Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    12s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 15:39

General

  • Target

    9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe

  • Size

    1.5MB

  • MD5

    e8acb1b4daced520e78256c9a333e300

  • SHA1

    11145376b3fad615871732fda10c83ec2760f04b

  • SHA256

    9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085

  • SHA512

    51a046fc859e9c16abe308410664e24e3da5637ec0fe9134184d795fef1f0d508f75f2908805a398eaf3c4021e6bd5953e21ae838ae091b10a02f1e6495b04bb

  • SSDEEP

    49152:5DFSkBKEK4Vkl9srv6sQJ3fp5jpVP4Yfc:5DFiEmfjJPXj7o

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 16 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 18 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
      2⤵
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:3644
      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
        3⤵
        • Checks computer location settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:936
        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
          4⤵
          • Checks computer location settings
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:3108
          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
            5⤵
            • Checks computer location settings
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:4952
            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
              6⤵
              • Suspicious behavior: EnumeratesProcesses
              PID:4128
              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                7⤵
                  PID:3892
                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                    8⤵
                      PID:5920
                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                        9⤵
                          PID:12792
                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                          9⤵
                            PID:16248
                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                            9⤵
                              PID:18608
                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                            8⤵
                              PID:7332
                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                9⤵
                                  PID:19828
                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                8⤵
                                  PID:10004
                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                    9⤵
                                      PID:22736
                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                    8⤵
                                      PID:13172
                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                      8⤵
                                        PID:17620
                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                      7⤵
                                        PID:4524
                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                          8⤵
                                            PID:8404
                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                              9⤵
                                                PID:19716
                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                              8⤵
                                                PID:11812
                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                8⤵
                                                  PID:12852
                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                  8⤵
                                                    PID:17308
                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                  7⤵
                                                    PID:6296
                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                      8⤵
                                                        PID:11560
                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                        8⤵
                                                          PID:16304
                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                        7⤵
                                                          PID:8380
                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                            8⤵
                                                              PID:20232
                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                            7⤵
                                                              PID:11820
                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                8⤵
                                                                  PID:18216
                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                7⤵
                                                                  PID:12840
                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                  7⤵
                                                                    PID:17300
                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                  6⤵
                                                                    PID:824
                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                      7⤵
                                                                        PID:5856
                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                          8⤵
                                                                            PID:9972
                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                              9⤵
                                                                                PID:19528
                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                              8⤵
                                                                                PID:13204
                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                8⤵
                                                                                  PID:17540
                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                7⤵
                                                                                  PID:7300
                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                    8⤵
                                                                                      PID:20216
                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                    7⤵
                                                                                      PID:3700
                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                        8⤵
                                                                                          PID:23500
                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                        7⤵
                                                                                          PID:13156
                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                          7⤵
                                                                                            PID:17572
                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                          6⤵
                                                                                            PID:4568
                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                              7⤵
                                                                                                PID:8824
                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                  8⤵
                                                                                                    PID:5376
                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                  7⤵
                                                                                                    PID:12776
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                    7⤵
                                                                                                      PID:17292
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                    6⤵
                                                                                                      PID:6304
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                        7⤵
                                                                                                          PID:13332
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                          7⤵
                                                                                                            PID:16444
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                          6⤵
                                                                                                            PID:8388
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                              7⤵
                                                                                                                PID:5312
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                              6⤵
                                                                                                                PID:11764
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                6⤵
                                                                                                                  PID:12872
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                  6⤵
                                                                                                                    PID:2860
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                  5⤵
                                                                                                                    PID:1336
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                      6⤵
                                                                                                                        PID:2412
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                          7⤵
                                                                                                                            PID:5204
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                              8⤵
                                                                                                                                PID:11040
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                8⤵
                                                                                                                                  PID:12932
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                  8⤵
                                                                                                                                    PID:16068
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                  7⤵
                                                                                                                                    PID:7840
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                      8⤵
                                                                                                                                        PID:19676
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                      7⤵
                                                                                                                                        PID:10944
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                          8⤵
                                                                                                                                            PID:16704
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                          7⤵
                                                                                                                                            PID:13068
                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                            7⤵
                                                                                                                                              PID:3848
                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                            6⤵
                                                                                                                                              PID:3740
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                7⤵
                                                                                                                                                  PID:3188
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                    8⤵
                                                                                                                                                      PID:19764
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                    7⤵
                                                                                                                                                      PID:10408
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                      7⤵
                                                                                                                                                        PID:13012
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                        7⤵
                                                                                                                                                          PID:392
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                        6⤵
                                                                                                                                                          PID:6316
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                            7⤵
                                                                                                                                                              PID:12784
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                              7⤵
                                                                                                                                                                PID:16112
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                7⤵
                                                                                                                                                                  PID:12748
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:8916
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                    7⤵
                                                                                                                                                                      PID:20168
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                    6⤵
                                                                                                                                                                      PID:13388
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                      6⤵
                                                                                                                                                                        PID:17588
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:1560
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                          6⤵
                                                                                                                                                                            PID:6020
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                              7⤵
                                                                                                                                                                                PID:14012
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                7⤵
                                                                                                                                                                                  PID:16904
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                6⤵
                                                                                                                                                                                  PID:7512
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                    7⤵
                                                                                                                                                                                      PID:19820
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                    6⤵
                                                                                                                                                                                      PID:10708
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                        7⤵
                                                                                                                                                                                          PID:19740
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                        6⤵
                                                                                                                                                                                          PID:13084
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                          6⤵
                                                                                                                                                                                            PID:17636
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                          5⤵
                                                                                                                                                                                            PID:4156
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                              6⤵
