Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    9s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/05/2024, 06:21

General

  • Target

    9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe

  • Size

    1.7MB

  • MD5

    9522536e8f2a4a117b00ad1c7b017030

  • SHA1

    3df5ed63528c870dfcd46d4ffbe8bc03bfae441d

  • SHA256

    8800152b09df79fc7a3b2dabee09981f583a6ea1463973c1463b56eb3e42154b

  • SHA512

    a33cb03d5417549db845628f5aa4a2829599ea6f9dbe1cc2ca27cd87f82349b264deb0760bdb93b9f9e52cda9b8a82197ca364228a1678bb39154414f5722150

  • SSDEEP

    24576:ScgSHuZfMnEcr3bX+3ObwMuII4vHD2feyj0j4X1yJOc8Ps7useI6IEtpMWcD7ZBk:GIIfhcb7LwM/afquso53IEXMnD7Zy

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 19 IoCs
  • Drops file in Windows directory 28 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 30 IoCs
  • Suspicious use of WriteProcessMemory 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4892
    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
      2⤵
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:5096
      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
        3⤵
        • Checks computer location settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2408
        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
          4⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2004
          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
            5⤵
              PID:3296
              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                6⤵
                  PID:5292
                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                    7⤵
                      PID:6576
                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                        8⤵
                          PID:11588
                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                          8⤵
                            PID:16248
                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                          7⤵
                            PID:8468
                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                              8⤵
                                PID:16892
                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                              7⤵
                                PID:10424
                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                7⤵
                                  PID:15708
                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                6⤵
                                  PID:6220
                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                    7⤵
                                      PID:10704
                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                      7⤵
                                        PID:15652
                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                      6⤵
                                        PID:7860
                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                          7⤵
                                            PID:15676
                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                          6⤵
                                            PID:10392
                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                            6⤵
                                              PID:14296
                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                            5⤵
                                              PID:2740
                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                6⤵
                                                  PID:6364
                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                    7⤵
                                                      PID:10632
                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                      7⤵
                                                        PID:14616
                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                      6⤵
                                                        PID:8056
                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                          7⤵
                                                            PID:16328
                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                          6⤵
                                                            PID:10552
                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                            6⤵
                                                              PID:14476
                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                            5⤵
                                                              PID:5892
                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                6⤵
                                                                  PID:8884
                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                    7⤵
                                                                      PID:16908
                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                    6⤵
                                                                      PID:11996
                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                      6⤵
                                                                        PID:16592
                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                      5⤵
                                                                        PID:6872
                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                          6⤵
                                                                            PID:12788
                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                          5⤵
                                                                            PID:8592
                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                              6⤵
                                                                                PID:6156
                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                              5⤵
                                                                                PID:12916
                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                5⤵
                                                                                  PID:6132
                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                4⤵
                                                                                  PID:532
                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                    5⤵
                                                                                      PID:2680
                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                        6⤵
                                                                                          PID:6420
                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                            7⤵
                                                                                              PID:11580
                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                              7⤵
                                                                                                PID:13612
                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                              6⤵
                                                                                                PID:8108
                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                  7⤵
                                                                                                    PID:15996
                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                  6⤵
                                                                                                    PID:10672
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                    6⤵
                                                                                                      PID:14608
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                    5⤵
                                                                                                      PID:5960
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                        6⤵
                                                                                                          PID:8416
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                          6⤵
                                                                                                            PID:13932
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                          5⤵
                                                                                                            PID:7332
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                              6⤵
                                                                                                                PID:14484
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                              5⤵
                                                                                                                PID:9680
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                5⤵
                                                                                                                  PID:13220
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                4⤵
                                                                                                                  PID:1688
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                    5⤵
                                                                                                                      PID:6280
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                        6⤵
                                                                                                                          PID:11508
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                          6⤵
                                                                                                                            PID:14992
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                          5⤵
                                                                                                                            PID:7844
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                              6⤵
                                                                                                                                PID:15700
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                              5⤵
                                                                                                                                PID:10432
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                5⤵
                                                                                                                                  PID:14332
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                4⤵
                                                                                                                                  PID:5768
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                    5⤵
                                                                                                                                      PID:3900
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                        6⤵
                                                                                                                                          PID:17172
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                        5⤵
                                                                                                                                          PID:10728
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                          5⤵
                                                                                                                                            PID:14712
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                          4⤵
                                                                                                                                            PID:7000
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                              5⤵
                                                                                                                                                PID:12832
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                5⤵
                                                                                                                                                  PID:5876
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                4⤵
                                                                                                                                                  PID:9000
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                    5⤵
                                                                                                                                                      PID:17540
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                    4⤵
                                                                                                                                                      PID:11740
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                      4⤵
                                                                                                                                                        PID:17400
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                      3⤵
                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                      PID:1088
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                        4⤵
                                                                                                                                                          PID:464
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                            5⤵
                                                                                                                                                              PID:4596
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:6444
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                    7⤵
                                                                                                                                                                      PID:10716
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                      7⤵
                                                                                                                                                                        PID:15660
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                      6⤵
                                                                                                                                                                        PID:8216
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                          7⤵
                                                                                                                                                                            PID:17184
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                          6⤵
                                                                                                                                                                            PID:11132
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                            6⤵
                                                                                                                                                                              PID:15396
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:3420
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                6⤵
                                                                                                                                                                                  PID:9868
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                  6⤵
                                                                                                                                                                                    PID:13320
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                  5⤵
                                                                                                                                                                                    PID:7552
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                      6⤵
                                                                                                                                                                                        PID:14364
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:10152
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                        5⤵
                                                                                                                                                                                          PID:13756
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:2564
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:6012
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                6⤵
                                                                                                                                                                                                  PID:10560
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                    PID:15036
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                    PID:7956
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                        PID:16096
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                        PID:10524
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                          PID:14360
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:5780
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                              PID:9564
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:13328
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:6992
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:12852
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                      PID:5852
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:8748
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:17164
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:11796
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:14564
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                            PID:1112
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:2120
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                    PID:6432
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                        PID:10568
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                          PID:14780
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                          PID:7560
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                              PID:17192
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                              PID:10684
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                PID:14624
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:5172
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                    PID:10272
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                      PID:14120
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:7572
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                          PID:15200
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:7244
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:13996
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:2144
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:5900
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                    PID:9876
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:12600
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:7104
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:13352
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:9528
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                            PID:12800
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                              PID:7380
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:5616
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                  PID:7096
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                      PID:13304
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                        PID:6876
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                        PID:9180
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                          PID:12724
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:17900
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                            PID:6984
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                PID:12356
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:17756
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                  PID:8780
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                      PID:16876
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:12004
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                        PID:16648
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                      PID:2228
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                        PID:1560
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                            PID:1672
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                PID:5224
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                    PID:6560
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                        PID:12364
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                                                                                                                                          PID:18020
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                          PID:8316
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                                                                                                                                              PID:17104
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                              PID:10476
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                PID:15824
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                PID:6100
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                    PID:11960
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                      PID:16612
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                      PID:7880
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                          PID:15720
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                          PID:10500
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                            PID:4912
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                            PID:1432
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                PID:6376
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                    PID:11324
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                      PID:16008
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                      PID:8048
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                          PID:15692
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                          PID:10740
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                            PID:14788
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                            PID:5952
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                PID:10336
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:14048
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:6716
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:13244
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:6024
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:9232
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:12908
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:6080
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:4220
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:3360
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:6604
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:12480
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:18076
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:8276
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:17152
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:11084
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:14404
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:512
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:10344
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:14324
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:7540
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:15368
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:10116
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:13740
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:4936
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:6088
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9672
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13228
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7212
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13284
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6808
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9572
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13144
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5696
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7996
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16292
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10756
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:15024
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6972
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12844
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6008
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8944
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16900
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12032
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:16656
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3636
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2052
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4604
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6112
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:14020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7436
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13492
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5552
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:13268
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:17764
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8856
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16996
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:15868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5380
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12816
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1480
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8732
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:17300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17348
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6568
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:16844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8480
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10624
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:15668
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5388
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7068
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6084
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17624
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11736
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:8204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:16300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:15192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4036
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6016
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10232
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13784
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:12964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12924
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5460
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7580
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:14756
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13748
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:8640
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17144
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:15876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5788
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7792
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:15684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:14248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12732
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12824
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5872
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7476
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:18028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:17892
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16016
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:14632

