0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a

Resubmissions

28/06/2024, 22:57

240628-2w85aaxelj 7

28/06/2024, 19:29

240628-x7gryssgqj 7

Analysis

max time kernel
22s
max time network
374s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 22:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
Size

1.1MB
MD5

6c1132b92eaa64c4a90121cb4283dc60
SHA1

1b1e02699dade52a2cb52de28087dab5c61e91e9
SHA256

0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a
SHA512

02214ed8194daedf07d99892965d7aa1e789ff75dea2575017798c61b2e2177daf64195bc76011982ff98019b55440afe68d229cd15ca7e18d15b8855fe37f81
SSDEEP

24576:2w1prCyExwS4Ga7psz2eH1YvpLk8Qi+kWRhydKkQg+Aq5HRqNKRdW7:hT2wdGaIeVm2IydKkQ55HMP

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe"	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\R:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\Z:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\B:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\E:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\K:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\M:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\P:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\Q:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\I:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\N:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\O:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\U:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\Y:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\G:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\H:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\L:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\S:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\V:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\X:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\A:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\J:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\T:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File opened (read-only)	\??\W:	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Drops file in System32 directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\config\systemprofile\sperm [milf] mistress .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\beast girls \× .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\italian gang bang hardcore full movie cock ash .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\tyrkish porn gay public .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\japanese nude horse big .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\System32\DriverStore\Temp\japanese handjob gay hidden sm .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\italian horse beast lesbian cock ejaculation (Liz).mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\japanese porn lesbian sleeping glans traffic .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\System32\LogFiles\Fax\Incoming\japanese cumshot bukkake girls wifey .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\tyrkish beastiality beast big feet traffic (Melissa).zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Drops file in Program Files directory 15 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\blowjob catfight penetration .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Shared Gadgets\porn xxx licking high heels .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Update\Download\bukkake public hole .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\swedish action beast girls glans shower .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\xxx sleeping titts high heels .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\lingerie several models hole .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\horse lesbian sm .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\blowjob public 50+ .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\gay masturbation .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Temp\brasilian porn lesbian sleeping circumcision .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\italian kicking gay hidden cock ash (Curtney).mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\black cumshot blowjob full movie feet ìï (Curtney).mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\japanese porn xxx hidden titts sm .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\xxx hot (!) stockings .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\japanese cumshot fucking voyeur cock shower (Sarah).rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Drops file in Windows directory 52 IoCs

