Overview

overview

7

Static

static

3

0fb02e96a5...cs.exe

windows7-x64

7

0fb02e96a5...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    12s
  • max time network
    117s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2024, 23:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe

  • Size

    1.0MB

  • MD5

    23017d22578e187125c0ab0d1b249600

  • SHA1

    cb5ca23ac58e1d91114277efbaf7b7197036600b

  • SHA256

    0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee

  • SHA512

    8ea651846151091728960154b7b81c0376a69e6b3dedffa4c32ed2137519d9e9f5337ba7d667c14d93688642ac7e5a0583c6c1434389b0b62dbe788879b7a247

  • SSDEEP

    24576:2wofAua4rEtGq/4Df38xG+Sc9vAi7g5QDTTLRcgUNy1xvTpW2bggez:hqQYq/4jXNavAi7qQff2TQNr0gez

Score
7/10
persistencespywarestealer

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 16 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 17 IoCs
  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3288
    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
      2⤵
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:536
      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
        3⤵
        • Checks computer location settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4484
        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
          4⤵
          • Checks computer location settings
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:4668
          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
            5⤵
            • Checks computer location settings
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:4172
            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
              6⤵
                PID:4440
                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                  7⤵
                    PID:5160
                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                      8⤵
                        PID:14628
                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                      7⤵
                        PID:5424
                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                          8⤵
                            PID:17492
                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                          7⤵
                            PID:7136
                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                              8⤵
                                PID:17464
                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                              7⤵
                                PID:9748
                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                7⤵
                                  PID:11320
                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                  7⤵
                                    PID:14844
                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                  6⤵
                                    PID:1524
                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                      7⤵
                                        PID:7172
                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                          8⤵
                                            PID:18944
                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                          7⤵
                                            PID:10300
                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                              8⤵
                                                PID:20056
                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                              7⤵
                                                PID:5080
                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                7⤵
                                                  PID:14540
                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                6⤵
                                                  PID:5512
                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                    7⤵
                                                      PID:17500
                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                    6⤵
                                                      PID:7080
                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                        7⤵
                                                          PID:15096
                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                        6⤵
                                                          PID:9888
                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                            7⤵
                                                              PID:11976
                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                            6⤵
                                                              PID:11312
                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                              6⤵
                                                                PID:14896
                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                              5⤵
                                                                PID:2416
                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                  6⤵
                                                                    PID:4644
                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                      7⤵
                                                                        PID:6920
                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                          8⤵
                                                                            PID:16980
                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                          7⤵
                                                                            PID:8784
                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                              8⤵
                                                                                PID:2176
                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                              7⤵
                                                                                PID:11400
                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                7⤵
                                                                                  PID:15128
                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                6⤵
                                                                                  PID:5544
                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                    7⤵
                                                                                      PID:12012
                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                      7⤵
                                                                                        PID:15176
                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                      6⤵
                                                                                        PID:8352
                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                          7⤵
                                                                                            PID:7444
                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                          6⤵
                                                                                            PID:11440
                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                            6⤵
                                                                                              PID:15352
                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                            5⤵
                                                                                              PID:2816
                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                6⤵
                                                                                                  PID:6748
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                    7⤵
                                                                                                      PID:16864
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                    6⤵
                                                                                                      PID:8740
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                      6⤵
                                                                                                        PID:11556
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                        6⤵
                                                                                                          PID:15112
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                        5⤵
                                                                                                          PID:5560
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                            6⤵
                                                                                                              PID:14436
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                            5⤵
                                                                                                              PID:8232
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                6⤵
                                                                                                                  PID:14328
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                5⤵
                                                                                                                  PID:11464
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                  5⤵
                                                                                                                    PID:15136
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                  4⤵
                                                                                                                  • Checks computer location settings
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                  PID:4916
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                    5⤵
                                                                                                                      PID:2840
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                        6⤵
                                                                                                                          PID:540
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                            7⤵
                                                                                                                              PID:7200
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                8⤵
                                                                                                                                  PID:15032
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                7⤵
                                                                                                                                  PID:9616
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                    8⤵
                                                                                                                                      PID:20032
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                    7⤵
                                                                                                                                      PID:11376
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                      7⤵
                                                                                                                                        PID:14112
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                      6⤵
                                                                                                                                        PID:5520
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                          7⤵
                                                                                                                                            PID:6944
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                          6⤵
                                                                                                                                            PID:7008
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                              7⤵
                                                                                                                                                PID:14604
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                              6⤵
                                                                                                                                                PID:10316
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                6⤵
                                                                                                                                                  PID:11260
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                  6⤵
                                                                                                                                                    PID:14868
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                  5⤵
                                                                                                                                                    PID:2912
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                      6⤵
                                                                                                                                                        PID:6740
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                          7⤵
                                                                                                                                                            PID:14612
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                          6⤵
                                                                                                                                                            PID:8292
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                              7⤵
                                                                                                                                                                PID:13092
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                7⤵
                                                                                                                                                                  PID:19352
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:11456
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                  6⤵
                                                                                                                                                                    PID:15160
