4980-207-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1876-208-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4724-209-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5184-211-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/3108-210-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4132-205-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4700-203-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/396-204-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5300-217-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1404-215-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/1896-216-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5352-219-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4472-218-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5228-214-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5196-213-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/4396-212-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5456-235-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5196-243-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5512-249-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5480-248-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5472-247-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5544-246-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5528-245-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5228-244-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5536-242-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5520-241-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5504-240-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5496-239-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5488-238-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral2/memory/5184-237-0x0000000000400000-0x0000000000456000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\L: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\M: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\N: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\Q: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\V: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\A: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\B: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\J: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\T: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\U: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\W: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\I: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\O: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\P: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\X: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\Y: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\Z: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\E: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\G: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\H: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\K: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\R: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File opened (read-only) \??\S: 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\chinese xxx full movie sweet (Jade).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\danish cum [free] glans ash .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\trambling blowjob uncut .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\gay licking fishy (Sylvia,Sonja).mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\tyrkish horse full movie mistress .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\norwegian beast trambling lesbian boots (Jenna,Sonja).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\kicking beastiality uncut 40+ .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast kicking several models hole boots .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\spanish handjob voyeur gorgeoushorny .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\kicking cumshot big cock swallow .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\american kicking hardcore uncut titts .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish blowjob hidden upskirt .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\danish lesbian hidden femdom .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\german gay kicking girls titts (Karin,Kathrin).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\brasilian animal big .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\fetish [bangbus] hairy (Janette).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\horse full movie cock bondage .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\sperm catfight vagina .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\cum lesbian public leather .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\cum fucking full movie ash (Sarah,Gina).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\spanish cum beastiality sleeping .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\indian handjob masturbation femdom .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\nude masturbation .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\handjob bukkake several models titts (Sonja,Janette).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\swedish bukkake several models feet .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\french bukkake sperm public castration .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\sperm xxx catfight .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\chinese sperm several models titts girly .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\trambling licking swallow (Curtney).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\temp\gay [bangbus] 50+ .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\french kicking beastiality several models bedroom .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\gang bang action lesbian leather .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\fetish catfight (Jenna).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\malaysia lingerie blowjob sleeping ash .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\russian xxx handjob full movie .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\asian bukkake animal big gorgeoushorny .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\russian lingerie fucking licking .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\canadian lingerie lesbian bondage .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\african xxx hidden .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\chinese gang bang sleeping .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\animal full movie 40+ .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\russian trambling horse big feet gorgeoushorny (Gina,Curtney).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\porn [bangbus] vagina boots .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\italian sperm public granny .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\CbsTemp\black beast big 40+ (Christine).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\gang bang porn sleeping ash .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondownloads_31bf3856ad364e35_10.0.19041.1_none_a914e3e3f19ceda1\american nude sleeping swallow .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\russian sperm several models .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\indian trambling big .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\tyrkish horse fucking sleeping .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\horse fetish hidden upskirt (Samantha,Sarah).mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\german cum licking nipples circumcision (Melissa,Melissa).zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\fucking full movie mistress (Kathrin).rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\indian beastiality animal sleeping beautyfull .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\fetish bukkake lesbian .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\danish action sperm licking .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_10.0.19041.1_none_ae957c4c35a7bf73\gay kicking sleeping leather .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\fetish handjob voyeur legs .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\black beast lesbian uncut nipples ash .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\italian fetish uncut .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_3d077a9cd5de5151\indian cumshot fetish public (Sandy).rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\spanish cum hot (!) .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\norwegian beast sperm lesbian .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\blowjob bukkake [milf] .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\trambling hidden feet beautyfull .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\chinese fetish [bangbus] legs bondage .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\sperm [bangbus] (Liz).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\tyrkish gang bang catfight .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\gay horse [milf] (Liz).rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\malaysia bukkake bukkake sleeping .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\fucking beast hidden feet (Britney).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\lesbian sperm [milf] ejaculation .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\indian lingerie licking vagina .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\lesbian [milf] (Britney).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\indian action handjob voyeur circumcision .rar.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\bukkake uncut .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\norwegian horse action masturbation black hairunshaved (Janette).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\lingerie masturbation .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\lesbian xxx big (Kathrin,Sonja).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\tyrkish lesbian gang bang [bangbus] granny .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\cumshot big .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\action uncut vagina lady .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\swedish handjob girls hole fishy (Ashley,Gina).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\british kicking beastiality masturbation stockings .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\american blowjob cum hot (!) boobs 40+ .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\gang bang fucking several models titts 50+ (Sandy).avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\indian trambling lesbian legs mature .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\indian gang bang beast hidden nipples .mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\russian sperm horse [milf] bedroom (Sonja,Melissa).mpg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\american action blowjob [milf] mature (Tatjana,Janette).mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_72a319bf8ee74a9b\french kicking [milf] lady .avi.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\gay full movie bedroom .zip.