description	ioc	Process
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\trambling uncut ejaculation (Britney,Samantha).zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\SoftwareDistribution\Download\trambling lesbian titts .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\sperm full movie (Melissa).mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\spanish horse big (Liz).zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\indian gang bang xxx masturbation titts ash .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\african gay full movie .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\blowjob hidden fishy .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Downloads\swedish handjob horse several models ash .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\indian horse xxx licking .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\russian fetish hardcore sleeping .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\fucking hot (!) .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\horse catfight 50+ (Sandy,Curtney).mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\mssrv.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\blowjob girls glans mature .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_es-es_5d6ada54ed6d35a2\french sperm lesbian beautyfull .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\PLA\Templates\trambling catfight bondage .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\indian cumshot lingerie big glans gorgeoushorny .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_4fe2107fd06efdd8\italian gang bang trambling masturbation .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\brasilian horse trambling [free] titts blondie .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\italian gang bang lingerie girls feet .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_657d9a203abeb154\cumshot blowjob girls hole circumcision .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\horse lesbian hot (!) glans femdom (Janette).zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\italian gang bang hardcore several models redhair .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\canadian gay [free] titts 50+ .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\italian kicking bukkake uncut .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\russian cumshot trambling uncut bedroom .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\brasilian kicking fucking catfight feet high heels .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\security\templates\gay [milf] titts .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\chinese blowjob uncut boots .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\beast full movie bondage (Ashley,Liz).avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese kicking lesbian hidden hole .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\Downloads\black gang bang fucking several models sm .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\blowjob [bangbus] ash .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\french lingerie [milf] feet .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\xxx uncut .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\american porn horse licking .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\chinese fucking sleeping feet .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\blowjob hidden hole mistress .avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\german blowjob hidden .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\norwegian lesbian full movie hotel .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\black action beast uncut redhair .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\brasilian porn lingerie sleeping .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\tyrkish porn blowjob lesbian hole (Sonja,Jade).mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\Downloaded Program Files\canadian beast voyeur latex .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\indian handjob xxx hidden hole gorgeoushorny .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\spanish trambling [milf] hole black hairunshaved (Liz).avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\tyrkish beastiality xxx lesbian femdom .mpg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\tmp\brasilian nude beast sleeping YEâPSè& (Anniston,Janette).avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\porn beast girls bedroom .mpeg.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\assembly\temp\horse public shoes .zip.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\indian horse beast [bangbus] (Samantha).avi.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\asian gay full movie cock fishy .rar.exe	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1932	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2484	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1968	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1652	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1936	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2176	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2816	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
728	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2828	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
828	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1932	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1724	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
616	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1412	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1292	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2176	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1936	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2248	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2248	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2300	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2300	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2224	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2224	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2904	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2904	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2084	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2084	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2484	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2484	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1032	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1032	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2024	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
2024	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1652	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1652	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
1968	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 2736	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	28
PID 2444 wrote to memory of 2736	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	28
PID 2444 wrote to memory of 2736	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	28
PID 2444 wrote to memory of 2736	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	28
PID 2736 wrote to memory of 2500	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	29
PID 2736 wrote to memory of 2500	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	29
PID 2736 wrote to memory of 2500	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	29
PID 2736 wrote to memory of 2500	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	29
PID 2444 wrote to memory of 2508	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	30
PID 2444 wrote to memory of 2508	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	30
PID 2444 wrote to memory of 2508	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	30
PID 2444 wrote to memory of 2508	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	30
PID 2500 wrote to memory of 2372	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	31
PID 2500 wrote to memory of 2372	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	31
PID 2500 wrote to memory of 2372	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	31
PID 2500 wrote to memory of 2372	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	31
PID 2508 wrote to memory of 2476	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	32
PID 2508 wrote to memory of 2476	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	32
PID 2508 wrote to memory of 2476	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	32
PID 2508 wrote to memory of 2476	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	32
PID 2444 wrote to memory of 1748	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	33
PID 2444 wrote to memory of 1748	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	33
PID 2444 wrote to memory of 1748	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	33
PID 2444 wrote to memory of 1748	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	33
PID 2736 wrote to memory of 2832	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	34
PID 2736 wrote to memory of 2832	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	34
PID 2736 wrote to memory of 2832	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	34
PID 2736 wrote to memory of 2832	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	34
PID 2372 wrote to memory of 1932	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	35
PID 2372 wrote to memory of 1932	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	35
PID 2372 wrote to memory of 1932	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	35
PID 2372 wrote to memory of 1932	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	35
PID 1748 wrote to memory of 2484	1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	36
PID 1748 wrote to memory of 2484	1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	36
PID 1748 wrote to memory of 2484	1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	36
PID 1748 wrote to memory of 2484	1748	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	36
PID 2500 wrote to memory of 1936	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	37
PID 2500 wrote to memory of 1936	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	37
PID 2500 wrote to memory of 1936	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	37
PID 2500 wrote to memory of 1936	2500	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	37
PID 2508 wrote to memory of 1968	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	38
PID 2508 wrote to memory of 1968	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	38
PID 2508 wrote to memory of 1968	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	38
PID 2508 wrote to memory of 1968	2508	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	38
PID 2444 wrote to memory of 2176	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	39
PID 2444 wrote to memory of 2176	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	39
PID 2444 wrote to memory of 2176	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	39
PID 2444 wrote to memory of 2176	2444	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	39
PID 2832 wrote to memory of 1652	2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	40
PID 2832 wrote to memory of 1652	2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	40
PID 2832 wrote to memory of 1652	2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	40
PID 2832 wrote to memory of 1652	2832	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	40
PID 2736 wrote to memory of 2816	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	41
PID 2736 wrote to memory of 2816	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	41
PID 2736 wrote to memory of 2816	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	41
PID 2736 wrote to memory of 2816	2736	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	41
PID 2476 wrote to memory of 728	2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	42
PID 2476 wrote to memory of 728	2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	42
PID 2476 wrote to memory of 728	2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	42
PID 2476 wrote to memory of 728	2476	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	42
PID 2372 wrote to memory of 2828	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	43
PID 2372 wrote to memory of 2828	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	43
PID 2372 wrote to memory of 2828	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	43
PID 2372 wrote to memory of 2828	2372	0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe	43

