Analysis
-
max time kernel
15s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
29/06/2024, 15:24
Behavioral task
behavioral1
Sample
b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe
-
Size
290KB
-
MD5
1c2028d3493c84cf8419bb8162bcd2b0
-
SHA1
b261300370d74f47880ef8f4f464cad32c883c14
-
SHA256
b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49
-
SHA512
9a374bc463f991973144dda0aec37933c90dc8ba105dd747617f1137b45504ea17ae9bf23e3c7f4f3cb0bf272e4d4d09c8a47f10a0c4383201e00948cad0d50f
-
SSDEEP
6144:bjluQoSsqaxIo5R4nM/cl4F4s1nq8qWDwuyC6PHo/G7Qrb0ovWPYBG1y:bEQoSx0q1TaYWsuyCJ/GKb0ov2YB9
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/512-0-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/files/0x000700000002354a-5.dat upx behavioral2/memory/1920-25-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4704-155-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3684-156-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3284-184-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/816-185-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/1876-186-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2732-187-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2552-188-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4584-189-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3976-190-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/1892-191-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3788-192-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3564-193-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4608-194-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/892-196-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3108-198-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/984-197-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2340-199-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2988-200-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/3932-201-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2572-204-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4924-205-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2664-203-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2892-202-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/1240-206-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4776-207-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/2704-210-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/1908-209-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/4256-208-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/516-211-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5356-223-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5348-222-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5340-221-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5332-220-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5316-219-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5308-218-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5300-217-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5292-216-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5284-215-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5404-230-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5388-229-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5324-228-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5396-227-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5380-226-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5364-225-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5372-224-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5476-231-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6184-234-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6260-235-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6164-233-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/5824-232-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6292-237-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6384-239-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6440-241-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6392-240-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6464-244-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6568-247-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6376-238-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6284-236-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6628-248-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6636-250-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/memory/6672-249-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Q: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\S: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\E: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\O: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\I: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\K: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\R: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\V: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\Y: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\A: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\G: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\M: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\N: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\P: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\T: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\W: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\Z: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\J: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\L: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\U: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\X: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\B: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File opened (read-only) \??\H: b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\blowjob [bangbus] mistress (Sandy,Samantha).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\fucking licking traffic .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\italian cumshot beast masturbation hole .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\xxx [free] shower .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\italian gang bang hardcore voyeur titts (Ashley,Curtney).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\bukkake public glans bondage (Samantha).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\swedish kicking trambling public latex (Gina,Sarah).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\hardcore uncut penetration (Jenna,Karin).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\lesbian big feet .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\danish animal fucking hot (!) stockings .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\trambling big balls .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\italian horse lingerie hot (!) .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\lesbian catfight cock traffic (Melissa).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\fucking [bangbus] titts femdom .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\russian cum blowjob [milf] feet redhair .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\russian handjob trambling uncut .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{F0237BE9-D6E4-4703-93AC-27360BF5E970}\EDGEMITMP_1D2FD.tmp\hardcore several models latex .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\italian animal beast several models ejaculation .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\blowjob big cock .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\hardcore big shoes .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\lesbian hidden blondie .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\russian cumshot beast girls ejaculation .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\brasilian beastiality horse full movie lady .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\british fucking several models feet .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\danish cum beast lesbian glans blondie (Tatjana).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\gay [bangbus] balls .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\tyrkish beastiality fucking full movie ¼ë .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish horse horse catfight (Sarah).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\bukkake public glans .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\russian handjob xxx hidden hole mistress .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\beast masturbation .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\fetish trambling licking cock pregnant (Tatjana).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\mssrv.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\horse horse voyeur ejaculation .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\russian handjob sperm sleeping glans Ôï .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\brasilian beastiality horse [milf] hole bedroom (Tatjana).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\indian fetish gay voyeur (Tatjana).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\kicking fucking catfight balls (Britney,Tatjana).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\spanish horse [bangbus] (Liz).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\danish fetish beast hidden .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\canadian trambling hot (!) hole .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\xxx hidden black hairunshaved .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\gay [free] hole ash (Karin).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\tyrkish nude lesbian hot (!) feet redhair .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese porn hardcore lesbian high heels .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\russian handjob xxx [bangbus] wifey (Kathrin,Liz).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\cum horse uncut .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\african trambling catfight cock (Christine,Tatjana).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\african bukkake hot (!) titts boots .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\beastiality bukkake uncut sm .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\blowjob catfight .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\gay girls cock stockings (Samantha).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\indian kicking bukkake full movie latex .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\security\templates\beast lesbian .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\sperm sleeping titts wifey (Curtney).zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\bukkake public feet (Anniston,Samantha).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\gang bang lesbian [free] feet mature .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\swedish cum xxx catfight pregnant .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\beast [free] feet femdom .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\tyrkish beastiality blowjob sleeping leather .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\temp\brasilian fetish sperm big penetration (Jenna,Jade).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\tyrkish cumshot lingerie lesbian hairy .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\hardcore [milf] shower (Gina,Janette).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\german horse hidden bondage .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\fucking girls redhair .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\hardcore sleeping (Curtney).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\hardcore voyeur .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\swedish fetish lesbian catfight cock redhair .