43265ec828bb0b2f71c86bbe9bf2d6d3c094f47419d68b5fd902dca69c59d5f0

Analysis

max time kernel
150s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 11:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
Size

892KB
MD5

eb5b30cf1d899c58ba1d65f8827ffeb0
SHA1

abc5b944e748d40a8030ce7339094f5d552589fb
SHA256

43265ec828bb0b2f71c86bbe9bf2d6d3c094f47419d68b5fd902dca69c59d5f0
SHA512

a08517f4cdad0a6e970a4340fc626ebd4f860be61bcc09f97cabb328baaa219e52925949748cf965defddce83a02ccc7ff7f8bc2ad8152f78bdd5d64b1133ed5
SSDEEP

24576:asO2GcNeIP0XJwwkwMffHyVwES19QZ4H:Q2Dezw7wMff9Ay

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	Process not Found
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe

Program crash 64 IoCs

pid	pid_target	Process	procid_target
8676	1744	WerFault.exe	89
8668	2300	WerFault.exe	114
10036	824	WerFault.exe	119
8780	3592	WerFault.exe	116
10380	2300	WerFault.exe	114
2264	3580	WerFault.exe	109
8468	3592	WerFault.exe	116
8500	824	WerFault.exe	119
11120	8360	WerFault.exe	371
1988	9152	WerFault.exe	379
464	1276	WerFault.exe	99
10000	1276	WerFault.exe	99
12064	6032	WerFault.exe	237
8856	6032	WerFault.exe	237
11512	9992	WerFault.exe	565
11740	12236	WerFault.exe	566
10360	9060	WerFault.exe	568
8828	12080	WerFault.exe	564
10636	4904	WerFault.exe	100
376	12184	WerFault.exe	585
8428	12284	WerFault.exe	588
10844	12224	WerFault.exe	586
4476	5756	WerFault.exe	220
10748	5772	WerFault.exe	221
11644	5616	WerFault.exe	212
3468	5888	WerFault.exe	228
9740	9672	WerFault.exe	409
8408	9636	WerFault.exe	413
9064	9756	WerFault.exe	418
11672	10428	WerFault.exe	426
11700	10552	WerFault.exe	430
8596	11104	WerFault.exe	454
9580	10968	WerFault.exe	449
5576	9756	WerFault.exe	418
10800	10552	WerFault.exe	430
9248	11104	WerFault.exe	454
11660	7744	WerFault.exe	339
8428	7744	WerFault.exe	339
6068	7452	WerFault.exe	321
11108	8584	WerFault.exe	644
5392	7452	WerFault.exe	321
5948	8584	WerFault.exe	644
10496	11832	WerFault.exe	651
6664	10336	WerFault.exe	653
9992	11088	WerFault.exe	661
6324	11432	WerFault.exe	689
6572	8536	WerFault.exe	694
8516	7468	WerFault.exe	322
6368	7468	Process not Found	322
12676	2056	Process not Found	124
12784	2324	Process not Found	123
13100	4296	Process not Found	125
13088	4244	Process not Found	126
13612	1680	Process not Found	104
13288	9908	Process not Found	503
2196	10928	Process not Found	517
3116	4856	Process not Found	90
14212	14052	Process not Found	1197
5124	1680	Process not Found	104
1416	13340	Process not Found	1203
12776	10232	Process not Found	707
3248	10452	Process not Found	718
13384	13340	Process not Found	1203
4876	14052	Process not Found	1197

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4248	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4248	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1028	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1028	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
5108	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
5108	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4676	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4676	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4136	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4136	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1832	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1832	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1744	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1744	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4856	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4856	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3020	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3020	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3000	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3000	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2092	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2092	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4252	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4252	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1604	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1604	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4620	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4620	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1988	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1988	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3004	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3004	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1276	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1276	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4904	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4904	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2224	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2224	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4980	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4980	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4932	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4932	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1680	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1680	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1068	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
1068	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4964	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4964	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4488	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4488	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3500	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3500	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3580	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3580	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3680	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3680	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3600	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
3600	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4456	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
4456	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
464	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
464	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2300	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
2300	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4248 wrote to memory of 1028	4248	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	84
PID 4248 wrote to memory of 1028	4248	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	84
PID 4248 wrote to memory of 1028	4248	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	84
PID 1028 wrote to memory of 5108	1028	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	85
PID 1028 wrote to memory of 5108	1028	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	85
PID 1028 wrote to memory of 5108	1028	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	85
PID 5108 wrote to memory of 4676	5108	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	86
PID 5108 wrote to memory of 4676	5108	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	86
PID 5108 wrote to memory of 4676	5108	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	86
PID 4676 wrote to memory of 4136	4676	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	87
PID 4676 wrote to memory of 4136	4676	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	87
PID 4676 wrote to memory of 4136	4676	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	87
PID 4136 wrote to memory of 1832	4136	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	88
PID 4136 wrote to memory of 1832	4136	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	88
PID 4136 wrote to memory of 1832	4136	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	88
PID 1832 wrote to memory of 1744	1832	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	89
PID 1832 wrote to memory of 1744	1832	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	89
PID 1832 wrote to memory of 1744	1832	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	89
PID 1744 wrote to memory of 4856	1744	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	90
PID 1744 wrote to memory of 4856	1744	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	90
PID 1744 wrote to memory of 4856	1744	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	90
PID 4856 wrote to memory of 3020	4856	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	91
PID 4856 wrote to memory of 3020	4856	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	91
PID 4856 wrote to memory of 3020	4856	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	91
PID 3020 wrote to memory of 3000	3020	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	92
PID 3020 wrote to memory of 3000	3020	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	92
PID 3020 wrote to memory of 3000	3020	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	92
PID 3000 wrote to memory of 2092	3000	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	93
PID 3000 wrote to memory of 2092	3000	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	93
PID 3000 wrote to memory of 2092	3000	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	93
PID 2092 wrote to memory of 4252	2092	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	94
PID 2092 wrote to memory of 4252	2092	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	94
PID 2092 wrote to memory of 4252	2092	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	94
PID 4252 wrote to memory of 1604	4252	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	95
PID 4252 wrote to memory of 1604	4252	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	95
PID 4252 wrote to memory of 1604	4252	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	95
PID 1604 wrote to memory of 4620	1604	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	96
PID 1604 wrote to memory of 4620	1604	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	96
PID 1604 wrote to memory of 4620	1604	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	96
PID 4620 wrote to memory of 1988	4620	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	97
PID 4620 wrote to memory of 1988	4620	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	97
PID 4620 wrote to memory of 1988	4620	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	97
PID 1988 wrote to memory of 3004	1988	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	98
PID 1988 wrote to memory of 3004	1988	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	98
PID 1988 wrote to memory of 3004	1988	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	98
PID 3004 wrote to memory of 1276	3004	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	99
PID 3004 wrote to memory of 1276	3004	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	99
PID 3004 wrote to memory of 1276	3004	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	99
PID 1276 wrote to memory of 4904	1276	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	100
PID 1276 wrote to memory of 4904	1276	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	100
PID 1276 wrote to memory of 4904	1276	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	100
PID 4904 wrote to memory of 2224	4904	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	101
PID 4904 wrote to memory of 2224	4904	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	101
PID 4904 wrote to memory of 2224	4904	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	101
PID 2224 wrote to memory of 4980	2224	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	102
PID 2224 wrote to memory of 4980	2224	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	102
PID 2224 wrote to memory of 4980	2224	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	102
PID 4980 wrote to memory of 4932	4980	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	103
PID 4980 wrote to memory of 4932	4980	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	103
PID 4980 wrote to memory of 4932	4980	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	103
PID 4932 wrote to memory of 1680	4932	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	104
PID 4932 wrote to memory of 1680	4932	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	104
PID 4932 wrote to memory of 1680	4932	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	104
PID 1680 wrote to memory of 1068	1680	eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe	105