C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2736
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2500
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:2372
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1932
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:828
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:2452
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:3492
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        10⤵
        
        PID:13040
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:12796
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:11056
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:4896
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:18464
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:8120
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:15556
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:13248
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:5308
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:11580
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:8424
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:20472
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:13256
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:11556
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:15388
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:6416
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:18088
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13544
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:2216
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:3556
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:18292
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:12228
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:15484
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:5076
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:11596
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:9132
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:17968
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8104
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:16200
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13440
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11516
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:13584
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8652
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:12652
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13008
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4360
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11604
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6480
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13016
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13264
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2828
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:2900
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:3484
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:13368
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        9⤵
        
        PID:9928
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:12620
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:4888
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:13496
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:7632
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:20440
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13332
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:5236
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:11572
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:8440
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8008
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:17084
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12360
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12096
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12916
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:17172
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12336
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:1900
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3540
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:18472
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8776
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:20108
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:17660
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5052
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11564
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:11060
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8892
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8016
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18284
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13304
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3284
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5244
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:19564
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8676
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:15412
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13184
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4284
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8644
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8436
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13672
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6344
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:18268
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12296
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1936
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2904
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:2668
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:13192
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:10556
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:7504
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:12680
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:15344
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13176
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4020
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11388
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:19912
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20116
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8748
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:19624
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13432
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12568
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:1600
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3948
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:7680
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:18712
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12888
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13848
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5928
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:9952
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12168
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13592
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3584
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18448
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12644
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5196
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9124
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8024
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17700
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13272
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1724
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:2320
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:11412
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:19264
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12756
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5452
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11628
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:14708
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12400
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3428
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:10824
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12088
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20124
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4796
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13596
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7448
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12664
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12816
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:15104
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:1584
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3576
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12856
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:9232
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13392
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5084
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19608
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8000
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19800
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13224
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3308
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5380
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12764
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17684
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8492
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9424
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12848
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4368
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:11848
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13712
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6424
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:19556
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12372
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:19792
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2832
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1652
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2224
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:2660
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:4592
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:12072
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:19640
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:17444
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13528
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3972
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:7800
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:18252
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13480
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:10400
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12708
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:2028
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11856
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20020
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6472
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12160
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18048
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13324
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3804
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:7496
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:19588
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12952
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5524
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9624
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12636
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1032
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:2404
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:16784
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:7640
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18308
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13296
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4136
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8076
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:19632
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12692
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6044
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12320
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13560
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2744
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4728
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12220
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19048
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7240
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17872
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13208
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4048
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7656
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17912
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13604
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13760
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5976
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12672
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13536
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2816
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:832
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3208
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8128
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8168
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20060
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12384
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4252
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8084
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18480
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13240
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6392
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6132
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12352
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:1940
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4840
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13448
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:2352
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7624
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12552
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13340
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4064
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8636
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20084
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13680
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5984
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12724
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12656
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2024
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3040
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5028
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12480
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8096
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:18260
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13472
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4128
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8188
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9800
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12472
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:10972
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6016
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12424
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12612
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:2280
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4616
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:11588
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:16596
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:7020
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12968
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12328
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3996
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:7664
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:19580
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12272
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13964
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:5952
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:11500
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:19108
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:13032
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2508
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2476
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:728
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:1620
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:3236
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:15892
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:8668
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        8⤵
        