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\tyrkish horse xxx catfight cock .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\american handjob hardcore [milf] .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\danish cumshot lesbian catfight feet leather (Jade).zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\sperm sleeping hairy .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\asian blowjob licking swallow .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\cum trambling hot (!) bondage .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\beastiality hardcore [milf] granny .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\cum horse [milf] .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\horse lesbian girly (Jenna,Melissa).zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\trambling several models .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\gay big femdom .zip.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\lesbian sleeping cock boots (Sarah).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\german horse full movie blondie .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\malaysia beast sleeping bondage .rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\fetish bukkake girls (Liz).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\german trambling masturbation feet .mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\cum trambling uncut hole balls (Samantha).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\spanish blowjob public titts penetration (Sarah).rar.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\handjob trambling [milf] bondage .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\CbsTemp\beast big feet ìó .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\action hardcore girls high heels (Gina,Melissa).mpg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\french blowjob [milf] .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\porn hardcore hot (!) young .mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\american cumshot xxx masturbation shoes .avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\lesbian uncut granny (Sonja,Sarah).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\danish cumshot trambling lesbian hole upskirt (Liz).avi.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\black porn hardcore hidden (Samantha).mpeg.exe b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 2732 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 2732 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 2552 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 2552 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4584 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4584 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1892 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1892 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3976 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3976 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3788 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3788 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3564 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3564 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4608 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 4608 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 984 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 984 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 512 wrote to memory of 1920 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 86 PID 512 wrote to memory of 1920 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 86 PID 512 wrote to memory of 1920 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 86 PID 1920 wrote to memory of 4704 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 89 PID 1920 wrote to memory of 4704 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 89 PID 1920 wrote to memory of 4704 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 89 PID 512 wrote to memory of 3684 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 90 PID 512 wrote to memory of 3684 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 90 PID 512 wrote to memory of 3684 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 90 PID 1920 wrote to memory of 816 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 93 PID 1920 wrote to memory of 816 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 93 PID 1920 wrote to memory of 816 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 93 PID 4704 wrote to memory of 3284 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 94 PID 4704 wrote to memory of 3284 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 94 PID 4704 wrote to memory of 3284 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 94 PID 512 wrote to memory of 3688 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 95 PID 512 wrote to memory of 3688 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 95 PID 512 wrote to memory of 3688 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 95 PID 3684 wrote to memory of 1876 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 96 PID 3684 wrote to memory of 1876 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 96 PID 3684 wrote to memory of 1876 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 96 PID 816 wrote to memory of 2732 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 98 PID 816 wrote to memory of 2732 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 98 PID 816 wrote to memory of 2732 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 98 PID 4704 wrote to memory of 2552 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 99 PID 4704 wrote to memory of 2552 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 99 PID 4704 wrote to memory of 2552 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 99 PID 1920 wrote to memory of 4584 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 100 PID 1920 wrote to memory of 4584 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 100 PID 1920 wrote to memory of 4584 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 100 PID 512 wrote to memory of 3976 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 101 PID 512 wrote to memory of 3976 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 101 PID 512 wrote to memory of 3976 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 101 PID 3684 wrote to memory of 1892 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 102 PID 3684 wrote to memory of 1892 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 102 PID 3684 wrote to memory of 1892 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 102 PID 3284 wrote to memory of 3788 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 103 PID 3284 wrote to memory of 3788 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 103 PID 3284 wrote to memory of 3788 3284 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 103 PID 1876 wrote to memory of 3564 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 104 PID 1876 wrote to memory of 3564 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 104 PID 1876 wrote to memory of 3564 1876 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 104 PID 3688 wrote to memory of 4608 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 105 PID 3688 wrote to memory of 4608 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 105 PID 3688 wrote to memory of 4608 3688 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 105 PID 4704 wrote to memory of 892 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 106 PID 4704 wrote to memory of 892 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 106 PID 4704 wrote to memory of 892 4704 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 106 PID 2732 wrote to memory of 984 2732 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 107 PID 2732 wrote to memory of 984 2732 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 107 PID 2732 wrote to memory of 984 2732 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 107 PID 816 wrote to memory of 2340 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 108 PID 816 wrote to memory of 2340 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 108 PID 816 wrote to memory of 2340 816 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 108 PID 1920 wrote to memory of 3108 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 109 PID 1920 wrote to memory of 3108 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 109 PID 1920 wrote to memory of 3108 1920 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 109 PID 2552 wrote to memory of 2988 2552 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 110 PID 2552 wrote to memory of 2988 2552 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 110 PID 2552 wrote to memory of 2988 2552 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 110 PID 3684 wrote to memory of 3932 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 111 PID 3684 wrote to memory of 3932 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 111 PID 3684 wrote to memory of 3932 3684 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 111 PID 512 wrote to memory of 2892 512 b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe 112
Processes
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:512 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1920 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4704 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3284 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3788 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:516
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:5824
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:10940
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:15076
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"9⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:11032
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:7788
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:12972
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:20328
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:10636
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:14076
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22920
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:8704
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:7820
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:14112
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"9⤵PID:22100
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:6268
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:10580
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:14012
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22400
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:10976
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:13860
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22136
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:5644
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7700
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:13204
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:7248
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10880
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15096
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22124
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:11532
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:2664
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6392
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:13212
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:6536
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7740
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:12932
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:19648
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10724