C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4248
- C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1028
- - C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:5108
  - - C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:4676
    - - C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        5⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4136
      - C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1832
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        7⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1744
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        8⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4856
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        9⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3020
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        10⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3000
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        11⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:2092
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        12⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        13⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1604
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        14⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        15⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1988
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        16⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        17⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1276
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        18⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4904
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        19⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        20⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4980
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        21⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:4932
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        22⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1680
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        23⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1068
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        24⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4964
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        25⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        26⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        27⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        28⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        
        PID:3680
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        29⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        
        PID:3600
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        30⤵
        Drops file in Program Files directory
        Suspicious behavior: EnumeratesProcesses
        
        PID:4456
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        31⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:464
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        32⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2300
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        33⤵
        
        PID:2044
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        34⤵
        
        PID:3592
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        35⤵
        
        PID:376
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        36⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        37⤵
        
        PID:824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        38⤵
        Drops file in Program Files directory
        
        PID:5084
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        39⤵
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        40⤵
        
        PID:5000
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        41⤵
        
        PID:2324
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        42⤵
        
        PID:2056
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        43⤵
        
        PID:4296
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        44⤵
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        45⤵
        
        PID:1152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        46⤵
        
        PID:1256
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        47⤵
        
        PID:3612
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        48⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        49⤵
        
        PID:4888
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        50⤵
        
        PID:1528
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        51⤵
        
        PID:1220
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        52⤵
        
        PID:2144
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        53⤵
        
        PID:548
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        54⤵
        Drops file in Program Files directory
        
        PID:4884
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        55⤵
        Drops file in Program Files directory
        
        PID:4264
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        56⤵
        Drops file in Program Files directory
        
        PID:4008
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        57⤵
        
        PID:2336
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        58⤵
        Drops file in Program Files directory
        
        PID:1396
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        59⤵
        
        PID:3244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        60⤵
        
        PID:4104
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        61⤵
        
        PID:432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        62⤵
        
        PID:1912
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        63⤵
        Drops file in Program Files directory
        
        PID:3056
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        64⤵
        
        PID:2532
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        65⤵
        
        PID:2384
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        66⤵
        
        PID:4952
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        67⤵
        
        PID:2112
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        68⤵
        
        PID:3964
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        69⤵
        
        PID:2284
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        70⤵
        
        PID:4020
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        71⤵
        Drops file in Program Files directory
        
        PID:3596
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        72⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        73⤵
        Drops file in Program Files directory
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        74⤵
        
        PID:3456
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        75⤵
        Drops file in Program Files directory
        
        PID:2240
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        76⤵
        
        PID:3216
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        77⤵
        
        PID:3700
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        78⤵
        
        PID:1576
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        79⤵
        
        PID:1804
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        80⤵
        
        PID:4484
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        81⤵
        
        PID:396
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        82⤵
        
        PID:408
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        83⤵
        
        PID:736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        84⤵
        
        PID:1284
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        85⤵
        Drops file in Program Files directory
        
        PID:3024
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        86⤵
        
        PID:4920
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        87⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        88⤵
        
        PID:4396
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        89⤵
        Drops file in Program Files directory
        
        PID:4364
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        90⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        91⤵
        
        PID:1416
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        92⤵
        
        PID:2152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        93⤵
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        94⤵
        
        PID:764
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        95⤵
        
        PID:1072
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        96⤵
        
        PID:4212
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        97⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        98⤵
        
        PID:3312
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        99⤵
        
        PID:5132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        100⤵
        
        PID:5148
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        101⤵
        
        PID:5164
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        102⤵
        Drops file in Program Files directory
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        103⤵
        Drops file in Program Files directory
        
        PID:5196
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        104⤵
        
        PID:5220
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        105⤵
        
        PID:5236
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        106⤵
        
        PID:5252
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        107⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        108⤵
        
        PID:5284
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        109⤵
        
        PID:5300
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        110⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        111⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        112⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        113⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        114⤵
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        115⤵
        Drops file in Program Files directory
        
        PID:5396
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        116⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        117⤵
        
        PID:5428
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        118⤵
        
        PID:5456
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        119⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        120⤵
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        121⤵
        
        PID:5500
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        122⤵
        Drops file in Program Files directory
        
        PID:5524
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        123⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        124⤵
        Drops file in Program Files directory
        
        PID:5556
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        125⤵
        
        PID:5572
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        126⤵
        
        PID:5596
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        127⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        128⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        129⤵
        Drops file in Program Files directory
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        130⤵
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        131⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        132⤵
        
        PID:5704
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        133⤵
        Drops file in Program Files directory
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        134⤵
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        135⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        136⤵
        
        PID:5772
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        137⤵
        Drops file in Program Files directory
        
        PID:5788
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        138⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        139⤵
        
        PID:5820
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        140⤵
        
        PID:5840
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        141⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        142⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        143⤵
        
        PID:5888
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        144⤵
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        145⤵
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        146⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        147⤵
        
        PID:5952
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        148⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        149⤵
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        150⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        151⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        152⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        153⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        154⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        155⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        156⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        157⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        158⤵
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        159⤵
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        160⤵
        
        PID:6152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        161⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        162⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        163⤵
        
        PID:6212
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        164⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        165⤵
        
        PID:6244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        166⤵
        
        PID:6264
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        167⤵
        
        PID:6280
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        168⤵
        
        PID:6296
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        169⤵
        
        PID:6312
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        170⤵
        
        PID:6328
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        171⤵
        
        PID:6344
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        172⤵
        
        PID:6360
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        173⤵
        
        PID:6376
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        174⤵
        
        PID:6392
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        175⤵
        
        PID:6408
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        176⤵
        
        PID:6424
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        177⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        178⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        179⤵
        
        PID:6476
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        180⤵
        
        PID:6492
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        181⤵
        
        PID:6512
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        182⤵
        
        PID:6528
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        183⤵
        
        PID:6544
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        184⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        185⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        186⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        187⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        188⤵
        
        PID:6624
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        189⤵
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        190⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        191⤵
        
        PID:6676
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        192⤵
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        193⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        194⤵
        
        PID:6732
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        195⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        196⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        197⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        198⤵
        
        PID:6804
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        199⤵
        
        PID:6820
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        200⤵
        
        PID:6836
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        201⤵
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        202⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        203⤵
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        204⤵
        
        PID:6900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        205⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        206⤵
        
        PID:6932
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        207⤵
        
        PID:6944
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        208⤵
        
        PID:6960
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        209⤵
        
        PID:6976
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        210⤵
        
        PID:6992
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        211⤵
        
        PID:7012
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        212⤵
        
        PID:7028
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        213⤵
        
        PID:7044
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        214⤵
        
        PID:7064
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        215⤵
        
        PID:7080
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        216⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        217⤵
        
