8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997

Analysis

max time kernel
25s
max time network
129s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 08:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
Size

1.9MB
MD5

803bda58e66ff4f926f9badbde1f89a0
SHA1

66c9ce9e3474a99906114bc5d89a9136604d21ef
SHA256

8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997
SHA512

3379ab069fcf6b2b418b452efff76f2ca8e2a809184be88c85ba2a841865b77204388ba18980e4279941ac6129892974402b5ca5021665ac3bbf674bba21dd5e
SSDEEP

49152:VjRLmDGUcdUeirEy3+l7ZqTgcFrpXm48CEXLyYtlQyCg:RRLTUKarEy3GZqTgerVH85XOkL7

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe"	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\L:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\N:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\Q:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\S:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\T:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\X:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\G:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\K:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\Y:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\Z:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\V:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\W:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\O:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\R:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\I:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\U:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\A:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\B:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\J:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\M:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\P:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\E:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File opened (read-only)	\??\H:	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Drops file in System32 directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\config\systemprofile\norwegian beastiality lesbian .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\german horse cumshot [free] boobs ash (Tatjana).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\System32\LogFiles\Fax\Incoming\spanish cumshot beastiality sleeping YEâPSè& (Christine).mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\german trambling full movie (Sonja,Ashley).rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\danish kicking catfight boots .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\System32\DriverStore\Temp\danish handjob hardcore catfight nipples sm (Christine,Tatjana).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\blowjob fucking [free] (Jade,Britney).mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\danish fetish porn [milf] .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\hardcore sleeping traffic .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\bukkake xxx full movie sweet (Melissa).zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Drops file in Program Files directory 15 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\danish nude nude public .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Update\Download\animal horse big mature .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\handjob beastiality licking feet .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\chinese action sperm lesbian girly (Samantha,Melissa).zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\beast animal hidden (Sonja).avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\kicking [bangbus] latex .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\french gay hot (!) boobs (Christine).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Temp\french animal voyeur glans (Sonja,Gina).mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\spanish horse bukkake voyeur (Christine).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\asian nude porn full movie stockings (Anniston).rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\cumshot horse girls (Sonja,Kathrin).avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\british xxx horse girls hole blondie .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\asian xxx voyeur .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian cumshot masturbation hairy (Sonja,Sylvia).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\norwegian bukkake cum sleeping feet sweet .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Drops file in Windows directory 37 IoCs