                                                                                                                                                                                                PID:8124
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                    PID:20224
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                    PID:10288
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                        PID:22744
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                        PID:13036
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                          PID:3976
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                          PID:6288
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                              PID:2532
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                PID:18484
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:8396
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                    PID:19536
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:11780
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                      PID:12864
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                        PID:17348
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                      PID:3876
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:4480
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                              PID:6028
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                  PID:13420
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                    PID:16076
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                    PID:7412
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                        PID:19692
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                        PID:10584
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                            PID:19860
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                            PID:13108
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                              PID:4736
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                              PID:3344
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                  PID:7468
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    7⤵
                                                                                                                                                                                                                                                      PID:19876
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                      PID:9380
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                        PID:13028
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                          PID:14960
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                          PID:6596
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                              PID:13752
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                PID:17224
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                PID:9144
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                    PID:5372
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                    PID:12696
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:17516
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:1860
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:5988
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                              PID:12728
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                PID:17208
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                PID:7324
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                    PID:15532
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                      PID:21708
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                      PID:9996
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                          PID:15216
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                          PID:13196
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                            PID:17604
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:3164
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                PID:7172
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                    PID:15204
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                      PID:17680
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                      PID:9988
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                          PID:20184
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                          PID:12808
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                            PID:17284
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                            PID:7124
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                PID:15196
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                  PID:8944
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                  PID:9124
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                      PID:19788
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                      PID:13380
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                        PID:2892
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                      • Checks computer location settings
                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                      PID:1716
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                        PID:3420
                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                            PID:3220
                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                PID:5936
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                                                                                                                    PID:11032
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                    7⤵
                                                                                                                                                                                                                                                                                                                                      PID:12920
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                                        PID:17316
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                        PID:7832
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                                                                                                                            PID:19772
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                            PID:10956
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                                                                                                                PID:19088
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                PID:13060
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                  PID:3656
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                  PID:4468
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                      PID:3348
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                        7⤵
                                                                                                                                                                                                                                                                                                                                                          PID:19868
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                          PID:10416
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                            PID:12996
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                              PID:2356
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                              PID:6524
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:13292
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:17448
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:8892
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:20200
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:13356
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:15564
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:1672
                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:6128
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:13396
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:3464
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:7420
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:19852
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:10596
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:19708
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:13100
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:16272
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:1244
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:8236
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:19780
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:11400
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:12900
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:17888
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:6604
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:13268
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:17500
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:8908
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:20192
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13428
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16976
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4148
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3160
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5864
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9600
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:19700
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13744
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1264
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7520
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:19660
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10628
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:19756
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13092
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2992
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3088
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:8412
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:19732
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11864
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:12820
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:17184
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6908
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:14556
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16912
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:19296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13348
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3928
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7752
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:19812
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11060
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:12964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:21456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:13316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17492
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9592
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19068
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:13212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3780
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:19080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4680
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2592
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5768
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          8⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:22228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13116
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:16728
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10128
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17672
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13180
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1668
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3904
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:19836
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10680
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13260
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:16448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8832
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:19844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13452
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7232
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:14540
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1692
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8616
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:12976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17556
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6944
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:17652
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:19108
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1524
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2332
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:16048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13364
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16432
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10320
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:22776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:16084
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4944
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:20176
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10780
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:18820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17880
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:12692
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5408
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13464
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4592
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7528
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:20160
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:19724
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13132
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5116
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8332
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12764
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:17464
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17580
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19288
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13444
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4116
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13436
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:14524
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10272
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:13020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1892
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8116
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19804
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:22916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13044
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15932
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9000
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19668
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5928
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11052
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12944
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3672
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:19684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15352
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:18980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13052
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:8500
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11856
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12828
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:13236
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:17440
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16240
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:23484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1872
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10336
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:22200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17524
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10120
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:18184
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:17644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4032
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7536
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:20208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10692
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:19796
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4652
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:13252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:20296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2312
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13004
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:19748
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10328
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:22728
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9060
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17764
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17508
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6620
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:13220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:17548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8924
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:20140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13372
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3448