        PID:7116
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        218⤵
        
        PID:7132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        219⤵
        
        PID:7176
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        220⤵
        
        PID:7208
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        221⤵
        
        PID:7224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        222⤵
        
        PID:7240
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        223⤵
        
        PID:7272
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        224⤵
        
        PID:7288
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        225⤵
        
        PID:7308
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        226⤵
        
        PID:7324
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        227⤵
        
        PID:7340
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        228⤵
        
        PID:7356
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        229⤵
        
        PID:7372
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        230⤵
        
        PID:7388
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        231⤵
        
        PID:7404
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        232⤵
        
        PID:7420
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        233⤵
        
        PID:7436
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        234⤵
        Drops file in Program Files directory
        
        PID:7452
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        235⤵
        
        PID:7468
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        236⤵
        
        PID:7484
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        237⤵
        
        PID:7500
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        238⤵
        
        PID:7516
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        239⤵
        
        PID:7532
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        240⤵
        
        PID:7548
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        241⤵
        
        PID:7564
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        242⤵
        
        PID:7580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        243⤵
        
        PID:7596
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        244⤵
        
        PID:7612
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        245⤵
        
        PID:7628
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        246⤵
        
        PID:7644
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        247⤵
        
        PID:7664
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        248⤵
        
        PID:7680
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        249⤵
        
        PID:7696
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        250⤵
        
        PID:7712
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        251⤵
        
        PID:7728
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        252⤵
        
        PID:7744
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        253⤵
        
        PID:7760
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        254⤵
        
        PID:7776
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        255⤵
        
        PID:7792
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        256⤵
        
        PID:7808
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        257⤵
        
        PID:7824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        258⤵
        
        PID:7840
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        259⤵
        
        PID:7856
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        260⤵
        
        PID:7876
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        261⤵
        
        PID:7892
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        262⤵
        
        PID:7908
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        263⤵
        
        PID:7924
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        264⤵
        
        PID:7940
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        265⤵
        
        PID:7956
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        266⤵
        
        PID:7972
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        267⤵
        
        PID:7988
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        268⤵
        
        PID:8004
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        269⤵
        
        PID:8020
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        270⤵
        
        PID:8048
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        271⤵
        
        PID:8068
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        272⤵
        
        PID:8100
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        273⤵
        
        PID:8116
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        274⤵
        
        PID:8164
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        275⤵
        
        PID:7164
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        276⤵
        
        PID:4652
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        277⤵
        
        PID:8240
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        278⤵
        
        PID:8256
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        279⤵
        
        PID:8312
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        280⤵
        
        PID:8332
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        281⤵
        Drops file in Program Files directory
        
        PID:8348
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        282⤵
        
        PID:8360
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        283⤵
        
        PID:8380
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        284⤵
        Drops file in Program Files directory
        
        PID:8400
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        285⤵
        
        PID:8416
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        286⤵
        
        PID:8436
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        287⤵
        Drops file in Program Files directory
        
        PID:8580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        288⤵
        
        PID:8708
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        289⤵
        
        PID:9152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        290⤵
        
        PID:9392
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        291⤵
        
        PID:11920
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        292⤵
        
        PID:8912
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        293⤵
        
        PID:8664
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        294⤵
        
        PID:9944
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        295⤵
        
        PID:9844
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        296⤵
        
        PID:10188
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        297⤵
        
        PID:10080
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        298⤵
        
        PID:9672
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        299⤵
        
        PID:9636
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        300⤵
        
        PID:9756
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        301⤵
        
        PID:9504
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        302⤵
        
        PID:10428
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        303⤵
        Drops file in Program Files directory
        
        PID:10552
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        304⤵
        Drops file in Program Files directory
        
        PID:10644
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        305⤵
        
        PID:10780
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        306⤵
        
        PID:10884
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        307⤵
        
        PID:11708
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        308⤵
        Drops file in Program Files directory
        
        PID:10968
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        309⤵
        
        PID:11016
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        310⤵
        
        PID:11104
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        311⤵
        
        PID:11164
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        312⤵
        
        PID:11304
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        313⤵
        
        PID:11452
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        314⤵
        
        PID:9684
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        315⤵
        
        PID:9900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        316⤵
        
        PID:9100
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        317⤵
        
        PID:9380
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        318⤵
        
        PID:10356
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        319⤵
        
        PID:11244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        320⤵
        
        PID:11068
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        321⤵
        
        PID:10420
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        322⤵
        
        PID:12276
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        323⤵
        
        PID:10352
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        324⤵
        
        PID:10280
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        325⤵
        
        PID:8548
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        326⤵
        
        PID:11496
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        327⤵
        Drops file in Program Files directory
        
        PID:9908
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        328⤵
        
        PID:10688
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        329⤵
        
        PID:4232
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        330⤵
        
        PID:10028
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        331⤵
        
        PID:12108
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        332⤵
        
        PID:10928
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        333⤵
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        334⤵
        
        PID:1628
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        335⤵
        
        PID:1352
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        336⤵
        
        PID:11228
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        337⤵
        
        PID:976
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        338⤵
        
        PID:11364
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        339⤵
        
        PID:11448
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        340⤵
        
        PID:8480
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        341⤵
        
        PID:10116
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        342⤵
        
        PID:3600
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        343⤵
        
        PID:10068
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        344⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        345⤵
        
        PID:8740
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        346⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        347⤵
        
        PID:8520
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        348⤵
        
        PID:1012
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        349⤵
        
        PID:9576
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        350⤵
        
        PID:9784
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        351⤵
        
        PID:9696
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        352⤵
        
        PID:8672
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        353⤵
        
        PID:10236
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        354⤵
        
        PID:9620
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        355⤵
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        356⤵
        
        PID:4928
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        357⤵
        
        PID:3080
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        358⤵
        
        PID:8616
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        359⤵
        
        PID:9824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        360⤵
        
        PID:3676
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        361⤵
        
        PID:11084
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        362⤵
        
        PID:11276
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        363⤵
        
        PID:8648
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        364⤵
        
        PID:10820
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        365⤵
        
        PID:10708
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        366⤵
        
        PID:10624
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        367⤵
        
        PID:10436
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        368⤵
        
        PID:11132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        369⤵
        
        PID:11136
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        370⤵
        
        PID:12080
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        371⤵
        
        PID:9992
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        372⤵
        Drops file in Program Files directory
        
        PID:12236
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        373⤵
        Drops file in Program Files directory
        
        PID:9076
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        374⤵
        Drops file in Program Files directory
        
        PID:9060
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        375⤵
        
        PID:9028
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        376⤵
        Drops file in Program Files directory
        
        PID:9352
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        377⤵
        
        PID:11356
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        378⤵
        
        PID:11700
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        379⤵
        
        PID:11896
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        380⤵
        
        PID:12120
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        381⤵
        
        PID:12168
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        382⤵
        
        PID:9644
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        383⤵
        
        PID:11948
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        384⤵
        
        PID:12016
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        385⤵
        
        PID:12004
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        386⤵
        Drops file in Program Files directory
        
        PID:11988
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        387⤵
        
        PID:12104
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        388⤵
        
        PID:12152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        389⤵
        
        PID:12184
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        390⤵
        
        PID:12224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        391⤵
        Drops file in Program Files directory
        
        PID:12244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        392⤵
        
        PID:12284
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        393⤵
        
        PID:12180
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        394⤵
        Drops file in Program Files directory
        
