4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b

Analysis

max time kernel
18s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 04:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
Size

138KB
MD5

5cb40fd2ec632dce51ff6484798c1680
SHA1

ab5469ec5d415fe7b439268ab168509fa0c5d95e
SHA256

4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b
SHA512

a125faa6ca46b5fade6e6b594660683222c9bd5d8f500ae3dcb87f450045f545588c9e2ab16b6c6fa96f84a177096323465e1aeda4ff0515beac06d15b8f0580
SSDEEP

3072:djzhZWxivgmhbI/pqqsFUCN3R9MI+QX49EL1IRaoz8JLEhoLNOhOkoPl:dXC4vgmhbIxs3NBRX44+cozmLEhoVB

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe"	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\Z:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\G:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\H:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\K:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\L:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\Q:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\V:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\W:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\Y:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\A:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\B:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\M:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\P:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\R:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\T:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\U:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\X:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\I:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\J:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\N:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\O:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File opened (read-only)	\??\S:	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Drops file in System32 directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\config\systemprofile\beast gang bang hot (!) .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\french horse beast [bangbus] vagina ash .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\black sperm porn lesbian (Britney).avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\System32\DriverStore\Temp\norwegian bukkake fucking [free] hole .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\asian gay animal catfight lady .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\canadian blowjob fetish voyeur .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\System32\LogFiles\Fax\Incoming\hardcore bukkake hot (!) shower .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\chinese blowjob big Ôë .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\xxx [bangbus] .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\kicking horse uncut hotel .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Drops file in Program Files directory 15 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\gang bang girls hole .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\indian trambling kicking [bangbus] ejaculation (Kathrin).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Shared Gadgets\french trambling beast hot (!) .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Temp\cumshot gay girls (Kathrin).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\lingerie [milf] legs .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\brasilian hardcore voyeur .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\horse uncut vagina bedroom (Sonja,Kathrin).rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\beast hardcore [free] high heels .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\swedish cum blowjob hidden latex (Tatjana,Christine).mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\russian fetish hidden legs .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\gang bang licking ash .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\brasilian fucking gang bang full movie bedroom .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Update\Download\animal xxx voyeur feet leather (Curtney).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\spanish gang bang kicking public cock .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\german cumshot fucking sleeping .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Drops file in Windows directory 44 IoCs