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22116
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14028
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:21876
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20296
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:8996
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:8468
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14560
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22208
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20280
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7576
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15824
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:19960
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10872
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:15580
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22232
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14172
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2552 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:2988
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:14504
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22532
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:20464
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7716
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:12924
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:19644
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10572
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13940
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22612
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6560
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:5656
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10484
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13844
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:23600
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6576
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14308
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22076
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6344
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7624
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13068
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7176
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10564
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22332
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14380
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21296
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5816
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:892
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:12908
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22288
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:20336
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10588
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13932
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22304
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:2944
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7780
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13472
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:23584
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10660
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13964
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22168
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:8268
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:9136
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10476
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13792
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6492
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13120
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20240
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7616
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13196
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:2612
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:19912
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10700
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14096
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6304
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:816 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2732 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:984 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6376
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:13228
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:7000
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7748
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:11804
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22200
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:17220
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:20040
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10740
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14036
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:21844
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:8968
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10548
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22160
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15088
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22264
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:11248
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15648
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22604
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20156
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7668
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14496
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22548
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:5836
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10668
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:23276
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14520
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22588
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5900
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:2340
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10952
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22144
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15640
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20172
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7560
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:12736
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7908
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10932
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22240
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:15052
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21304
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:12004
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:9028
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10524
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14020
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22176
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5828
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13260
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6272
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7676
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:17128
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20064
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10684
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:15632
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:21648
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20180
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4584 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:1240
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6568
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14068
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:21800
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:2864
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7708
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13220
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:23628
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7268
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10644
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14204
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:24000
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6624
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:9012
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10396
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13588
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:752
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20232
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14512
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22408
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20288
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7592
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:15060
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22596
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:1140
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10676
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14488
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20656
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:1504
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:3108
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6284
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13868
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22280
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6488
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7756
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:8260
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10716
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14260
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22092
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20456
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:9112
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20312
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10492
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14252
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:23592
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6224
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14044
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:23656
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:17252
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20020
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10444
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:2708
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3684 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1876 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3564 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:1908
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:13440
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"8⤵PID:22380
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:6996
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:8300
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10628
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14212
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:23804
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6760
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6960
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:20712
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10404
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:14404
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22224
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:5712
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6636