        PID:12132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        395⤵
        
        PID:12048
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        396⤵
        
        PID:11900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        397⤵
        
        PID:8504
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        398⤵
        
        PID:9260
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        399⤵
        
        PID:10156
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        400⤵
        
        PID:9284
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        401⤵
        
        PID:8980
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        402⤵
        
        PID:8960
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        403⤵
        
        PID:8932
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        404⤵
        
        PID:8872
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        405⤵
        
        PID:8840
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        406⤵
        
        PID:9172
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        407⤵
        
        PID:9464
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        408⤵
        
        PID:9444
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        409⤵
        
        PID:9412
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        410⤵
        
        PID:9400
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        411⤵
        
        PID:9340
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        412⤵
        
        PID:9320
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        413⤵
        
        PID:9300
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        414⤵
        
        PID:9236
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        415⤵
        
        PID:9736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        416⤵
        
        PID:9564
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        417⤵
        
        PID:2264
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        418⤵
        
        PID:1788
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        419⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        420⤵
        
        PID:8528
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        421⤵
        
        PID:11632
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        422⤵
        
        PID:11676
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        423⤵
        
        PID:11716
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        424⤵
        
        PID:11852
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        425⤵
        
        PID:8572
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        426⤵
        
        PID:10064
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        427⤵
        
        PID:2372
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        428⤵
        
        PID:8584
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        429⤵
        
        PID:11832
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        430⤵
        
        PID:10336
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        431⤵
        
        PID:10144
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        432⤵
        
        PID:11088
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        433⤵
        Drops file in Program Files directory
        
        PID:11864
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        434⤵
        
        PID:10516
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        435⤵
        
        PID:11432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        436⤵
        Drops file in Program Files directory
        
        PID:11416
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        437⤵
        
        PID:11640
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        438⤵
        
        PID:8536
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        439⤵
        
        PID:10112
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        440⤵
        
        PID:10416
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        441⤵
        
        PID:10868
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        442⤵
        
        PID:10588
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        443⤵
        
        PID:10232
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        444⤵
        
        PID:10452
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        445⤵
        
        PID:3580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        446⤵
        
        PID:12064
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        447⤵
        
        PID:10904
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        448⤵
        
        PID:10468
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        449⤵
        Drops file in Program Files directory
        
        PID:928
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        450⤵
        
        PID:9072
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        451⤵
        
        PID:10340
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        452⤵
        Drops file in Program Files directory
        
        PID:10000
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        453⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        454⤵
        
        PID:12120
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        455⤵
        
        PID:12272
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        456⤵
        
        PID:8576
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        457⤵
        
        PID:12104
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        458⤵
        
        PID:10184
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        459⤵
        Drops file in Program Files directory
        
        PID:8452
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        460⤵
        
        PID:10040
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        461⤵
        
        PID:212
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        462⤵
        
        PID:10264
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        463⤵
        
        PID:8920
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        464⤵
        
        PID:9968
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        465⤵
        
        PID:9348
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        466⤵
        
        PID:8844
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        467⤵
        
        PID:2044
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        468⤵
        
        PID:10256
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        469⤵
        
        PID:10020
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        470⤵
        
        PID:9744
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        471⤵
        
        PID:8504
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        472⤵
        
        PID:9492
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        473⤵
        
        PID:12140
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        474⤵
        
        PID:8860
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        475⤵
        
        PID:9448
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        476⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        477⤵
        
        PID:9936
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        478⤵
        
        PID:9848
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        479⤵
        
        PID:10824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        480⤵
        
        PID:12080
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        481⤵
        
        PID:10912
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        482⤵
        
        PID:11360
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        483⤵
        
        PID:11816
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        484⤵
        
        PID:11320
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        485⤵
        
        PID:10224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        486⤵
        
        PID:5232
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        487⤵
        
        PID:10692
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        488⤵
        
        PID:9612
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        489⤵
        
        PID:8432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        490⤵
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        491⤵
        
        PID:11752
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        492⤵
        
        PID:9984
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        493⤵
        
        PID:11176
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        494⤵
        
        PID:10760
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        495⤵
        
        PID:5260
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        496⤵
        
        PID:10596
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        497⤵
        
        PID:5200
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        498⤵
        
        PID:10956
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        499⤵
        
        PID:11560
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        500⤵
        
        PID:9712
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        501⤵
        
        PID:9588
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        502⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        503⤵
        
        PID:5188
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        504⤵
        
        PID:11584
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        505⤵
        
        PID:10120
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        506⤵
        
        PID:9276
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        507⤵
        
        PID:5400
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        508⤵
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        509⤵
        
        PID:8944
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        510⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        511⤵
        
        PID:10736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        512⤵
        
        PID:9036
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        513⤵
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        514⤵
        
        PID:9460
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        515⤵
        
        PID:10816
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        516⤵
        
        PID:8388
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        517⤵
        
        PID:5768
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        518⤵
        
        PID:9000
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        519⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        520⤵
        
        PID:11824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        521⤵
        
        PID:8888
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        522⤵
        
        PID:12076
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        523⤵
        
        PID:5524
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        524⤵
        
        PID:5084
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        525⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        526⤵
        
        PID:10848
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        527⤵
        
        PID:8940
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        528⤵
        
        PID:9472
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        529⤵
        Drops file in Program Files directory
        
        PID:10360
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        530⤵
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        531⤵
        
        PID:8864
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        532⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        533⤵
        Drops file in Program Files directory
        
        PID:5824
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        534⤵
        
        PID:12128
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        535⤵
        
        PID:1832
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        536⤵
        
        PID:9016
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        537⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        538⤵
        Drops file in Program Files directory
        
        PID:10384
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        539⤵
        
        PID:9152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        540⤵
        
        PID:8836
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        541⤵
        
        PID:10964
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        542⤵
        Drops file in Program Files directory
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        543⤵
        
        PID:10704
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        544⤵
        
        PID:11740
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        545⤵
        
        PID:4984
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        546⤵
        
        PID:8896
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        547⤵
        Drops file in Program Files directory
        
        PID:12232
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        548⤵
        
        PID:12228
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        549⤵
        
        PID:8716
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        550⤵
        Drops file in Program Files directory
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        551⤵
        
        PID:8600
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        552⤵
        Drops file in Program Files directory
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        553⤵
        
        PID:4028
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        554⤵
        
        PID:9200
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        555⤵
        
        PID:12252
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        556⤵
        
        PID:9552
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        557⤵
        
        PID:5636
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        558⤵
        
        PID:10568
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        559⤵
        
        PID:1372
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        560⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        561⤵
        
        PID:11328
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        562⤵
        
        PID:11944
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        563⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        564⤵
        
        PID:5412
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        565⤵
        
        PID:12032
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        566⤵
        
        PID:11564
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        567⤵
        
        PID:8792
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        568⤵
        
        PID:9160
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        569⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        570⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        571⤵
        
        PID:3316
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        572⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        573⤵
        
        PID:11708
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        574⤵
        
        PID:10884
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        575⤵
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        576⤵
        
        PID:10400
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        577⤵
        
        PID:10140
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        578⤵
        
        PID:5748
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        579⤵
        
        PID:11900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        580⤵
        
        PID:12180
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        581⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        582⤵
        
        PID:12184
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        583⤵
        
        PID:11912
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        584⤵
        
        PID:11700
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        585⤵
        
        PID:10808
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        586⤵
        
        PID:8868
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        587⤵
        
        PID:9600
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        588⤵
        
        PID:10432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        589⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        590⤵
        
        PID:9604
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        591⤵
        
        PID:6112
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        592⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        593⤵
        
        PID:6092
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        594⤵
        
        PID:12176
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        595⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        596⤵
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        597⤵
        