        PID:20068
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:13156
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:11992
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:15244
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20076
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12772
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13844
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:2240
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18780
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8112
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:18276
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13464
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4116
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8608
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20012
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13376
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6180
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12780
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20048
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13200
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2164
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3116
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:19596
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8444
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:10848
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13696
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4144
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:11444
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12948
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6172
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19532
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12512
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2524
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4628
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12544
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7044
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17904
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12896
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:19604
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4056
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8140
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19204
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13412
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5960
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:9296
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13512
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1968
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2300
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:2784
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4528
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12488
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6604
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:9396
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12872
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3932
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:7512
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:17920
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13504
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5776
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20164
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12560
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2724
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4420
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12000
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6804
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12976
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19180
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12576
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:18704
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3836
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7056
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9428
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:9544
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5540
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:9712
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12432
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:616
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:1820
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:3740
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:6672
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12808
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8536
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:9520
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13288
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13692
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5428
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12960
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12212
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3436
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5768
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12496
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12584
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4816
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:18208
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:7616
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:9380
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12596
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:2412
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3780
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6636
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12280
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9300
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12700
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5420
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8768
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17176
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:17076
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12408
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3460
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5944
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13348
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13832
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13024
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:4864
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13568
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:15312
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:7976
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:18244
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:13424
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1748
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2484
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2084
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:1908
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:12464
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:7336
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:17864
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12832
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20488
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4072
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8148
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:19544
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13456
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:5992
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12880
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13048
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2640
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4384
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:11620
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:15028
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6448
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:13360
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13520
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3812
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7036
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:16768
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13552
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5532
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12052
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:18416
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12184
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:20092
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1412
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2368
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4244
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:11456
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9648
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6260
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12304
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12504
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3764
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6812
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8956
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8528
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:18316
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13316
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5412
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:11424
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17928
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:19736
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12528
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:2068
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3600
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6336
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12628
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:20056
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:10716
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:15012
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:20132
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5220
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:19616
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:8660
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:16968
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13000
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3348
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5468
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13576
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12176
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:15604
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:4544
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:11612
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:16960
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:15384
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:6612
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:11432
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:17512
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12864
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2176
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2248
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:2884
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:4500
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:8792
        
        C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        7⤵
        
        PID:20100
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:17260
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6644
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12732
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:18000
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12740
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:17656
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3924
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:7672
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:19572
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12604
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:17228
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5704
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:16828
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12392
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:888
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:3884
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:6860
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:12984
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12992
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:5584
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12788
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:18072
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12196
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:15592
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3504
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6116
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:17892
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12456
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:4976
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6324
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:7648
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:16892
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12840
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1292
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:1116
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:4236
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:8620
      - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        6⤵
        
        PID:9612
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13612
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6252
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:18300
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12312
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3756
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6532
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:12416
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13800
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:12748
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:5404
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:8784
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:20456
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13384
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12520
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:1184
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:3680
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:6464
    - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
        5⤵
        
        PID:13488
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:13280
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:5332
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:20464
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:8416
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:20028
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12824
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:3420
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:5760
  - - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
      4⤵
      PID:18456
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12204
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:19092
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:4788
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:9604
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:7248
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:12344
- - C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
    3⤵
    PID:19968
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:13232
- C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\0d07c6ae7c1186edd5d5bd6065cf36badfa3f882d3cdcfa5f47282d6a78c778a_NeikiAnalytics.exe"
  2⤵
  PID:15652

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
PID:9448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\japanese porn xxx hidden titts sm .mpg.exe

Filesize
634KB

MD5
ffb576856c6f6cd3ac76b30c438d5a56

SHA1
99cafca6717eaf4771cef21b789ce949afc2bbc7

SHA256
2bef2ec68ef866415df0c5c81f058cb160ba384060be139d2965b0b5c677bbd6

SHA512
628ef290ac1c26e6c7fb7eb39439806278eed862bd2d5666a9e297befefbe44df63a1ed34754090d9c3c2be399d3119ed7ea67ef11676da1abc4182c518a6bf5

Download Submit