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\swedish gang bang hardcore hot (!) hole swallow (Samantha).rar.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1.8MB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                a02d3193f5b23c670c4decbc97168a19

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                c923f43d96c17de7448e1a675d433e0a40cd91c7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                397c164df8f460870f707ca25bc725dcab0fec14af31e5dea552f12a1bb709f3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                a7bd61b04eaaf043df7d14392fdafa1fdee63c59db210697b943bb23cf8b061ba67daf4823dee33a23d1a0704ed1fc456fd9c8a93001a0b3d944103411c52efa

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/212-259-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/824-229-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/824-270-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/888-234-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/888-211-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/936-153-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/936-189-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1244-258-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1336-200-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1336-222-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1560-237-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1636-266-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1636-224-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1672-213-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1672-236-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1716-181-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1716-195-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1860-205-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1860-228-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1872-245-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1872-217-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1892-255-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2152-235-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2152-212-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2312-207-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2312-230-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2332-249-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2332-220-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2412-278-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2412-233-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2592-219-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2592-196-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2696-194-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2696-216-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2852-0-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2852-185-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2964-256-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3040-261-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3088-257-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3108-180-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3108-193-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3160-246-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3160-218-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3164-252-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3220-251-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3220-223-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3224-226-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3224-268-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3252-188-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3252-208-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3344-250-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3420-214-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3420-192-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3532-201-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3644-187-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3644-37-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3740-253-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3876-206-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3876-186-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3892-273-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3892-231-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3904-243-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3928-203-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/3928-225-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4032-248-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4116-198-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4116-182-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4128-199-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4128-221-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4148-184-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4148-204-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4156-241-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4468-244-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4480-215-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4480-240-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4524-242-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4568-254-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4592-209-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4592-232-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4612-260-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4660-191-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4660-158-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4840-190-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4840-210-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4944-247-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4952-202-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4952-183-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5768-267-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5840-269-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5856-272-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5864-271-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5900-274-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5920-275-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5928-276-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5936-277-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/5980-279-0x0000000000400000-0x0000000000456000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                344KB