Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    62s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 11:00

General

  • Target

    572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe

  • Size

    793KB

  • MD5

    ae450fe9e6bbb1b218a0c08c5b025780

  • SHA1

    fd0bc63b51f54da85abc07b774bc339bf855f303

  • SHA256

    572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86

  • SHA512

    ccb035fc654438af5afb4b8a7b6adae39bfbd8278dd60abba41ba4b46e80458a5015857cd42971b532e5daf74fb8989075cd23523cffc2bc5dbd2d3607670344

  • SSDEEP

    12288:A//vi9BrUbY5FjDwP+nlKPB7cCwj0R8TDgkyDZqfbwaL1R0uRFmRhJH:2wrwIDw2n30qTDgka0P1R0uX2LH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 30 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 17 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:968
    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
      2⤵
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2196
      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
        3⤵
        • Checks computer location settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:5100
        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
          4⤵
          • Checks computer location settings
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:2712
          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
            5⤵
            • Checks computer location settings
            • Suspicious behavior: EnumeratesProcesses
            PID:3488
            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
              6⤵
              • Checks computer location settings
              PID:804
              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                7⤵
                  PID:1736
                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                    8⤵
                      PID:12128
                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                      8⤵
                        PID:5784
                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                      7⤵
                        PID:5384
                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                          8⤵
                            PID:1732
                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                          7⤵
                            PID:6924
                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                              8⤵
                                PID:7380
                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                8⤵
                                  PID:18148
                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                7⤵
                                  PID:8840
                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                  7⤵
                                    PID:11492
                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                    7⤵
                                      PID:6248
                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                    6⤵
                                      PID:636
                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                        7⤵
                                          PID:7188
                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                          7⤵
                                            PID:18248
                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                          6⤵
                                            PID:5336
                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                              7⤵
                                                PID:9220
                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                7⤵
                                                  PID:11604
                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                  7⤵
                                                    PID:4268
                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                  6⤵
                                                    PID:6980
                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                      7⤵
                                                        PID:11888
                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                      6⤵
                                                        PID:9332
                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                        6⤵
                                                          PID:11436
                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                          6⤵
                                                            PID:8368
                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                          5⤵
                                                          • Checks computer location settings
                                                          PID:4788
                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                            6⤵
                                                              PID:908
                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                7⤵
                                                                  PID:12088
                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                  7⤵
                                                                    PID:5832
                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                  6⤵
                                                                    PID:5368
                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                      7⤵
                                                                        PID:11664
                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                        7⤵
                                                                          PID:5768
                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                        6⤵
                                                                          PID:6908
                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                            7⤵
                                                                              PID:2760
                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                            6⤵
                                                                              PID:9428
                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                              6⤵
                                                                                PID:11636
                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                6⤵
                                                                                  PID:1588
                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                5⤵
                                                                                  PID:2220
                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                    6⤵
                                                                                      PID:7224
                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                      6⤵
                                                                                        PID:4884
                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                      5⤵
                                                                                        PID:5296
                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                          6⤵
                                                                                            PID:11588
                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                            6⤵
                                                                                              PID:4708
                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                            5⤵
                                                                                              PID:7416
                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                6⤵
                                                                                                  PID:11208
                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                  6⤵
                                                                                                    PID:19040
                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                  5⤵
                                                                                                    PID:10200
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                    5⤵
                                                                                                      PID:11300
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                      5⤵
                                                                                                        PID:5748
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                      4⤵
                                                                                                      • Checks computer location settings
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:1172
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                        5⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:4976
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                          6⤵
                                                                                                            PID:2304
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                              7⤵
                                                                                                                PID:12104
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                7⤵
                                                                                                                  PID:5524
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                6⤵
                                                                                                                  PID:5392
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                    7⤵
                                                                                                                      PID:11524
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                      7⤵
                                                                                                                        PID:14564
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                      6⤵
                                                                                                                        PID:6916
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                          7⤵
                                                                                                                            PID:5132
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                          6⤵
                                                                                                                            PID:9324
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                            6⤵
                                                                                                                              PID:11428
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                              6⤵
                                                                                                                                PID:5528
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                              5⤵
                                                                                                                                PID:3916
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                  6⤵
                                                                                                                                    PID:5424
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                  5⤵
                                                                                                                                    PID:5320
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                      6⤵
                                                                                                                                        PID:9972
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                        6⤵
                                                                                                                                          PID:10464
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                          6⤵
                                                                                                                                            PID:1152
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                          5⤵
                                                                                                                                            PID:6956
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                              6⤵
                                                                                                                                                PID:8460
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                              5⤵
                                                                                                                                                PID:9904
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                5⤵
                                                                                                                                                  PID:11260
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                  5⤵
                                                                                                                                                    PID:6108
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                  4⤵
                                                                                                                                                  • Checks computer location settings
                                                                                                                                                  PID:2520
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                    5⤵
                                                                                                                                                      PID:3708
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                        6⤵
                                                                                                                                                          PID:11516
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                          6⤵
                                                                                                                                                            PID:14576
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                          5⤵
                                                                                                                                                            PID:5240
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                              6⤵
                                                                                                                                                                PID:11452
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:6620
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:6848
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                    6⤵
                                                                                                                                                                      PID:6640
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:9304
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:10780