        PID:11152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        598⤵
        
        PID:6188
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        599⤵
        
        PID:6152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        600⤵
        
        PID:10800
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        601⤵
        
        PID:11532
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        602⤵
        
        PID:11160
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        603⤵
        
        PID:8032
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        604⤵
        
        PID:8040
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        605⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        606⤵
        
        PID:7160
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        607⤵
        
        PID:10900
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        608⤵
        
        PID:11888
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        609⤵
        
        PID:10580
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        610⤵
        
        PID:11680
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        611⤵
        
        PID:5772
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        612⤵
        
        PID:5908
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        613⤵
        
        PID:4380
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        614⤵
        
        PID:6288
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        615⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        616⤵
        
        PID:5340
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        617⤵
        
        PID:8084
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        618⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        619⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        620⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        621⤵
        
        PID:6244
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        622⤵
        
        PID:6020
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        623⤵
        
        PID:12048
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        624⤵
        
        PID:10792
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        625⤵
        
        PID:12220
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        626⤵
        
        PID:11736
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        627⤵
        
        PID:5956
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        628⤵
        
        PID:8744
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        629⤵
        
        PID:5516
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        630⤵
        
        PID:6356
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        631⤵
        
        PID:6480
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        632⤵
        
        PID:6592
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        633⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        634⤵
        
        PID:6224
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        635⤵
        
        PID:6232
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        636⤵
        
        PID:6264
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        637⤵
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        638⤵
        
        PID:6424
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        639⤵
        
        PID:6540
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        640⤵
        
        PID:6432
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        641⤵
        
        PID:6648
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        642⤵
        
        PID:10344
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        643⤵
        
        PID:5272
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        644⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        645⤵
        
        PID:8404
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        646⤵
        
        PID:5600
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        647⤵
        
        PID:6392
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        648⤵
        
        PID:3856
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        649⤵
        
        PID:5664
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        650⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        651⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        652⤵
        
        PID:3012
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        653⤵
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        654⤵
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        655⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        656⤵
        
        PID:12012
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        657⤵
        
        PID:10788
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        658⤵
        
        PID:6276
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        659⤵
        
        PID:10316
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        660⤵
        
        PID:8628
        
        C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\eb5b30cf1d899c58ba1d65f8827ffeb0_NeikiAnalytics.exe"
        661⤵
        
        PID:8596
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 8536 -s 428
        439⤵
        Program crash
        
        PID:6572
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 11432 -s 444
        436⤵
        Program crash
        
        PID:6324
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 11088 -s 428
        433⤵
        Program crash
        
        PID:9992
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 10336 -s 436
        431⤵
        Program crash
        
        PID:6664
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 11832 -s 428
        430⤵
        Program crash
        
        PID:10496
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 444
        429⤵
        Program crash
        
        PID:11108
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 484
        429⤵
        Program crash
        
        PID:5948
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 12284 -s 448
        393⤵
        Program crash
        
        PID:8428
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 12224 -s 436
        391⤵
        Program crash
        
        PID:10844
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 12184 -s 440
        390⤵
        Program crash
        
        PID:376
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9060 -s 452
        375⤵
        Program crash
        
        PID:10360
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 12236 -s 436
        373⤵
        Program crash
        
        PID:11740
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9992 -s 428
        372⤵
        Program crash
        
        PID:11512
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 12080 -s 436
        371⤵
        Program crash
        
        PID:8828
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 11104 -s 444
        311⤵
        Program crash
        
        PID:8596
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 11104 -s 444
        311⤵
        Program crash
        
        PID:9248
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 10968 -s 476
        309⤵
        Program crash
        
        PID:9580
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 10552 -s 436
        304⤵
        Program crash
        
        PID:11700
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 10552 -s 456
        304⤵
        Program crash
        
        PID:10800
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 10428 -s 436
        303⤵
        Program crash
        
        PID:11672
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9756 -s 436
        301⤵
        Program crash
        
        PID:9064
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9756 -s 456
        301⤵
        Program crash
        
        PID:5576
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9636 -s 448
        300⤵
        Program crash
        
        PID:8408
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9672 -s 444
        299⤵
        Program crash
        
        PID:9740
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 9152 -s 384
        290⤵
        Program crash
        
        PID:1988
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 8360 -s 440
        283⤵
        Program crash
        
        PID:11120
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7744 -s 440
        253⤵
        Program crash
        
        PID:11660
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7744 -s 460
        253⤵
        Program crash
        
        PID:8428
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7468 -s 440
        236⤵
        Program crash
        
        PID:8516
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7452 -s 440
        235⤵
        Program crash
        
        PID:6068
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7452 -s 440
        235⤵
        Program crash
        
        PID:5392
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 440
        153⤵
        Program crash
        
        PID:12064
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 484
        153⤵
        Program crash
        
        PID:8856
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 5888 -s 488
        144⤵
        Program crash
        
        PID:3468
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 5772 -s 400
        137⤵
        Program crash
        
        PID:10748
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 5756 -s 444
        136⤵
        Program crash
        
        PID:4476
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 5616 -s 368
        128⤵
        Program crash
        
        PID:11644
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 824 -s 444
        38⤵
        Program crash
        
        PID:10036
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 824 -s 444
        38⤵
        Program crash
        
        PID:8500
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3592 -s 428
        35⤵
        Program crash
        
        PID:8780
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3592 -s 428
        35⤵
        Program crash
        
        PID:8468
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 2300 -s 428
        33⤵
        Program crash
        
        PID:8668
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 2300 -s 428
        33⤵
        Program crash
        
        PID:10380
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3580 -s 448
        28⤵
        Program crash
        
        PID:2264
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 4904 -s 428
        19⤵
        Program crash
        
        PID:10636
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 1276 -s 452
        18⤵
        Program crash
        
        PID:464
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 1276 -s 480
        18⤵
        Program crash
        
        PID:10000
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 1744 -s 392
        8⤵
        Program crash
        
        PID:8676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 1744 -ip 1744
1⤵
PID:11496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 2300 -ip 2300
1⤵
PID:9212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 824 -ip 824
1⤵
PID:8888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 3592 -ip 3592
1⤵
PID:9540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2044 -ip 2044
1⤵
PID:9948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 2092 -ip 2092
1⤵
PID:9012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 5108 -ip 5108
1⤵
PID:9980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 464 -ip 464
1⤵
PID:10232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 592 -p 376 -ip 376
1⤵
PID:10064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4932 -ip 4932
1⤵
PID:10072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 1988 -ip 1988
1⤵
PID:10172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 3020 -ip 3020
1⤵
PID:9876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 1832 -ip 1832
1⤵
PID:9916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4676 -ip 4676
1⤵
PID:10104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 4136 -ip 4136
1⤵
PID:9816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 4248 -ip 4248
1⤵
PID:9780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 4252 -ip 4252
1⤵
PID:9008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1028 -ip 1028
1⤵
PID:9680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3004 -ip 3004
1⤵
PID:9720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 4980 -ip 4980
1⤵
PID:9848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 5000 -ip 5000
1⤵
PID:9616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4456 -ip 4456
1⤵
PID:9588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 2224 -ip 2224
1⤵
PID:8604