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\fetish public vagina high heels .mpeg.exe 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4700 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4700 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4132 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4132 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4980 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4980 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 3108 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4724 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 3108 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4724 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4396 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4396 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1896 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1896 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1404 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1404 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4472 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 4472 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1656 wrote to memory of 2116 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 86 PID 1656 wrote to memory of 2116 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 86 PID 1656 wrote to memory of 2116 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 86 PID 2116 wrote to memory of 2232 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 90 PID 2116 wrote to memory of 2232 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 90 PID 2116 wrote to memory of 2232 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 90 PID 1656 wrote to memory of 4716 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 91 PID 1656 wrote to memory of 4716 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 91 PID 1656 wrote to memory of 4716 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 91 PID 2232 wrote to memory of 2880 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 93 PID 2232 wrote to memory of 2880 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 93 PID 2232 wrote to memory of 2880 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 93 PID 2116 wrote to memory of 4268 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 94 PID 2116 wrote to memory of 4268 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 94 PID 2116 wrote to memory of 4268 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 94 PID 1656 wrote to memory of 4316 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 95 PID 1656 wrote to memory of 4316 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 95 PID 1656 wrote to memory of 4316 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 95 PID 4716 wrote to memory of 1848 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 96 PID 4716 wrote to memory of 1848 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 96 PID 4716 wrote to memory of 1848 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 96 PID 2232 wrote to memory of 4700 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 98 PID 2232 wrote to memory of 4700 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 98 PID 2232 wrote to memory of 4700 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 98 PID 2116 wrote to memory of 4132 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 99 PID 2116 wrote to memory of 4132 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 99 PID 2116 wrote to memory of 4132 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 99 PID 2880 wrote to memory of 4980 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 100 PID 2880 wrote to memory of 4980 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 100 PID 2880 wrote to memory of 4980 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 100 PID 4268 wrote to memory of 4724 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 101 PID 4268 wrote to memory of 4724 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 101 PID 4268 wrote to memory of 4724 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 101 PID 1656 wrote to memory of 3108 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 102 PID 1656 wrote to memory of 3108 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 102 PID 1656 wrote to memory of 3108 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 102 PID 4716 wrote to memory of 4396 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 103 PID 4716 wrote to memory of 4396 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 103 PID 4716 wrote to memory of 4396 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 103 PID 1848 wrote to memory of 1404 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 104 PID 1848 wrote to memory of 1404 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 104 PID 1848 wrote to memory of 1404 1848 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 104 PID 4316 wrote to memory of 1896 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 105 PID 4316 wrote to memory of 1896 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 105 PID 4316 wrote to memory of 1896 4316 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 105 PID 2232 wrote to memory of 4472 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 108 PID 2232 wrote to memory of 4472 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 108 PID 2232 wrote to memory of 4472 2232 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 108 PID 4700 wrote to memory of 1108 4700 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 109 PID 4700 wrote to memory of 1108 4700 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 109 PID 4700 wrote to memory of 1108 4700 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 109 PID 2116 wrote to memory of 4656 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 110 PID 2116 wrote to memory of 4656 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 110 PID 2116 wrote to memory of 4656 2116 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 110 PID 4716 wrote to memory of 316 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 111 PID 4716 wrote to memory of 316 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 111 PID 4716 wrote to memory of 316 4716 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 111 PID 2880 wrote to memory of 2108 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 112 PID 2880 wrote to memory of 2108 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 112 PID 2880 wrote to memory of 2108 2880 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 112 PID 1656 wrote to memory of 2408 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 113 PID 1656 wrote to memory of 2408 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 113 PID 1656 wrote to memory of 2408 1656 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 113 PID 4268 wrote to memory of 4792 4268 92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe 114
Processes
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1656 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2116 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2232 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2880 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4980 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:6636
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:10276
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:14836
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:20192
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:8712
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:5684
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:11660
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:16244
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:7492
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:14756
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:20536
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:8904
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:5992
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:12380
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:17496
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:17932
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8784
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:17240
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:2108
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:9892
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"8⤵PID:5772
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:13212
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:7744
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:20504
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8920
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:12100
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15440
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:9256
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:12904
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:18824
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15096
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20208
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8816
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:16380
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4700 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:1108
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6404
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:10096
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:14580
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19368
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:17904
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:2792
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:9540
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15576
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21664
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:5968
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8616
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:11488
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15660
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21612
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7116
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20512
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8832
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21436
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:16404
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:4472 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6416
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:10176
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:13008
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19060
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8536
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19664
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11268
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15700
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21672
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5544
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8632
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11812
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15624
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7148
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14788
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:20184
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8864
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12108
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:15616
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4268 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4724 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:1876
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:11000
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:14552
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:11564
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:16272
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:18756
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:11276
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15788
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21988
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8720
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:6732
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:11804
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:16224
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:17924
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8800
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12020
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14908
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:4792
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8968
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:5716
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:12992
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7320
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19656
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8624
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19648
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11996
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15724
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8744
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11696
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15444
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18252
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21460
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12428
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:17304
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4132 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:4356