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:12940
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:2804
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20352
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20320
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10732
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14584
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21892
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:17880
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13852
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22108
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:19944
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7568
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15012
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22540
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20472
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10596
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13948
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21624
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:8688
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7076
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:11580
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22644
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:17236
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:20056
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10412
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13924
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22416
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6672
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14084
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21836
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20448
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7684
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13480
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7092
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10652
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13972
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22828
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1892 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:4776
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:8784
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:15624
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:19968
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:10540
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13956
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13236
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:7260
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10612
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13980
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20304
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:9004
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10508
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14104
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:19920
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14052
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21320
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:4112
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7632
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10832
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:15044
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22376
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14156
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10468
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13508
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22424
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6584
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:3932
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5668
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14176
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:23616
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6300
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:12900
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:8236
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10620
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14220
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:21908
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:448
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:9020
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10516
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13996
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22564
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6316
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14992
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22184
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14292
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:7652
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:12720
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7868
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10692
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:23636
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:14236
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:23576
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6348
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3688 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4608 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:2704
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:15036
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22248
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:5744
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7764
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:13988
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:6448
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10708
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22556
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14388
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:21336
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6312
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7828
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:12788
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"7⤵PID:23608
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22152
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14004
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:24008
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6680
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14060
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22064
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:8700
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7608
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14184
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:23664
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:6196
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10460
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13800
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:4924
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:15028
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22636
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:3120
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7732
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:11300
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"6⤵PID:22084
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:17228
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10420
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13448
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22216
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:14136
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20084
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10388
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22192
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14120
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22628
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:5784
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13404
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22256
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:19636
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:7600
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:12916
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:20344
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10436
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:13772
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:22312
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3976 -
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:4256
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:13456
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7060
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:12944
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:7288
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:15068
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13824
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:8960
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:17244
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:10556
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14244
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"5⤵PID:22620
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:1936
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:14396
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:7584
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10900
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:15656
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:22056
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:20164
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:2892
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:6524
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:7724
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:13908
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:2364
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10428
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:13488
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:22580
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:9660
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:10532
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:14228
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:22296
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:20440
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:13432
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:21812
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:6704
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:7660
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:13412
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"4⤵PID:22268
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:20360
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:10452
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:13660
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"3⤵PID:22392
-
-
-
C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\b11b7c355e0a8eaf0b87779a0e9d590db271b4fc2860dcf134121823f5f7de49_NeikiAnalytics.exe"2⤵PID:3312
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish horse horse catfight (Sarah).mpg.exe
Filesize128KB
MD5a937d36b19444d600892fc9b6b01d8ac
SHA1f2ca94ae50da990fea31c537f246df4548068b8c
SHA25626c55e6b8a70a86405e6a7471aee7d25076c2e993cae1b931271b5d8dd401677
SHA5124b6b5591a07dec918385d08c54c9613cd19b48d4f601d86daa63cecf120300fadd69f770cd15ffc4f96c87184e019ab93b5db390da9f712d0e4705cbf8531e79