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                        5⤵
                                                                                                                                                                          PID:6744
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:5008
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:12144
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                              5⤵
                                                                                                                                                                                PID:11160
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:5248
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                  5⤵
                                                                                                                                                                                    PID:10088
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                    5⤵
                                                                                                                                                                                      PID:11388
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:5812
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:7004
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                          5⤵
                                                                                                                                                                                            PID:11872
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                          4⤵
                                                                                                                                                                                            PID:10224
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:11268
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:6740
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                                                                                              PID:384
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                PID:1300
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                  PID:3176
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                      PID:3412
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                          PID:11244
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                            PID:6684
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                            PID:5360
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                PID:164
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                PID:6996
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                    PID:6372
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                    PID:10044
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                      PID:11364
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                        PID:2740
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                        PID:4012
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                            PID:7204
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                            PID:5328
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                PID:13488
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                  PID:208
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                  PID:6964
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                      PID:2588
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                      PID:10164
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                        PID:11348
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                          PID:6604
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                        PID:2516
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                            PID:556
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                PID:12772
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                  PID:8004
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                  PID:5224
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                      PID:7220
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                      PID:6840
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                          PID:3436
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                            PID:18988
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                            PID:9372
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                              PID:8996
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                PID:3312
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:4820
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                    PID:11460
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:6700
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:5216
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:8228
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:6932
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                              PID:7436
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                PID:19200
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                PID:10140
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                  PID:11316
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                    PID:5608
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                  PID:3204
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                    PID:4964
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                        PID:1200
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                            PID:3860
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                            PID:5164
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                PID:1076
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                  PID:18156
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                  PID:6708
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                      PID:7232
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                        PID:19192
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                        PID:8852
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                          PID:11500
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                            PID:5716
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                            PID:1648
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                PID:12192
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                  PID:5472
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                  PID:5172
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                      PID:12096
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                        PID:1776
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                        PID:6816
                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                            PID:7264
                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                            PID:9420
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                              PID:11412
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                PID:5876
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                              PID:2264
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                  PID:2284
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                      PID:12112
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                        PID:5848
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                        PID:5180
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                            PID:10672
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                              PID:11216
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                PID:9028
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                PID:6716
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                    PID:7228
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                    PID:9364
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                      PID:11236
                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6516
                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                        PID:4592
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                            PID:12120
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                              PID:5880
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                              PID:5188
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:11444
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:15012
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:6948
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:7624
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:10192
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:11340
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:5456
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                          PID:1236
                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                            PID:3000
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                              PID:2088
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:4600
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:5152
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:11596
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:5944
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:5416
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:9880
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:11396
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:2008
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:7012
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:13352
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:6204
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:11332
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:6588
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:1380
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:2352
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:5352
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9236
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11484
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6040
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7428
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6324
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10208
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11324
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2736
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4660
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:400
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3396
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:18972
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5304
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9956
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11380
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5816
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6892
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:8628
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:18964
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10184
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11292
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5644
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1496
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10684
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5288
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11556
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4292
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3904
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1160
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11572
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11372
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6260
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11540
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4740
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5344
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9004
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9476
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11620
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6488
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4848
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3692
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7172
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:18228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11476
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5676
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3996
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5232
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19184
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7280
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5144
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5408
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11504
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4452
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11580
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2784
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5376
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2380
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10128
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3408
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13452
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:16376
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5272
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:12780
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12764
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9348
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4816
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4036
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13460
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5312
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5092
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2908
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5280
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5732
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9380
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4364
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:12756
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5488
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6824
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:18980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9436
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8960
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:12788
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6804
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6632
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9292
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\572979902794380c80219877540111fe0710bb2772cfb739e1bfd53c8caddd86_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1684

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\danish beastiality horse licking nipples ejaculation .zip.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1.4MB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    ba61bcfbd793501fbdd263ed4cf13217

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    271d8e5a637c4f164288f2f025c2a9e79ebb4d3f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    c707e95cf80cb335ecfdb0201e1f2b460cf1380cd05338157b1ace1b89a5530a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    a6f660a03702d5bb9fb062de852d0d0018539a92f311859d48255c0b6247dd92a48e60bba291f492d0e215d5b671faf730f51efe7adaf5c1a496b2b982b8c525