Analysis
-
max time kernel
14s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01-07-2024 03:40
Static task
static1
Behavioral task
behavioral1
Sample
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
8e246f357d0236d060189704afbaa460
-
SHA1
82b9a0ff1c9294912e9d28b04691cb90c842d571
-
SHA256
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721
-
SHA512
f0e217f41701c67a3e8257bf6f2163fe020e1227c0666e68133c61827b4c52ec3e30d64a543b9ba181c5705f96f0cddec90c4afa3d63716f2e36b40b3d1e2646
-
SSDEEP
49152:CdHnHSodbn6Oddabzqudy8IwDWD/K5vDYoBKbn30kvji7LmLHdY:4HZbnZddyq77TyBDYdbn3bHLu
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 20 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process File opened (read-only) \??\W: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\B: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\V: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\M: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\N: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\O: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\S: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\T: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\I: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\L: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\U: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\X: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\G: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\K: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\H: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\J: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\P: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\Q: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\R: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\Y: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\A: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\E: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File opened (read-only) \??\Z: 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process File created C:\Windows\SysWOW64\FxsTmp\swedish beastiality fucking [milf] (Melissa).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\swedish cumshot lesbian lesbian sm .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\japanese nude blowjob hidden (Liz).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\japanese fetish sperm girls circumcision .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\brasilian animal gay big Ôï .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish porn hardcore licking glans 50+ .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\bukkake sleeping titts .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish kicking sperm sleeping shower (Kathrin,Janette).avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\horse full movie balls .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\trambling catfight (Tatjana).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\danish handjob fucking sleeping .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\black nude lingerie [free] (Samantha).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process File created C:\Program Files\Common Files\microsoft shared\xxx public .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\blowjob hidden .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\trambling public cock .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\brasilian horse horse hot (!) titts traffic .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\brasilian beastiality gay voyeur titts bondage (Janette).mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\american fetish hardcore masturbation (Jade).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\danish nude blowjob [milf] (Tatjana).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\black action beast [bangbus] .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\spanish fucking public hole .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\beast girls cock .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\canadian lingerie big .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\indian kicking xxx big titts .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\black gang bang fucking licking cock femdom (Samantha).avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\indian action lesbian [bangbus] .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\russian kicking fucking lesbian traffic (Sonja,Curtney).avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\xxx public glans circumcision .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\brasilian cum sperm public feet hotel (Melissa).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\horse catfight YEâPSè& (Kathrin,Samantha).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription ioc process File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\danish cumshot bukkake girls .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\gang bang lesbian lesbian feet high heels (Samantha).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\japanese gang bang lingerie hot (!) hole leather (Samantha).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\cumshot lingerie public bedroom .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\norwegian lesbian [bangbus] .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\black porn lingerie big hairy (Anniston,Sylvia).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\danish animal fucking uncut hole traffic (Tatjana).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\norwegian gay licking feet boots (Samantha).avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\horse beast big glans (Sonja,Karin).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\xxx public .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\cum sperm [milf] (Jade).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\swedish action blowjob full movie (Karin).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\lingerie [free] YEâPSè& .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\lesbian voyeur glans YEâPSè& .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\swedish action blowjob [free] (Samantha).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\german trambling voyeur cock bondage .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\italian fetish gay catfight titts black hairunshaved (Samantha).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\horse horse hidden ash .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\hardcore hidden glans (Sonja,Curtney).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\kicking lingerie voyeur .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\asian xxx hot (!) feet mature .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\chinese lesbian hot (!) lady .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\chinese gay full movie latex (Jenna,Jade).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\swedish action fucking full movie .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\lingerie masturbation .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\spanish lingerie uncut wifey .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\cumshot beast girls titts 50+ (Curtney).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\trambling voyeur hole stockings .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\russian handjob lingerie [milf] bedroom .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\spanish sperm licking traffic .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\nude lingerie uncut traffic (Gina,Curtney).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\british lesbian big titts (Sonja,Curtney).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\security\templates\xxx [free] shower .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\american fetish trambling [bangbus] .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\japanese animal lesbian masturbation .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\black porn bukkake big hole swallow .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\british hardcore big (Liz).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_72a319bf8ee74a9b\norwegian beast sleeping granny (Sonja,Tatjana).mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\russian gang bang fucking lesbian (Tatjana).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\russian beastiality lesbian big cock Ôï .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\nude blowjob full movie (Curtney).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\malaysia fucking girls (Curtney).avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\african gay hot (!) upskirt .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\indian horse blowjob lesbian gorgeoushorny .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\italian gang bang beast lesbian feet .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\assembly\temp\hardcore lesbian cock .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\danish kicking gay sleeping feet .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\british beast [free] cock fishy .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\fetish trambling sleeping (Sarah).zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\swedish gang bang horse voyeur .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\british lingerie big hole .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\malaysia lingerie uncut .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\spanish lesbian hot (!) titts .mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e5f85095c4bc5d16\kicking lingerie catfight black hairunshaved .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\german beast hidden .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\sperm full movie titts sm (Curtney).mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\fucking [bangbus] shoes .rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\canadian hardcore catfight (Curtney).mpeg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\lingerie several models shower .mpg.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\gang bang hardcore several models cock lady (Tatjana).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\indian horse bukkake public feet ejaculation .zip.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\bukkake sleeping feet balls .avi.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\hardcore several models titts ejaculation (Tatjana).rar.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exepid process 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3660 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3660 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4652 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4652 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2880 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2880 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1484 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1484 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4720 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4228 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4720 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4228 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4084 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 4084 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exedescription pid process target process PID 2788 wrote to memory of 2480 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 2480 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 2480 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2964 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2964 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2964 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 3188 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 3188 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 3188 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 64 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 64 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 64 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 1328 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 1328 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 1328 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 1412 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 1412 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 1412 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 1272 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 1272 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 1272 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 3660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 3660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 3660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3012 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3012 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3012 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 4652 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 4652 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 4652 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 2880 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 2880 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 2880 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 1484 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 1484 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 1484 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 64 wrote to memory of 4720 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 64 wrote to memory of 4720 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 64 wrote to memory of 4720 64 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1328 wrote to memory of 4228 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1328 wrote to memory of 4228 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1328 wrote to memory of 4228 1328 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1272 wrote to memory of 4084 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1272 wrote to memory of 4084 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1272 wrote to memory of 4084 1272 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3012 wrote to memory of 836 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3012 wrote to memory of 836 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3012 wrote to memory of 836 3012 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3124 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3124 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2964 wrote to memory of 3124 2964 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2480 wrote to memory of 2660 2480 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 4600 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 4600 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 3188 wrote to memory of 4600 3188 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 2168 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 2168 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 2788 wrote to memory of 2168 2788 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 3960 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 3960 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 1412 wrote to memory of 3960 1412 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe PID 4652 wrote to memory of 4012 4652 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe 32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\32b8bfc0681783f271b214523662a93241b3aa123d4346328addff4fa851a721_NeikiAnalytics.exe"2⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\brasilian horse horse hot (!) titts traffic .mpeg.exeFilesize
682KB
MD56be2560438bc508c37c887cc886c9b1f
SHA16746089a8f8384076d6d750ac0b04b49f2974410
SHA256abc4ff93d67b43c8243a779b6096aca0913ac848ebf5f261b4fbecc03a1b3bca
SHA5129d63048d8a800a17fd77de1dfebe94cf3e1ec61c3e439d40c37fb3aa07a5f3f853777d435541387170826f89bd39677d53de888ca38c1e4553f9d8081dcd6ba8