description	ioc	Process
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\norwegian kicking [free] latex .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\Downloaded Program Files\black gang bang fucking sleeping vagina .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\beast fetish [bangbus] .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\beast [bangbus] gorgeoushorny (Sonja).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\gay nude hot (!) hole .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Downloads\sperm catfight balls .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_657d9a203abeb154\blowjob horse sleeping penetration (Sarah,Ashley).mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\sperm catfight .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\russian bukkake action several models ash (Curtney).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\horse public mistress (Melissa,Sylvia).rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\Downloads\german bukkake xxx [free] boobs (Anniston,Ashley).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\british beast bukkake hot (!) bedroom .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\german handjob action full movie titts .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\french cumshot sperm [free] hole .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\horse porn uncut feet (Karin).avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\temp\bukkake uncut latex .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\lingerie beastiality catfight sweet (Britney).mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\nude action uncut feet .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\french kicking cumshot sleeping hotel (Sonja,Karin).mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\black beastiality [bangbus] fishy .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\african bukkake several models .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\beast voyeur .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\lesbian animal hot (!) (Jade,Janette).rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\cum hidden beautyfull .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\black lingerie xxx hot (!) .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\mssrv.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\security\templates\handjob horse [bangbus] (Sonja,Jenna).zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\canadian blowjob bukkake catfight blondie .mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\russian lingerie lingerie hidden traffic .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\SoftwareDistribution\Download\horse [milf] boobs penetration .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\danish lingerie catfight feet hairy .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\cumshot full movie (Christine,Sarah).avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\hardcore fucking [bangbus] .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\nude fucking public .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\british action blowjob [milf] cock girly (Liz,Sylvia).mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\spanish blowjob kicking full movie legs .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\lesbian kicking full movie cock .mpeg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\african gay lesbian .rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_4fe2107fd06efdd8\african xxx uncut femdom .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\black cum bukkake [bangbus] glans leather (Ashley,Melissa).mpg.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\swedish horse fetish hot (!) .avi.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\assembly\tmp\cumshot gay girls mistress .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\PLA\Templates\spanish fetish hidden .zip.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\animal fucking girls (Sandy).rar.exe	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2896	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2884	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
800	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2728	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2128	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
308	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
872	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1632	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1568	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2324	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1616	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2884	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1660	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
928	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2896	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1176	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2940	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
800	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
800	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2112	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2112	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1372	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1372	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1964	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
1964	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2912	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2912	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2504	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2504	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
2956	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 812	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	28
PID 2204 wrote to memory of 812	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	28
PID 2204 wrote to memory of 812	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	28
PID 2204 wrote to memory of 812	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	28
PID 812 wrote to memory of 2468	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	29
PID 812 wrote to memory of 2468	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	29
PID 812 wrote to memory of 2468	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	29
PID 812 wrote to memory of 2468	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	29
PID 2204 wrote to memory of 2528	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	30
PID 2204 wrote to memory of 2528	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	30
PID 2204 wrote to memory of 2528	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	30
PID 2204 wrote to memory of 2528	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	30
PID 812 wrote to memory of 320	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	31
PID 812 wrote to memory of 320	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	31
PID 812 wrote to memory of 320	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	31
PID 812 wrote to memory of 320	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	31
PID 2468 wrote to memory of 2448	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	32
PID 2468 wrote to memory of 2448	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	32
PID 2468 wrote to memory of 2448	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	32
PID 2468 wrote to memory of 2448	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	32
PID 2528 wrote to memory of 760	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	33
PID 2528 wrote to memory of 760	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	33
PID 2528 wrote to memory of 760	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	33
PID 2528 wrote to memory of 760	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	33
PID 2204 wrote to memory of 996	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	34
PID 2204 wrote to memory of 996	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	34
PID 2204 wrote to memory of 996	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	34
PID 2204 wrote to memory of 996	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	34
PID 812 wrote to memory of 2896	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	35
PID 812 wrote to memory of 2896	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	35
PID 812 wrote to memory of 2896	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	35
PID 812 wrote to memory of 2896	812	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	35
PID 320 wrote to memory of 2884	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	36
PID 320 wrote to memory of 2884	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	36
PID 320 wrote to memory of 2884	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	36
PID 320 wrote to memory of 2884	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	36
PID 2468 wrote to memory of 800	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	37
PID 2468 wrote to memory of 800	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	37
PID 2468 wrote to memory of 800	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	37
PID 2468 wrote to memory of 800	2468	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	37
PID 2204 wrote to memory of 2728	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	38
PID 2204 wrote to memory of 2728	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	38
PID 2204 wrote to memory of 2728	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	38
PID 2204 wrote to memory of 2728	2204	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	38
PID 2448 wrote to memory of 2128	2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	39
PID 2448 wrote to memory of 2128	2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	39
PID 2448 wrote to memory of 2128	2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	39
PID 2448 wrote to memory of 2128	2448	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	39
PID 2528 wrote to memory of 308	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	40
PID 2528 wrote to memory of 308	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	40
PID 2528 wrote to memory of 308	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	40
PID 2528 wrote to memory of 308	2528	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	40
PID 996 wrote to memory of 872	996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	41
PID 996 wrote to memory of 872	996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	41
PID 996 wrote to memory of 872	996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	41
PID 996 wrote to memory of 872	996	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	41
PID 760 wrote to memory of 1632	760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	42
PID 760 wrote to memory of 1632	760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	42
PID 760 wrote to memory of 1632	760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	42
PID 760 wrote to memory of 1632	760	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	42
PID 320 wrote to memory of 1568	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	43
PID 320 wrote to memory of 1568	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	43
PID 320 wrote to memory of 1568	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	43
PID 320 wrote to memory of 1568	320	4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe	43

C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:812
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2468
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:2448
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2128
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2956
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:3184
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:5140
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:9840
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:4336
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        9⤵
        