description	ioc	Process
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\chinese horse voyeur .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\brasilian xxx blowjob several models .zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cum blowjob [milf] ash .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\porn licking boobs YEâPSè& .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\hardcore several models fishy (Sylvia).zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Downloads\brasilian horse licking .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\bukkake porn licking .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\chinese animal porn [milf] redhair .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\fetish fetish voyeur nipples (Kathrin,Sarah).mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\japanese handjob fetish lesbian .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\SoftwareDistribution\Download\russian beast [free] castration .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\security\templates\brasilian action fucking sleeping .zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\fetish xxx hot (!) (Jenna).avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\tyrkish cumshot [free] traffic .zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\temp\american beast big .rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\tmp\lingerie lingerie catfight titts hotel .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\Downloaded Program Files\porn xxx [bangbus] .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\xxx masturbation .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\trambling bukkake licking .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\french hardcore beastiality licking sm .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\bukkake girls balls (Samantha,Curtney).rar.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\chinese horse cumshot lesbian boots .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\Downloads\tyrkish beast sleeping feet redhair .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\cum sleeping circumcision (Sarah,Melissa).zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\gang bang fucking public stockings .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\german horse beast [milf] ejaculation (Jade).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\british horse animal [bangbus] redhair .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\cum blowjob uncut (Britney,Samantha).mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\canadian handjob cumshot girls boobs .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\PLA\Templates\kicking uncut YEâPSè& .zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\bukkake full movie legs bondage (Tatjana).zip.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\malaysia fucking full movie .mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\norwegian animal sperm [milf] .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\danish blowjob gang bang voyeur fishy .mpg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\malaysia gay sperm voyeur mistress .avi.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\handjob sleeping ash (Jade).mpeg.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
File created	C:\Windows\mssrv.exe	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2804	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2836	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2712	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1624	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1924	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1580	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
908	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2672	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1612	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1952	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2516	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2804	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1220	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2212	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2044	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2240	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2836	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
3024	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1856	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2908	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2712	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1624	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1796	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1976	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1976	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
664	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
664	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
928	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
928	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1348	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
1348	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1704 wrote to memory of 3048	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	28
PID 1704 wrote to memory of 3048	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	28
PID 1704 wrote to memory of 3048	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	28
PID 1704 wrote to memory of 3048	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	28
PID 1704 wrote to memory of 2588	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	29
PID 1704 wrote to memory of 2588	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	29
PID 1704 wrote to memory of 2588	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	29
PID 1704 wrote to memory of 2588	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	29
PID 3048 wrote to memory of 2584	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	30
PID 3048 wrote to memory of 2584	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	30
PID 3048 wrote to memory of 2584	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	30
PID 3048 wrote to memory of 2584	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	30
PID 3048 wrote to memory of 2968	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	31
PID 3048 wrote to memory of 2968	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	31
PID 3048 wrote to memory of 2968	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	31
PID 3048 wrote to memory of 2968	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	31
PID 1704 wrote to memory of 3028	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	32
PID 1704 wrote to memory of 3028	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	32
PID 1704 wrote to memory of 3028	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	32
PID 1704 wrote to memory of 3028	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	32
PID 2588 wrote to memory of 1892	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	33
PID 2588 wrote to memory of 1892	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	33
PID 2588 wrote to memory of 1892	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	33
PID 2588 wrote to memory of 1892	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	33
PID 2584 wrote to memory of 560	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	34
PID 2584 wrote to memory of 560	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	34
PID 2584 wrote to memory of 560	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	34
PID 2584 wrote to memory of 560	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	34
PID 3048 wrote to memory of 2804	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	35
PID 3048 wrote to memory of 2804	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	35
PID 3048 wrote to memory of 2804	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	35
PID 3048 wrote to memory of 2804	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	35
PID 2968 wrote to memory of 2836	2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	36
PID 2968 wrote to memory of 2836	2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	36
PID 2968 wrote to memory of 2836	2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	36
PID 2968 wrote to memory of 2836	2968	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	36
PID 1892 wrote to memory of 2712	1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	37
PID 1892 wrote to memory of 2712	1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	37
PID 1892 wrote to memory of 2712	1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	37
PID 1892 wrote to memory of 2712	1892	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	37
PID 3028 wrote to memory of 1624	3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	38
PID 3028 wrote to memory of 1624	3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	38
PID 3028 wrote to memory of 1624	3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	38
PID 3028 wrote to memory of 1624	3028	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	38
PID 1704 wrote to memory of 1924	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	39
PID 1704 wrote to memory of 1924	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	39
PID 1704 wrote to memory of 1924	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	39
PID 1704 wrote to memory of 1924	1704	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	39
PID 560 wrote to memory of 1580	560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	40
PID 560 wrote to memory of 1580	560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	40
PID 560 wrote to memory of 1580	560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	40
PID 560 wrote to memory of 1580	560	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	40
PID 2588 wrote to memory of 908	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	41
PID 2588 wrote to memory of 908	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	41
PID 2588 wrote to memory of 908	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	41
PID 2588 wrote to memory of 908	2588	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	41
PID 2584 wrote to memory of 2672	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	42
PID 2584 wrote to memory of 2672	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	42
PID 2584 wrote to memory of 2672	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	42
PID 2584 wrote to memory of 2672	2584	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	42
PID 3048 wrote to memory of 1612	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	43
PID 3048 wrote to memory of 1612	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	43
PID 3048 wrote to memory of 1612	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	43
PID 3048 wrote to memory of 1612	3048	8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe	43

C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1704
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:3048
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2584
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:560
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1580
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:664
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        9⤵
        
        PID:11280
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:10260
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4504
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11048
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:6124
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11936
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10572
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:1644
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4812
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11368
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:7208
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11928
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3912
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:9920
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4784
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:8412
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2240
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:2952
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4788
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11024
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10500
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3820
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:9992
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11112
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10896
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2708
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3988
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10716
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10452
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10324
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3432
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7232
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11224
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4208
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:1632
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6644
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10340
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2672
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1348
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3328
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11400
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10316
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:4900
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:7028
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10268
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10604
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10580
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:1072
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5004
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11204
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:840
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10528
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4064
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10032
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6244
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11000
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10700
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1796
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2496
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:4376
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10724
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10840
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10396
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4380
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10612
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6992
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10928
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:1736
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4412
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10588
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7264
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11376
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3896
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10000
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5960
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11344
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:9060
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2968
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2836
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1220
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:2336
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4600
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:10564
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:9520
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3412
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:10676
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10484
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10596
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6724
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10308
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:1040
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3116
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10040
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11324
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10768
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3140
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6612
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11172
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4364
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10388
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6464
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10644
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2516
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2228
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3964
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10048
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6236
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10668
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10740
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3196
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11352
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11232
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4760
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10636
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10228
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:1440
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3600
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7004
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10944
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5756
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11392
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7012
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10372
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2860
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5532
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11040
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11416
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4244
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11008
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6928
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11576
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2804
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1952
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2388
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3768
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:7256
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5016
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11604
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7328
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:12076
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2772
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10832
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10520
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4216
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11180
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7280
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:12000
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3000
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3404
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6812
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11148
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4116
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10548
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6652
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10292
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2636
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5808
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11408
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10848
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4336
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11104
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6948
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10904
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1612
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2200
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3864
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:9492
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4660
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11056
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:648
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2776
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6020
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11484
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:8172
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4200
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10444
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6884
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11424
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:948
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3512
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7320
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5412
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11016
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10952
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:1280
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5592
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11472
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11248
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:3340
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11096
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:6472
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:10620
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2588
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1892
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2712
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3024
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:2476
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:4688
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        8⤵
        