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\blowjob blowjob several models (Sarah,Curtney).zip.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1.7MB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              c131557b6b2657a324e8c9a544faf353

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f37da1c61bc903998021012e40ad9d7ab5fafdd7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3e7938790f80f5d06097be8a64db28c4836f9824ee2f1640f731f04f256f5728

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              77a84cdcd24b50e495eca08f3ba8c6e53e7ca4fd38d6de14efa382ba1f3f763b54ab6be6bbb335a658139f0cbc116f442bbad5008b47044efdf600d86e17bada

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/464-193-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/464-218-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/516-201-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/516-225-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/532-192-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/532-217-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/940-186-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/940-210-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1088-166-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1088-200-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1112-212-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1112-188-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1432-213-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1432-237-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1560-167-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1560-202-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1672-196-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1672-221-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1688-236-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/1688-211-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2004-206-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2052-208-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2052-185-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2120-216-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2120-241-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2144-230-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2144-205-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2228-191-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2228-142-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2256-199-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2256-223-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2408-145-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2408-194-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2564-209-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2564-233-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2680-240-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2740-238-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/2740-214-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3296-220-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3296-195-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3360-247-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3360-222-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3420-260-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3636-198-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/3636-165-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4036-203-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4036-228-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4220-190-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4220-215-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4596-219-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4596-243-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4604-229-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4604-204-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4892-187-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4892-0-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/4936-207-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5096-189-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5096-14-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5172-261-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5224-224-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5224-250-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5292-226-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5292-254-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5380-231-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5380-259-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5388-262-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5388-232-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5460-234-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5460-264-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5472-265-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5472-235-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5552-267-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5616-270-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5616-239-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5696-272-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5696-242-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5768-244-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5768-273-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5780-245-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5780-274-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5788-275-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5788-246-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5892-248-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5900-249-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5952-251-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/5960-252-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6012-263-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6016-255-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6088-256-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6100-266-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6112-257-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6220-269-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6280-268-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6364-271-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6420-276-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • memory/6432-277-0x0000000000400000-0x000000000041F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              124KB