Overview

overview

7

Static

static

3

828562b4fd...cs.exe

windows7-x64

7

828562b4fd...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    11s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 03:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe

  • Size

    1.1MB

  • MD5

    828562b4fd7b9418420a5cc76a8b1050

  • SHA1

    306ad22ea8f583f3516a44052d0547ad3d2d41e0

  • SHA256

    39c467554a5005c87f5b4c41215e469e7f1285e7b877376e2da3170e8e13afef

  • SHA512

    2f53c44fb26216fae231126828aeaec44f5d48c5295507b447cb534bdb3534a9d3d7e4114d953bc52dbb25c57b4dd4b273e1adf67a1a778e6b212e93cdc94287

  • SSDEEP

    24576:lq8rn2WkudS/gic0vKNuWviq84MV/ZobLd3eBKyX:T0qSPe8ii34MVSbJMK6

Score
7/10
persistencespywarestealer

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 11 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 18 IoCs
  • Drops file in Windows directory 48 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 58 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3596
    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
      2⤵
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:3220
      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
        3⤵
        • Checks computer location settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4776
        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
          4⤵
          • Checks computer location settings
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:4092
          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
            5⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:4160
            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
              6⤵
                PID:5432
                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                  7⤵
                    PID:6764
                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                      8⤵
                        PID:10268
                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                        8⤵
                          PID:13644
                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                        7⤵
                          PID:7228
                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                            8⤵
                              PID:17364
                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                            7⤵
                              PID:10692
                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                              7⤵
                                PID:15728
                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                              6⤵
                                PID:6304
                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                  7⤵
                                    PID:9316
                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                    7⤵
                                      PID:14072
                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                    6⤵
                                      PID:8024
                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                        7⤵
                                          PID:15956
                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                        6⤵
                                          PID:10816
                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                          6⤵
                                            PID:15244
                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                          5⤵
                                            PID:4520
                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                              6⤵
                                                PID:6368
                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                  7⤵
                                                    PID:9560
                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                    7⤵
                                                      PID:14332
                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                    6⤵
                                                      PID:8040
                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                        7⤵
                                                          PID:16196
                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                        6⤵
                                                          PID:11180
                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                          6⤵
                                                            PID:15572
                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                          5⤵
                                                            PID:6000
                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                              6⤵
                                                                PID:10284
                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                6⤵
                                                                  PID:14292
                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                5⤵
                                                                  PID:6952
                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                    6⤵
                                                                      PID:13196
                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                    5⤵
                                                                      PID:9008
                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                      5⤵
                                                                        PID:12756
                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                        5⤵
                                                                          PID:18180
                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                        4⤵
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        PID:4948
                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                          5⤵
                                                                            PID:5304
                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                              6⤵
                                                                                PID:6792
                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                  7⤵
                                                                                    PID:10748
                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                    7⤵
                                                                                      PID:14996
                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                    6⤵
                                                                                      PID:7836
                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                        7⤵
                                                                                          PID:17340
                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                        6⤵
                                                                                          PID:10600
                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                          6⤵
                                                                                            PID:15900
                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                          5⤵
                                                                                            PID:6332
                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                              6⤵
                                                                                                PID:10180
                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                6⤵
                                                                                                  PID:13808
                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                5⤵
                                                                                                  PID:8104
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                    6⤵
                                                                                                      PID:14564
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                    5⤵
                                                                                                      PID:10936
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                      5⤵
                                                                                                        PID:15208
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                      4⤵
                                                                                                        PID:620
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                          5⤵
                                                                                                            PID:6608
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                              6⤵
                                                                                                                PID:9400
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                6⤵
                                                                                                                  PID:13924
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                5⤵
                                                                                                                  PID:7376
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                    6⤵
                                                                                                                      PID:17196
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                    5⤵
                                                                                                                      PID:11260
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                      5⤵
                                                                                                                        PID:15816
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                      4⤵
                                                                                                                        PID:5924
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                          5⤵
                                                                                                                            PID:8556
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                            5⤵
                                                                                                                              PID:13204
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                            4⤵
                                                                                                                              PID:6500
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                5⤵
                                                                                                                                  PID:12468
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                  5⤵
                                                                                                                                    PID:17868
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                  4⤵
                                                                                                                                    PID:8532
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                    4⤵
                                                                                                                                      PID:12364
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                      4⤵
                                                                                                                                        PID:17380
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                      3⤵
                                                                                                                                      • Checks computer location settings
                                                                                                                                      PID:5100
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                        4⤵
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        PID:1404
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                          5⤵
                                                                                                                                            PID:5424
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                              6⤵
                                                                                                                                                PID:6716
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                  7⤵
                                                                                                                                                    PID:11096
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                    7⤵
                                                                                                                                                      PID:15160
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                    6⤵
                                                                                                                                                      PID:7940
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                        7⤵
                                                                                                                                                          PID:17224
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                        6⤵
                                                                                                                                                          PID:10504
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                          6⤵
                                                                                                                                                            PID:15672
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                          5⤵
                                                                                                                                                            PID:6312
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                              6⤵
                                                                                                                                                                PID:10252
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:13660
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:8048
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                    6⤵
                                                                                                                                                                      PID:15976
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:10740
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:14872
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:4480
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                          5⤵
                                                                                                                                                                            PID:6576
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                              6⤵
                                                                                                                                                                                PID:9396
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                6⤵
                                                                                                                                                                                  PID:13880
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                5⤵
                                                                                                                                                                                  PID:7212
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                    6⤵
                                                                                                                                                                                      PID:16272
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                    5⤵
                                                                                                                                                                                      PID:11252
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:15564
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:5948
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                          5⤵
                                                                                                                                                                                            PID:6908
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:12940
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                              5⤵
                                                                                                                                                                                                PID:18364
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:6168
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                    PID:12432
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                      PID:17904
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:9096
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                          PID:17372
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:11992
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:16428
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                          PID:2108
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:4236
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                  PID:5596
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                      PID:7264
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                                          PID:13212
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                          PID:9328
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                            PID:13272
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                            PID:6800
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                PID:10572
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                  PID:14624
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                  PID:7828
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                      PID:15984
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                      PID:10360
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                        PID:15824
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:5604
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                            PID:7980
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                PID:15832
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                PID:10724
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                  PID:14712
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:6840
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                      PID:11052
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                        PID:15036
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:8388
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                            PID:17844
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:11580
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:16344
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                              PID:3556
                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:6064
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:9360
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                        PID:13332
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                        PID:7196
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                            PID:13176
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                            PID:9452
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                              PID:11072
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:5744
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                  PID:7444
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                      PID:13188
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                      PID:9492
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                        PID:13424
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                        PID:6932
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:11216
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                              PID:15528
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                              PID:8744
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:17232
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                  PID:11972
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                    PID:16312
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                  PID:2220
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                    PID:3432
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                      PID:404
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                          PID:5348
                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                              PID:6672
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                  PID:10304
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                                                                                                    PID:13520
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                    PID:7380
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                        PID:17396
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                        PID:10496
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                          PID:15660
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                          PID:6280
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                              PID:10188
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                PID:13916
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                PID:7904
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                    PID:15012
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                    PID:10396
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                      PID:14376
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                      PID:3568
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                          PID:6648
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                              PID:10292
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                PID:14080
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                PID:7356
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                    PID:17172
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                    PID:11220
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                      PID:15736
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                      PID:5968
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                          PID:9212
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                              PID:17852
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                              PID:11964
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                PID:16288
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                PID:6492
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:12948
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:18332
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:9320
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:13324
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                      PID:3228
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:5228
                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:6640
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:10244
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:14236
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:7088
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:17188
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:10488
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:15604
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:6056
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:9288
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:13128
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:6508
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:12728
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:18172
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:9460
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:12852
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:3884
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:412
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:10172
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:13888
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7732
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13316
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9568
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:14092
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5792
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8716
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17204
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11984
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16440
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7072
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10800
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:15200
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8852
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:12064
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:16820
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4300
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1924
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5188
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6568
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10260
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:12032
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8184
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17356
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10484
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:15840
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:14400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13676
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4528
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:8032
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:15536
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10732
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:14928
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7936
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17180
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16280
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:15152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8580
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17388
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12172
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16788
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5956
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9544
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13604
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:16776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10928
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:15028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:17216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11572
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16112
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9688
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13592
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6272
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12812
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:18208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:15852
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10620
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:14392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:14892
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\828562b4fd7b9418420a5cc76a8b1050_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:16304