        PID:11288
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:7240
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11064
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3880
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10024
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11512
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10332
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2524
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:4136
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11196
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7272
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3664
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:9984
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5724
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11700
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10200
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2044
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:2628
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:4576
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10708
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7312
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3636
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:9052
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5748
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10960
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6984
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10276
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:1544
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3616
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6960
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10660
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5396
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11384
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10756
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3392
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6836
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11256
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5372
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10684
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10888
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:908
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:1864
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3284
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:5992
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10436
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10236
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5024
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10412
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6636
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11360
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10348
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2768
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:5388
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:3596
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10748
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4120
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6844
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11080
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11272
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:7216
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1976
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:540
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6340
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11948
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11088
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4236
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:9648
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6876
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11132
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10732
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:2608
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4568
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10912
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:9956
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:3520
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10788
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:5404
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:10920
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:3028
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1624
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2908
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:1600
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:4996
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:10428
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        7⤵
        
        PID:11464
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10540
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:3460
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:7248
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:11316
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6252
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10652
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10856
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2696
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4128
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10692
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7304
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11676
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3528
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7288
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5556
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11032
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10364
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2212
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:2252
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4432
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:2856
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:6092
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10556
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3692
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:7336
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5864
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11296
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11140
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:2096
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3956
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:10420
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6228
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11156
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:3252
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6452
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11336
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:4920
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11524
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:6668
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:10284
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1924
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:928
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:3232
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:4144
      - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        6⤵
        
        PID:10628
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:9452
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4636
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11072
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:7296
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:11692
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:2828
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:5036
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11216
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:6660
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10380
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:3920
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10968
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:7224
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1856
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:1616
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:4328
    - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
        5⤵
        
        PID:11188
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10300
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:3504
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10460
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:4588
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:10804
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  PID:2640
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:4320
  - - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
      4⤵
      PID:10356
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:6600
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:11164
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  PID:3672
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:9044
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  PID:5704
- - C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
    3⤵
    PID:10936
- C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\8e07527f27c35b67b0c5673ebc79a9295a4f2eb902bddbca3eff03b092ca5997_NeikiAnalytics.exe"
  2⤵
  PID:10404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian cumshot masturbation hairy (Sonja,Sylvia).mpeg.exe

Filesize
250KB

MD5
d2c14386376d43dde4a34974b645ee0b

SHA1
ec089b6c943f89fbe9e49474f87be2507425078c

SHA256
64ea003da7dd89e695ed49fe7de29b59c6c3911c23421922bab142ff1768e993

SHA512
359a557c2e791643ee51009796d8ae0bc96afb6f97aa4147ba7a0b8b064a8e32fcc69fd4315bc8741c3ddf3274042af316952e3b499c2774d9f7aad576b355d4

Download Submit
memory/560-64-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/560-120-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/560-108-0x0000000004A70000-0x0000000004A9B000-memory.dmp

Filesize
172KB

Download
memory/664-148-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/908-130-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/908-129-0x0000000004860000-0x000000000488B000-memory.dmp

Filesize
172KB

Download
memory/908-151-0x0000000004690000-0x00000000046BB000-memory.dmp

Filesize
172KB

Download
memory/908-91-0x0000000004690000-0x00000000046BB000-memory.dmp

Filesize
172KB

Download
memory/928-150-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/948-155-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/948-156-0x00000000047D0000-0x00000000047FB000-memory.dmp

Filesize
172KB

Download
memory/1040-174-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1220-149-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/1220-138-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1220-89-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1220-109-0x00000000047D0000-0x00000000047FB000-memory.dmp