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 4620 -ip 4620
1⤵
PID:9568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 1604 -ip 1604
1⤵
PID:10216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 3680 -ip 3680
1⤵
PID:9996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4488 -ip 4488
1⤵
PID:9860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 3600 -ip 3600
1⤵
PID:9828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 3500 -ip 3500
1⤵
PID:9516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 4964 -ip 4964
1⤵
PID:9192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3660 -ip 3660
1⤵
PID:10460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 5084 -ip 5084
1⤵
PID:10492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 3580 -ip 3580
1⤵
PID:10540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 3524 -ip 3524
1⤵
PID:10564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2044 -ip 2044
1⤵
PID:10572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 5108 -ip 5108
1⤵
PID:10584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 2092 -ip 2092
1⤵
PID:10592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 464 -ip 464
1⤵
PID:10636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 376 -ip 376
1⤵
PID:10688

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4932 -ip 4932
1⤵
PID:10720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 1988 -ip 1988
1⤵
PID:10748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 1832 -ip 1832
1⤵
PID:10788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3020 -ip 3020
1⤵
PID:10800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 4136 -ip 4136
1⤵
PID:10852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 4248 -ip 4248
1⤵
PID:10908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 4252 -ip 4252
1⤵
PID:9032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 1028 -ip 1028
1⤵
PID:9792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 2224 -ip 2224
1⤵
PID:10980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 4676 -ip 4676
1⤵
PID:10992

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 5000 -ip 5000
1⤵
PID:11076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 3004 -ip 3004
1⤵
PID:11112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4620 -ip 4620
1⤵
PID:11144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4456 -ip 4456
1⤵
PID:11172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 4980 -ip 4980
1⤵
PID:11212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 3600 -ip 3600
1⤵
PID:11268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 4488 -ip 4488
1⤵
PID:11312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 3660 -ip 3660
1⤵
PID:11332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 3680 -ip 3680
1⤵
PID:11372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 4964 -ip 4964
1⤵
PID:11400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3500 -ip 3500
1⤵
PID:11428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 1604 -ip 1604
1⤵
PID:11484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 3524 -ip 3524
1⤵
PID:9604

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5084 -ip 5084
1⤵
PID:9772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 3580 -ip 3580
1⤵
PID:10220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2300 -ip 2300
1⤵
PID:11360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 824 -ip 824
1⤵
PID:11344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 3592 -ip 3592
1⤵
PID:11292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 1744 -ip 1744
1⤵
PID:11200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 8400 -ip 8400
1⤵
PID:9280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8348 -ip 8348
1⤵
PID:10416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 8580 -ip 8580
1⤵
PID:10388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 8416 -ip 8416
1⤵
PID:10316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8360 -ip 8360
1⤵
PID:10264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 8380 -ip 8380
1⤵
PID:8568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 8436 -ip 8436
1⤵
PID:9476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 8348 -ip 8348
1⤵
PID:8896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8400 -ip 8400
1⤵
PID:8888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 8708 -ip 8708
1⤵
PID:10584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 8416 -ip 8416
1⤵
PID:10152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 980 -p 8580 -ip 8580
1⤵
PID:10016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 9152 -ip 9152
1⤵
PID:11488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 8436 -ip 8436
1⤵
PID:2660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 8360 -ip 8360
1⤵
PID:212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 8380 -ip 8380
1⤵
PID:10904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8708 -ip 8708
1⤵
PID:4248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 9152 -ip 9152
1⤵
PID:12272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 1276 -ip 1276
1⤵
PID:12196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 1276 -ip 1276
1⤵
PID:5020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 6032 -ip 6032
1⤵
PID:11956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 6032 -ip 6032
1⤵
PID:8948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9992 -ip 9992
1⤵
PID:9592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 11136 -ip 11136
1⤵
PID:8404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 12236 -ip 12236
1⤵
PID:12196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 12080 -ip 12080
1⤵
PID:5112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 9060 -ip 9060
1⤵
PID:10500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 9028 -ip 9028
1⤵
PID:11984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 9076 -ip 9076
1⤵
PID:11620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 9352 -ip 9352
1⤵
PID:11660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 11356 -ip 11356
1⤵
PID:11692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 11700 -ip 11700
1⤵
PID:11756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 11896 -ip 11896
1⤵
PID:11956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 12120 -ip 12120
1⤵
PID:8936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 12168 -ip 12168
1⤵
PID:8496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 9644 -ip 9644
1⤵
PID:9924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 11948 -ip 11948
1⤵
PID:10264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 11136 -ip 11136
1⤵
PID:10912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 9076 -ip 9076
1⤵
PID:9996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 9028 -ip 9028
1⤵
PID:10760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 12016 -ip 12016
1⤵
PID:10400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 11700 -ip 11700
1⤵
PID:11324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 9352 -ip 9352
1⤵
PID:9512

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 11988 -ip 11988
1⤵
PID:10392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 12004 -ip 12004
1⤵
PID:11140

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 11356 -ip 11356
1⤵
PID:10216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 12152 -ip 12152
1⤵
PID:9948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 12104 -ip 12104
1⤵
PID:11840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 12184 -ip 12184
1⤵
PID:10128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 4904 -ip 4904
1⤵
PID:10748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 12224 -ip 12224
1⤵
PID:9912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 11896 -ip 11896
1⤵
PID:9552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 12244 -ip 12244
1⤵
PID:11856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 12120 -ip 12120
1⤵
PID:10564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 9644 -ip 9644
1⤵
PID:3004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 12284 -ip 12284
1⤵
PID:8916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 8504 -ip 8504
1⤵
PID:4420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 9260 -ip 9260
1⤵
PID:11080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 12180 -ip 12180
1⤵
PID:11336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 12048 -ip 12048
1⤵
PID:9976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 11900 -ip 11900
1⤵
PID:11332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 8840 -ip 8840
1⤵
PID:9896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 11948 -ip 11948
1⤵
PID:11484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 8960 -ip 8960
1⤵
PID:9632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 10156 -ip 10156
1⤵
PID:10888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 12132 -ip 12132
1⤵
PID:11408

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 9464 -ip 9464
1⤵
PID:11380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 9284 -ip 9284
1⤵
PID:1588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 8980 -ip 8980
1⤵
PID:10524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 8932 -ip 8932
1⤵
PID:3880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 8872 -ip 8872
1⤵
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 12168 -ip 12168
1⤵
PID:12088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 9172 -ip 9172
1⤵
PID:11316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1044 -p 12016 -ip 12016
1⤵
PID:11504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1104 -p 12004 -ip 12004
1⤵
PID:8380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1064 -p 11988 -ip 11988
1⤵
PID:11624