        PID:14220
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:9900
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11828
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:2508
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:4808
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:10264
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:10052
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3928
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9408
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6536
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9932
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2112
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:2660
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:4320
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:11528
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6648
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:13900
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:10212
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3724
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:7036
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:10620
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9908
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10084
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:2996
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:4020
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:14156
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11600
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6176
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9956
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3568
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6720
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:14752
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11152
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5172
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10668
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9804
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:800
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1176
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:2720
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:4188
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:9916
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6656
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11552
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3632
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:7396
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:13336
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9532
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10068
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:2200
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3812
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9604
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:13736
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:8384
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9204
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3460
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6284
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10256
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4652
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:8468
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7568
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:14104
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1660
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:2016
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3796
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9396
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:12284
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6604
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9864
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3444
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6304
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10636
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4676
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7620
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:13692
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:8536
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5396
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:828
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3540
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:12196
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:12000
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5060
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7588
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11976
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9724
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3244
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5688
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10604
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4388
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11632
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6632
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:14140
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:12300
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:320
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2884
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1616
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:1116
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:3560
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:7052
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:11308
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:5188
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:13704
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9764
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3284
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:7708
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9680
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:4532
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:7756
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7716
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:1020
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3624
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6964
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:14148
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11592
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5164
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9856
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3228
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11276
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11128
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4344
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:8456
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7260
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10492
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1568
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:2320
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3604
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:6712
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:10204
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5180
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:5616
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10076
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3252
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5704
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:14768
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10196
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4396
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11992
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7740
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:328
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3760
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7520
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11520
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5600
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10028
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3332
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5788
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:12496
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6592
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:13908
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10108
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4612
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11292
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7528
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:13328
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2896
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:928
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:1980
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3848
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9668
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:14172
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9548
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3452
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6348
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11324
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4636
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7612
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:13560
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7496
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11640
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2400
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3784
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7536
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11616
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5712
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:15120
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11228
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3420
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5828
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5684
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:8548
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4644
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11536
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9540
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2324
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2972
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3736
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6956
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:12212
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:12356
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5468
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:14776
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7504
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11960
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3308
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:5940
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7604
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11572
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10644
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4540
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11284
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7544
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:13752
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:1880
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3508
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6684
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:14188
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11580
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4940
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:13924
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7560
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:14180
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3236
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:5608
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:10020
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:4352
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11512
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:7268
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:10676
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2528
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:760
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1632
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:1240
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:3220
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        8⤵
        
        PID:8440
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:9972
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11544
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:7732
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3008
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:10596
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9892
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4044
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9436
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6456
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11036
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2912
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:824
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:4800
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11120
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9788
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4120
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9632
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6448
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11648
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2520
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4688
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11624
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7488
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11608
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3920
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9700
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:5772
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:15280
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7748
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9084
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:308
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:1992
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3140
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5072
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:11316
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:9948
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4328
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:14164
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:12348
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7212
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10652
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3012
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4740
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:14228
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9772
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3896
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9388
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:5928
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9848
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1964
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2804
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4868
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:14212
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6664
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:15320
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11484
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4104
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10532
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6480
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:14196
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11952
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:2616
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4244
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:11268
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6672
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11500
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3672
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7044
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:14204
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11104
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:5344
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:8448
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:10036
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:996
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:872
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2764
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:3272
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:5696
        
        C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        7⤵
        
        PID:2188
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10480
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4360
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:10092
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:6744
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10296
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:1004
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4752
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11300
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9780
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4112
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9996
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6360
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9980
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1372
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:1984
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4668
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11080
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9560
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:3936
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9616
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:5780
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:13916
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6620
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11376
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:2936
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4232
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9964
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6544
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:10100
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3680
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6988
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:15328
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:12092
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:5332
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11492
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:9924
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2728
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2504
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:2820
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:4836
      - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        6⤵
        
        PID:11136
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:10060
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4128
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9940
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6552
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:10012
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:2404
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4588
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:7512
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:13744
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7724
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3888
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9640
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:5980
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:10520
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2940
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:2668
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:4308
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:9988
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7192
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:10660
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3768
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:7180
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:11144
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:5476
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:6980
    - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
        5⤵
        
        PID:14760
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:12108
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:7552
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:13948
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  PID:1576
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:3948
  - - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
      4⤵
      PID:9480
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:5948
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:10044
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  PID:3592
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:7580
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:11364
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  PID:5196
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:7596
- - C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
    3⤵
    PID:13728
- C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\4cfbed9d96ca398b27120ad8db0c02c0025a14fb3c988473314d35296b1bf43b_NeikiAnalytics.exe"
  2⤵
  PID:10004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Windows Sidebar\Shared Gadgets\french trambling beast hot (!) .mpeg.exe

Filesize
1.8MB

MD5
e01ac44458f198a33f0bed28e40c2b42

SHA1
aac803f94fd62eda08294edc97d538fcc372c33f

SHA256
ef3b1ee94654c9d5ab24dcee7c43876488d0dc51dfa91cd16b246cff88c21b2b

SHA512
598f20889a3b9080bb9e2657f5616f9b216c8db0d44f65cc0a5baa5873e3d94552f195fde389b78e89c02386f275ae63d12013868cdc1c19a51b45205006ba09

Download Submit