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    MITRE ATT&CK Matrix ATT&CK v13

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Initial Access

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Persistence

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1547

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1547.001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Privilege Escalation

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1547

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1547.001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Defense Evasion

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Modify Registry

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1112

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Credential Access

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Unsecured Credentials

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1552

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Credentials In Files

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1552.001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Query Registry

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1012

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    System Information Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1082

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Peripheral Device Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1120

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Lateral Movement

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Collection

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Data from Local System

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    T1005

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Exfiltration

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command and Control

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Impact

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Resource Development

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Reconnaissance

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\brasilian nude blowjob hidden mistress .mpg.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1.4MB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      c97aa469ee51621b8c642b5a99aef18b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7fa6fb98f58ffbb620fb250e673f73163c9b936b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6a1c037106f8a467190e7508e108868e469be910ed07991f672af7fd13a9cba5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      f2894399c5ee65f36a2da931257e8cea81d6500deb5c4e4926c3ce001b11b20e18e4c59f5828f990e327b234861d549438ebb01a06927ce5146a1e48303a508f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download Submit
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/404-208-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/404-188-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/412-263-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/412-235-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/620-201-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/620-219-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/1136-212-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/1136-196-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/1404-185-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/1404-205-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/1924-203-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/2108-183-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/2108-199-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/2220-142-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/2220-191-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3220-26-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3220-189-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3228-202-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3308-184-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3308-200-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3432-167-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3556-195-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3556-211-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3568-221-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3596-323-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3596-0-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3596-511-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3596-187-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3884-215-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3988-265-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/3988-239-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4044-210-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4044-194-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4092-198-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4160-209-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4236-193-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4300-197-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4300-165-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4480-220-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4520-204-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4520-223-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4528-217-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4776-143-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4776-192-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4948-186-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/4948-206-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5100-164-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5188-207-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5188-224-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5228-226-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5304-228-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5348-230-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5424-233-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5424-213-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5432-234-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5596-237-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5604-236-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5612-238-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5612-216-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5636-218-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5636-240-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5744-241-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5792-247-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5792-222-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5800-248-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5924-250-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5940-225-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5940-253-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5948-257-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5948-227-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5956-258-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/5968-254-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6000-262-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6056-260-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6064-229-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6064-261-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6168-270-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6280-269-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6304-275-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6304-242-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6312-276-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6312-243-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6332-277-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6332-244-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6340-245-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6340-278-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6360-271-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6368-246-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6368-279-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6500-272-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6508-273-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6568-249-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6640-251-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6648-252-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6672-256-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6716-255-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6764-259-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • memory/6964-264-0x0000000000400000-0x000000000041C000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      112KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Download