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 12152 -ip 12152
1⤵
PID:8524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 12184 -ip 12184
1⤵
PID:9764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4904 -ip 4904
1⤵
PID:10872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 12104 -ip 12104
1⤵
PID:10952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 12224 -ip 12224
1⤵
PID:9708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 12284 -ip 12284
1⤵
PID:3468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 12244 -ip 12244
1⤵
PID:11444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 5164 -ip 5164
1⤵
PID:212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 8504 -ip 8504
1⤵
PID:8820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 9464 -ip 9464
1⤵
PID:9188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 5220 -ip 5220
1⤵
PID:9348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 8932 -ip 8932
1⤵
PID:8436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 9284 -ip 9284
1⤵
PID:9732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 932 -p 9260 -ip 9260
1⤵
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1176 -p 5196 -ip 5196
1⤵
PID:8712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1196 -p 12048 -ip 12048
1⤵
PID:9572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 980 -p 5184 -ip 5184
1⤵
PID:8756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1048 -p 8840 -ip 8840
1⤵
PID:11552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 12132 -ip 12132
1⤵
PID:9924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 10156 -ip 10156
1⤵
PID:824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 9172 -ip 9172
1⤵
PID:3868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 8980 -ip 8980
1⤵
PID:4564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5252 -ip 5252
1⤵
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 8872 -ip 8872
1⤵
PID:10440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 592 -p 11900 -ip 11900
1⤵
PID:8924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 8960 -ip 8960
1⤵
PID:10660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 5236 -ip 5236
1⤵
PID:10128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1048 -p 12180 -ip 12180
1⤵
PID:8384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5268 -ip 5268
1⤵
PID:8416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 5284 -ip 5284
1⤵
PID:10360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 5300 -ip 5300
1⤵
PID:10216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5328 -ip 5328
1⤵
PID:12176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1052 -p 5344 -ip 5344
1⤵
PID:5112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5364 -ip 5364
1⤵
PID:11804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 5380 -ip 5380
1⤵
PID:9188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 5312 -ip 5312
1⤵
PID:8808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 5396 -ip 5396
1⤵
PID:3400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 12236 -ip 12236
1⤵
PID:11212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 5408 -ip 5408
1⤵
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 9060 -ip 9060
1⤵
PID:9468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 5428 -ip 5428
1⤵
PID:8764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 5456 -ip 5456
1⤵
PID:11600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 5572 -ip 5572
1⤵
PID:9792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 5472 -ip 5472
1⤵
PID:8388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5500 -ip 5500
1⤵
PID:11888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 5556 -ip 5556
1⤵
PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 9992 -ip 9992
1⤵
PID:11996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 12080 -ip 12080
1⤵
PID:9540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5672 -ip 5672
1⤵
PID:11316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 5596 -ip 5596
1⤵
PID:9848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 5488 -ip 5488
1⤵
PID:10748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 5652 -ip 5652
1⤵
PID:12012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1108 -p 5540 -ip 5540
1⤵
PID:5108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 5616 -ip 5616
1⤵
PID:1540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5524 -ip 5524
1⤵
PID:3468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 5632 -ip 5632
1⤵
PID:11748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5736 -ip 5736
1⤵
PID:3472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 5720 -ip 5720
1⤵
PID:12052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 5756 -ip 5756
1⤵
PID:9840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 5688 -ip 5688
1⤵
PID:8432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1172 -p 5704 -ip 5704
1⤵
PID:8784

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5772 -ip 5772
1⤵
PID:8916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 5920 -ip 5920
1⤵
PID:11356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 5788 -ip 5788
1⤵
PID:9324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5888 -ip 5888
1⤵
PID:9228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1176 -p 5804 -ip 5804
1⤵
PID:11240

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5904 -ip 5904
1⤵
PID:10956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 5840 -ip 5840
1⤵
PID:10224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5820 -ip 5820
1⤵
PID:11320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 5872 -ip 5872
1⤵
PID:9764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 5856 -ip 5856
1⤵
PID:8936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 5164 -ip 5164
1⤵
PID:12208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5196 -ip 5196
1⤵
PID:1828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 5220 -ip 5220
1⤵
PID:11336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1116 -p 5184 -ip 5184
1⤵
PID:5056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 5252 -ip 5252
1⤵
PID:3980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 5268 -ip 5268
1⤵
PID:11944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1268 -p 5236 -ip 5236
1⤵
PID:9984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1172 -p 5344 -ip 5344
1⤵
PID:10960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 5380 -ip 5380
1⤵
PID:9588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1116 -p 5284 -ip 5284
1⤵
PID:11964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5328 -ip 5328
1⤵
PID:8516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1236 -p 5300 -ip 5300
1⤵
PID:5040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5364 -ip 5364
1⤵
PID:11152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 5408 -ip 5408
1⤵
PID:9256

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1268 -p 5396 -ip 5396
1⤵
PID:11980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 5500 -ip 5500
1⤵
PID:11564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5456 -ip 5456
1⤵
PID:9168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 5488 -ip 5488
1⤵
PID:12048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 5596 -ip 5596
1⤵
PID:12076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 5572 -ip 5572
1⤵
PID:10288

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1300 -p 5312 -ip 5312
1⤵
PID:3868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1028 -p 5556 -ip 5556
1⤵
PID:3668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5472 -ip 5472
1⤵
PID:10344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1312 -p 5428 -ip 5428
1⤵
PID:9368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1248 -p 5672 -ip 5672
1⤵
PID:11824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 5652 -ip 5652
1⤵
PID:12152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 5632 -ip 5632
1⤵
PID:8968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1280 -p 5524 -ip 5524
1⤵
PID:11916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1272 -p 5736 -ip 5736
1⤵
PID:9748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 5756 -ip 5756
1⤵
PID:8864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1124 -p 5720 -ip 5720
1⤵
PID:11588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 5920 -ip 5920
1⤵
PID:8952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 5788 -ip 5788
1⤵
PID:9220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 5820 -ip 5820
1⤵
PID:8368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5804 -ip 5804
1⤵
PID:9976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5840 -ip 5840
1⤵
PID:12176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5540 -ip 5540
1⤵
PID:10260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 5772 -ip 5772
1⤵
PID:9468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 5704 -ip 5704
1⤵
PID:9016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 5688 -ip 5688
1⤵
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 5888 -ip 5888
1⤵
PID:9596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5872 -ip 5872
1⤵
PID:11600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5856 -ip 5856
1⤵
PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 5904 -ip 5904
1⤵
PID:12260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5616 -ip 5616
1⤵
PID:11740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 9672 -ip 9672
1⤵
PID:11696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 9636 -ip 9636
1⤵
PID:5576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 9756 -ip 9756
1⤵
PID:5432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 9504 -ip 9504
1⤵
PID:9472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1272 -p 10428 -ip 10428
1⤵
PID:10128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 10552 -ip 10552
1⤵
PID:10900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1288 -p 10644 -ip 10644
1⤵
PID:5808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 9504 -ip 9504
1⤵
PID:11460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 10884 -ip 10884
1⤵
PID:8972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1148 -p 10780 -ip 10780
1⤵
PID:5912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 11708 -ip 11708
1⤵
PID:11328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1044 -p 10644 -ip 10644
1⤵
PID:9992

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 9672 -ip 9672
1⤵
PID:4476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 10968 -ip 10968
1⤵
PID:9560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 10780 -ip 10780
1⤵
PID:10996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1288 -p 11016 -ip 11016
1⤵
PID:5272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 11104 -ip 11104
1⤵
PID:11696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1272 -p 11708 -ip 11708
1⤵
PID:5376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1048 -p 10884 -ip 10884
1⤵
PID:5564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 11164 -ip 11164
1⤵
PID:5500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1272 -p 9636 -ip 9636
1⤵
PID:8736

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 10968 -ip 10968
1⤵
PID:11724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 11016 -ip 11016
1⤵
PID:5600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 11164 -ip 11164
1⤵
PID:8376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 10428 -ip 10428
1⤵
PID:5488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9756 -ip 9756
1⤵
PID:11904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 10552 -ip 10552
1⤵
PID:8868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 11104 -ip 11104
1⤵
PID:9488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 7744 -ip 7744
1⤵
PID:10156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 7744 -ip 7744
1⤵
PID:9636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 7452 -ip 7452
1⤵
PID:9788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 768 -p 8584 -ip 8584
1⤵
PID:9932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 7452 -ip 7452
1⤵
PID:11916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 8584 -ip 8584
1⤵
PID:10788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 11832 -ip 11832
1⤵
PID:5956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 10336 -ip 10336
1⤵
PID:5420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 10144 -ip 10144
1⤵
PID:6380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1124 -p 11088 -ip 11088
1⤵
PID:6564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 11864 -ip 11864
1⤵
PID:6432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1264 -p 10144 -ip 10144
1⤵
PID:6396