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6504
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:14352
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20304
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8664
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21468
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15636
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8680
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19672
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11348
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15876
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21980
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7440
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18356
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8896
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12060
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:15608
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:4656
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:6376
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:10224
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5808
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:3204
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8016
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14500
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19396
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8324
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18604
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:11356
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:15552
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:9264
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:5528
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7988
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15884
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21972
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8952
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12404
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:17192
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:14672
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:20176
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8824
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:21420
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:12012
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:15628
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4716 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1848 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1404 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5352
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:10492
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:15328
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:1508
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8000
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:13700
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19100
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8332
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:18672
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:10664
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15560
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:9660
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:10512
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:8760
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15892
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:22004
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:14464
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5168
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8768
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11548
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:16180
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:4764
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6220
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:10232
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:5744
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19232
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:18288
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8944
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21452
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12584
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:2752
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5488
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8068
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:14648
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20136
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8340
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:18536
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11176
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15652
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7060
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18544
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8808
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12332
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:17020
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4396 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6236
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:10020
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"7⤵PID:5624
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19076
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:14764
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20528
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8928
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:19724
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12412
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:17140
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:7568
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:15152
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:21408
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8912
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14536
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:17952
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8792
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12028
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:16372
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:316
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:6396
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:10016
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15568
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21680
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14656
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:20152
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8316
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18580
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:2828
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:15644
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:5512
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8776
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12004
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:16092
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:7184
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:18268
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8888
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:20128
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:16984
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4316 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1896 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:11072
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:3736
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5360
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8640
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:5832
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11756
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:16188
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:18528
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"6⤵PID:20144
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:12052
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15148
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14340
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8752
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6260
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:11300
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:17528
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:396
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:6228
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8604
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:7852
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:14928
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8936
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:21428
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12036
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:14960
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8736
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8120
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:11796
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:16208
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:7080
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:14776
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:20496
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8848
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:21444
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:15476
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3108 -
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:5184
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:15160
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:8160
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8656
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:18912
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:11536
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:15904
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:22012
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:8728
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:20160
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12576
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:18280
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:14664
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:20168
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8856
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:16432
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:2408
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:6492
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:9984
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"5⤵PID:6036
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:19068
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8648
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:19712
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:11668
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:16196
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:8672
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"4⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:11688
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:16216
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:7192
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:13620
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"3⤵PID:19256
-
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:8880
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:12324
-
-
C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92385ec9bdc503608b66e50a120a3f6ac226ef4d8998e84a2efdaee47f8d6b62_NeikiAnalytics.exe"2⤵PID:17232
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\danish lesbian hidden femdom .avi.exe
Filesize1.3MB
MD5a44492fdd772692c77215d176bdf15da
SHA19ba95de65b9d824bf58ef0cda4f599034c2205f8
SHA256c3cd37031ba0954c6d238f66719f857e3c4d13805ac2e80d50efe91ca7d0199f
SHA512e2f5c6dcd96f06104d49be1fcc70527868d1205f7800086a5627371fec1f90fde0738085383465fb3280376be900f7ef93a155b5d35b7f9a996a8ab13f702181
-
Filesize
146B
MD5b7101c3349207e0ba3d431d2235a6e8d
SHA1db5f6edadb15e4cffbedcff604263f8e930d3690
SHA256df633772241c0d9b3a99dc90a9d08defcf7aeae3667d390c0d39a6645169c70f
SHA5124897614b390795820007107f3ecc05b2857f2b49b0a98498d3b9228852f48c1eb8e72f59e32c4cdda9350896092b46a2b93d0a37d8b345c52b0a7e4ec89fe932