Analysis
-
max time kernel
13s -
max time network
64s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
01-07-2024 04:48
Static task
static1
Behavioral task
behavioral1
Sample
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
366b2f831a648e51e4cdb3e03cabf950
-
SHA1
1858172c6308db243dc2d9619858a530531e4544
-
SHA256
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58
-
SHA512
dde81b22dea7e7f5cfe09941abafd0a2db9e6981795f0edb66b05e95e4e6f66972cf3869e51b439ef9d2e244cf79b1c4032b54500c6648a7cad1452674b6eb3e
-
SSDEEP
49152:C9zSz9rGbBYxlPpyrX+tcORfltcP8jpz8Lz/p0h:ozSz9ukPQ+tcORNaP8wzB0h
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 20 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process File opened (read-only) \??\Y: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\A: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\H: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\L: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\S: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\M: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\O: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\W: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\X: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\Z: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\E: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\G: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\P: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\U: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\N: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\Q: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\R: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\T: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\B: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\I: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\J: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\K: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File opened (read-only) \??\V: 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process File created C:\Windows\System32\LogFiles\Fax\Incoming\japanese kicking gay girls circumcision .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\bukkake lesbian stockings .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\indian action beast public .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\sperm uncut swallow .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\japanese animal xxx licking stockings .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\american beastiality lingerie [milf] .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\sperm full movie glans .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\lingerie voyeur feet boots (Sarah).avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\lingerie hot (!) titts wifey (Karin).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\xxx hot (!) hole balls (Karin).mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\black porn fucking hot (!) glans .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\tyrkish kicking horse uncut glans .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\indian cum horse uncut cock latex (Jade).mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\bukkake girls pregnant .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\american handjob lingerie [bangbus] (Karin).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\italian fetish gay uncut ash .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\fucking full movie high heels .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\lingerie several models glans high heels .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\tyrkish horse trambling [bangbus] titts .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\lingerie big ejaculation .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\blowjob licking glans .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\american animal fucking catfight mature .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\horse catfight (Curtney).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\beastiality gay voyeur beautyfull (Britney,Tatjana).mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\black fetish horse public cock bondage (Sarah).avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\xxx big (Samantha).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\lingerie uncut sm (Sonja,Sarah).zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{F0237BE9-D6E4-4703-93AC-27360BF5E970}\EDGEMITMP_1D2FD.tmp\trambling hot (!) .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\hardcore several models (Melissa).mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\american cum horse [milf] .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\danish fetish lesbian full movie titts black hairunshaved .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription ioc process File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\brasilian gang bang fucking [free] feet gorgeoushorny .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\action gay uncut gorgeoushorny .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\gang bang fucking [milf] cock .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\japanese beastiality horse lesbian hotel .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\italian beastiality lingerie [milf] traffic .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\tyrkish action horse hot (!) hole (Britney,Janette).zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\security\templates\american animal trambling several models black hairunshaved (Sonja,Janette).mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\nude lingerie masturbation hole traffic .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\german sperm [bangbus] (Karin).mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\fucking big fishy (Kathrin,Samantha).zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\horse girls cock .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\fetish beast hot (!) granny .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\lesbian masturbation hole .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\french blowjob several models mistress .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\japanese handjob lesbian girls sweet .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\action xxx catfight .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\danish horse lingerie [milf] hole pregnant .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\chinese bukkake catfight YEâPSè& .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\animal blowjob hidden 40+ .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\tyrkish cumshot blowjob lesbian glans blondie (Melissa).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\swedish gang bang bukkake voyeur traffic .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\russian cum blowjob [milf] .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\british fucking [milf] ash .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\horse xxx girls granny .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\fucking sleeping black hairunshaved .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\handjob xxx big glans (Sonja,Jade).avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\indian cum sperm hot (!) (Sarah).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\lesbian masturbation cock .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\gay [milf] wifey .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\asian trambling hot (!) cock swallow .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\russian handjob lesbian hot (!) girly .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\canadian lesbian catfight hole granny .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\horse licking hole girly .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\fetish trambling several models YEâPSè& .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\blowjob big feet circumcision .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\brasilian porn hardcore masturbation swallow .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\trambling licking balls .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\black beastiality beast masturbation hole YEâPSè& .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\trambling public glans blondie .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\italian fetish hardcore big castration .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\animal fucking public cock shower .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\russian beastiality blowjob masturbation (Sarah).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\french gay hidden black hairunshaved .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\spanish trambling [bangbus] ash .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\chinese xxx hidden lady .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\danish horse lingerie several models (Karin).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\swedish nude trambling full movie lady .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\italian fetish trambling lesbian (Tatjana).rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\lesbian full movie (Tatjana).mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\russian fetish bukkake uncut titts hotel .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e5f85095c4bc5d16\danish fetish hardcore [free] .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\lingerie several models hole sweet (Sylvia).avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\chinese lesbian voyeur high heels (Sonja,Jade).mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\malaysia beast full movie (Samantha).avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\russian handjob xxx several models .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\hardcore masturbation 40+ .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\brasilian handjob xxx sleeping cock 50+ .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\brasilian porn beast [bangbus] glans sweet (Sylvia).zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\swedish kicking horse hot (!) mature .mpeg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\german gay uncut shower .mpg.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\swedish cum bukkake masturbation .avi.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\porn lingerie [free] ejaculation .rar.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\blowjob girls .zip.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exepid process 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4416 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4416 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3840 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3840 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1492 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1492 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4860 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4860 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 836 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 836 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 5116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4556 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 4556 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 2424 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 2424 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 2148 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 2148 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exedescription pid process target process PID 5056 wrote to memory of 3712 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3712 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3712 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 5112 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 5112 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 5112 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4024 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4024 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4024 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4672 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4672 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 4672 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 116 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 116 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 116 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1044 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1044 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1044 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 1352 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 1352 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 1352 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 4416 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 4416 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 4416 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3840 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3840 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3840 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1492 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1492 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1492 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 4860 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 4860 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 4860 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 836 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 836 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 836 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 5116 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 5116 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 5116 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1352 wrote to memory of 2424 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1352 wrote to memory of 2424 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1352 wrote to memory of 2424 1352 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1044 wrote to memory of 4556 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1044 wrote to memory of 4556 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 1044 wrote to memory of 4556 1044 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 2148 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 2148 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 3712 wrote to memory of 2148 3712 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4416 wrote to memory of 4956 4416 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4416 wrote to memory of 4956 4416 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4416 wrote to memory of 4956 4416 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3476 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3476 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5056 wrote to memory of 3476 5056 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1960 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1960 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 5112 wrote to memory of 1960 5112 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 3640 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 3640 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 116 wrote to memory of 3640 116 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 1376 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 1376 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4672 wrote to memory of 1376 4672 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe PID 4024 wrote to memory of 3252 4024 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe 368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\368e513e771c08dfc65f0650219ee82d751772088cb948a2a230846454859e58_NeikiAnalytics.exe"2⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\indian cum horse uncut cock latex (Jade).mpeg.exeFilesize
1.6MB
MD5603fd79074aa60a5dabfa584170e59ab
SHA1b9f23e49d1668980232b0aa2f91cb0064b5f140d
SHA256022ba23d33d0d624b146a58ac7eee1cb181c2f62fae0507ca75b0bfe5c64d3f2
SHA512d673ab557ae16fb5a6db9e24fc37aa405b01d2b07c73139bf270a79409ee5e662f287456d52edffb954ddd6338e3343007ec19c16812927ad7d3b7aeaeca92b1