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1256 -p 10516 -ip 10516
1⤵
PID:10636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 11432 -ip 11432
1⤵
PID:4588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 11864 -ip 11864
1⤵
PID:9024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 11088 -ip 11088
1⤵
PID:6064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1160 -p 11416 -ip 11416
1⤵
PID:11016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 11640 -ip 11640
1⤵
PID:6280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 8536 -ip 8536
1⤵
PID:5284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 10516 -ip 10516
1⤵
PID:6044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1184 -p 11432 -ip 11432
1⤵
PID:9280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 11416 -ip 11416
1⤵
PID:6004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 11640 -ip 11640
1⤵
PID:3668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1160 -p 8536 -ip 8536
1⤵
PID:12168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1180 -p 11832 -ip 11832
1⤵
PID:6196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 10336 -ip 10336
1⤵
PID:5420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 7468 -ip 7468
1⤵
PID:11180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\7zFM.exe

Filesize
1.2MB

MD5
191625fbee74c8fd7e021c02cc9f3e6f

SHA1
d6bdb838a1ca28091dd0052db0041aec0587bf2a

SHA256
e12408089d98225539819985a079750a5a5aec3c69a7c1a393ccfb41b4b79b6d

SHA512
0a0c450459938551b06679e000957b517ea013f8d39b2b3172cf78c0707000b5b047b777f2080e6b5c1ebc4310d18263f97045e392f8f0e05cbe2ca792b44eb8

Download Submit
C:\Program Files\7-Zip\Uninstall.exe

Filesize
339KB

MD5
e42150505b42ac608c9737b1b114fa26

SHA1
f4ec1bd15c26418066254c3ddfe3297521e4ced9

SHA256
16c7c0824bf07d467ec88e4336b89b8eb38a72462ee8538cb138bcfb501b5339

SHA512
12f7a525e3ec25b531e90cc11d243311ab21ae75cd2a7d7f18596ddd360b124c713355f2a3b48047bf701744c738e23d411a0abac026b29d321c8da8876fa1e9

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

Filesize
4.5MB

MD5
04138331588a0c669e07cbfa64bb8384

SHA1
2cd6510c096ebe65538abf6f4933bbbfe0916268

SHA256
f261aaaf6f4ee081e272d10ab9eb33a7d5bbaff0b7c7772185496e65c339daa8

SHA512
ba2839f7e1ec232696ae4750e3a3c583f84036c0a985bf0fb9acda9bebd5aaddb847aebd8d23dd3b586ab4528bb52fc51727832efc7c5d8db9782ead0f278b49

Download Submit
C:\Users\Admin\AppData\Local\Temp\RCX4D09.tmp

Filesize
894KB

MD5
1e3ccf419a245e4fb963997bed926b93

SHA1
0612b387494a555a2e1d17848bc2d9ff6b293d98

SHA256
216d381793a0fcb8dd827c7f73b03acd98695d76a1561d3bef04da0136f3567b

SHA512
bcd1c1bbbca51f5ebc672eea5d4c93dee863cdc6af583baabcd3b4441302d6c653a0c400e443e953f8d7e9061782c7df6b8931e3813920b6b6b55f113cfb324f

Download Submit
C:\Users\Admin\AppData\Local\Temp\RCX4DAE.tmp

Filesize
961KB

MD5
6fafb55ba44b68bbf6110ef61ab35723

SHA1
2d8bfee3ebd6bb80e672e61b4f074fd135398357

SHA256
0c22091f9bb6e9a4f13824706f3012da28f8f22ea1d9de2ff89dfc6f58eba975

SHA512
7ad4540a879275f7e768c6496860316f16f091a4fd538fb0da13bb64209db8f9bae9618dbfe4d1a81cf069be235c3ff855e0ef3e2677d3811654cdc736e461dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\RCX87B2.tmp

Filesize
1008KB

MD5
6219a338e1db19c5cb3afe3610b82461

SHA1
5c68e1aefeefa566fa3913641dd5e3aaead58098

SHA256
070882ac45830affe7f47cda497feb0282b2e7eae0b37ddfeacf3eff6be33941

SHA512
119e4db4e80d97a67e5bbc722ab0c21676d928535e16e4f9384a0c0b0fac99fe6144b25d89f00402956492631cf4ae8c177617527d31fea14c0a3301bbe70183

Download Submit
C:\Users\Admin\AppData\Local\Temp\RCX97DD.tmp

Filesize
908KB

MD5
bdd383e085f65f094daf99438bc9961b

SHA1
2d7c53726c6a680cf2fad419726bf57c8c421c18

SHA256
1a9826c51013c1cb1f41eb40de2dfc8fbd3a08f2c506e8158dba1019a87e0d7a

SHA512
d9ce626e29ed8ed4d62c163d70d0edd8c63f7b882cc663c6a797cf9b7f17beb3feddede865b54f9a05c4cdc8198f4a433e710e66f898cf7fa6d0f40c47cd402c

Download Submit
C:\Users\Admin\AppData\Local\Temp\pUc4C6B.tmp

Filesize
892KB

MD5
eb5b30cf1d899c58ba1d65f8827ffeb0

SHA1
abc5b944e748d40a8030ce7339094f5d552589fb

SHA256
43265ec828bb0b2f71c86bbe9bf2d6d3c094f47419d68b5fd902dca69c59d5f0

SHA512
a08517f4cdad0a6e970a4340fc626ebd4f860be61bcc09f97cabb328baaa219e52925949748cf965defddce83a02ccc7ff7f8bc2ad8152f78bdd5d64b1133ed5

Download Submit
C:\Users\Admin\AppData\Local\Temp\pUc6527.tmp

Filesize
323KB

MD5
93dc5fbc74f0afb3b773f4709b1b9553

SHA1
798074c56f3b7d6663a39f9a6a5b3b9599c699ac

SHA256
f0df16309291610efb320db4a9c0c3c44d12c5d722e3c58481c79c44dbb6271d

SHA512
f166fe2c62bcab2bec63b10bed1f4dcb82854bb0bae430e1cc61ab6d8fe40ff7f2ee1964536b261172a8fa6b00f145fd2e15b8aedef91d25b57af2e26dfd4717

Download Submit
memory/376-1677-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/464-1675-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/824-2179-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1028-1690-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1068-2211-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1152-2216-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1256-2217-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1276-2208-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1604-1700-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1680-2210-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1744-2129-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1832-1678-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/1988-1679-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2044-1676-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2056-2213-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2092-1674-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2224-1686-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2300-2180-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/2324-2212-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3000-2207-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3004-1687-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3020-1680-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3500-1698-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3524-1697-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3580-2177-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3592-2193-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3600-1691-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3660-1696-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/3680-1695-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4136-1683-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4244-2215-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4248-1682-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4252-1684-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4296-2214-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4456-1692-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4488-1693-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4620-1689-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4676-1685-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4856-2206-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4904-2209-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4932-1681-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4964-1701-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/4980-1694-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/5000-1688-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/5084-1699-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/5108-1673-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8348-2171-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8360-2219-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8380-2176-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8400-2172-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8416-2175-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8436-2174-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8580-2173-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/8708-2178-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/9028-3418-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/9076-3428-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/9152-2218-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/9352-3430-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/9644-3433-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/11136-3422-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/11356-3431-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/11700-3429-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/11896-3432-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download