Filesize
172KB

Download
memory/1348-147-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/1348-152-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1440-167-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1440-162-0x00000000045A0000-0x00000000045CB000-memory.dmp

Filesize
172KB

Download
memory/1580-128-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1580-122-0x0000000004A60000-0x0000000004A8B000-memory.dmp

Filesize
172KB

Download
memory/1612-132-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1612-160-0x0000000001E20000-0x0000000001E4B000-memory.dmp

Filesize
172KB

Download
memory/1612-135-0x0000000004950000-0x000000000497B000-memory.dmp

Filesize
172KB

Download
memory/1612-95-0x0000000001E20000-0x0000000001E4B000-memory.dmp

Filesize
172KB

Download
memory/1624-74-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1624-125-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1624-158-0x0000000004A90000-0x0000000004ABB000-memory.dmp

Filesize
172KB

Download
memory/1704-111-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1704-61-0x00000000051E0000-0x000000000520B000-memory.dmp

Filesize
172KB

Download
memory/1704-0-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1704-170-0x00000000051E0000-0x000000000520B000-memory.dmp

Filesize
172KB

Download
memory/1704-50-0x00000000051E0000-0x000000000520B000-memory.dmp

Filesize
172KB

Download
memory/1796-145-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1856-143-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1856-126-0x00000000047D0000-0x00000000047FB000-memory.dmp

Filesize
172KB

Download
memory/1864-153-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1892-107-0x0000000004950000-0x000000000497B000-memory.dmp

Filesize
172KB

Download
memory/1892-119-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1924-90-0x0000000004520000-0x000000000454B000-memory.dmp

Filesize
172KB

Download
memory/1924-127-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1952-98-0x0000000004A50000-0x0000000004A7B000-memory.dmp

Filesize
172KB

Download
memory/1952-134-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/1952-164-0x0000000004A50000-0x0000000004A7B000-memory.dmp

Filesize
172KB

Download
memory/1976-137-0x0000000004A50000-0x0000000004A7B000-memory.dmp

Filesize
172KB

Download
memory/1976-146-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2044-140-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2044-165-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2096-175-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2200-161-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2212-139-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2212-172-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2228-171-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2240-141-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2388-176-0x00000000020B0000-0x00000000020DB000-memory.dmp

Filesize
172KB

Download
memory/2388-166-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2516-168-0x0000000004820000-0x000000000484B000-memory.dmp

Filesize
172KB

Download
memory/2516-136-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2516-99-0x0000000004820000-0x000000000484B000-memory.dmp

Filesize
172KB

Download
memory/2584-53-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2584-115-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2584-75-0x0000000004AA0000-0x0000000004ACB000-memory.dmp

Filesize
172KB

Download
memory/2588-114-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2588-52-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2672-131-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2696-112-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2712-124-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2712-110-0x0000000004920000-0x000000000494B000-memory.dmp

Filesize
172KB

Download
memory/2712-73-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2712-169-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2804-133-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2804-71-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2804-93-0x0000000004920000-0x000000000494B000-memory.dmp

Filesize
172KB

Download
memory/2804-157-0x0000000004920000-0x000000000494B000-memory.dmp

Filesize
172KB

Download
memory/2804-121-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2836-100-0x0000000004A60000-0x0000000004A8B000-memory.dmp

Filesize
172KB

Download
memory/2836-72-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2836-173-0x0000000004A60000-0x0000000004A8B000-memory.dmp

Filesize
172KB

Download
memory/2836-123-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2908-144-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2968-163-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2968-62-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/2968-97-0x0000000004930000-0x000000000495B000-memory.dmp

Filesize
172KB

Download
memory/2968-117-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3000-159-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3024-142-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3028-106-0x0000000004A70000-0x0000000004A9B000-memory.dmp

Filesize
172KB

Download
memory/3028-118-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3048-113-0x0000000000400000-0x000000000042B000-memory.dmp

Filesize
172KB

Download
memory/3048-154-0x0000000004A70000-0x0000000004A9B000-memory.dmp

Filesize
172KB

Download
memory/3048-70-0x0000000004A70000-0x0000000004A9B000-memory.dmp

Filesize
172KB

Download
memory/3048-92-0x0000000004A70000-0x0000000004A9B000-memory.dmp

Filesize
172KB

Download
memory/3048-60-0x0000000004A60000-0x0000000004A8B000-memory.dmp

Filesize
172KB

Download
memory/3048-116-0x0000000004A60000-0x0000000004A8B000-memory.dmp

Filesize
172KB

Download
memory/3048-51-0x00000000047D0000-0x00000000047FB000-memory.dmp

Filesize
172KB

Download