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                  5⤵
                                                                                                                                                                    PID:5568
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                      6⤵
                                                                                                                                                                        PID:14692
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:8412
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                          6⤵
                                                                                                                                                                            PID:15000
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                          5⤵
                                                                                                                                                                            PID:11424
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:15144
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                            4⤵
                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                            PID:2656
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                              5⤵
                                                                                                                                                                                PID:2092
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                  6⤵
                                                                                                                                                                                    PID:6912
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                      7⤵
                                                                                                                                                                                        PID:5740
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                      6⤵
                                                                                                                                                                                        PID:8816
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                          7⤵
                                                                                                                                                                                            PID:20016
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                          6⤵
                                                                                                                                                                                            PID:11564
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                            6⤵
                                                                                                                                                                                              PID:14944
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:5536
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                6⤵
                                                                                                                                                                                                  PID:16972
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                5⤵
                                                                                                                                                                                                  PID:8240
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                      PID:13384
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                      PID:11432
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                        PID:15376
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:4636
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                            PID:6792
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                PID:17456
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:8748
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                    PID:14212
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:11408
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                      PID:15152
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:5552
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:2892
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:8220
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                              PID:14992
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:11504
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:2244
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                              PID:3528
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                PID:3424
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                    PID:3152
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                        PID:5816
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          7⤵
                                                                                                                                                                                                                                            PID:14788
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                            PID:8324
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                              7⤵
                                                                                                                                                                                                                                                PID:13088
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                  PID:19264
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                  PID:11448
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                    PID:15120
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                    PID:5172
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                        PID:12784
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                          PID:17020
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                          PID:5416
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                              PID:11480
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                PID:15344
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                PID:7152
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                    PID:15408
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                    PID:9712
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                        PID:20088
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                        PID:8124
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:15184
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:4852
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                              PID:5020
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                  PID:13576
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                  PID:5432
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                      PID:11996
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                        PID:16200
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                        PID:7072
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                            PID:14984
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                            PID:10012
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                              PID:11068
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                PID:14676
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                PID:3660
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                    PID:400
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                    PID:5496
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                        PID:12004
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                          PID:14416
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                          PID:7048
                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                              PID:15088
                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                              PID:9728
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                  PID:20040
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                  PID:11280
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                    PID:14668
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                  PID:5084
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                      PID:3892
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                          PID:5288
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                              PID:14040
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                              PID:5352
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                  PID:11776
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                    PID:14904
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                    PID:7128
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                        PID:15008
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                        PID:9664
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                          PID:11288
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                            PID:16216
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                            PID:5124
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                PID:16856
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                PID:5440
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                    PID:17448
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                    PID:7056
                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                        PID:14448
                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                        PID:9940
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                            PID:20096
                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                            PID:11272
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                              PID:14780
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                              PID:3280
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:1964
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:17048
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:5472
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:12772
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:16260
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:7032
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:14876
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:10476
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:11252
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:624
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:4580
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:7220
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:15024
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:10308
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:8616
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:8960
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:14620
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:5528
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:11968
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:16252
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:7160
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:15064
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:9736
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:11328
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:14644
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                              PID:4416
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                PID:3216
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:636
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:408
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6664
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                            7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6048
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8248
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                7⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:14260
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11212
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:14548
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5252
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11636
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:14556
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5368
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11936
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:16192
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7104
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:15016
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9656
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:19128
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11532
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:15668
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4368
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5232
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16236
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11512
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:15420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:17760
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:20048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2508
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:17508
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5460
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:14884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6992
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:17696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4332
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3512
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:14820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5408
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:14344
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7144
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3704
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9672
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:20008
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:11352
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:15392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:15056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:15168
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7016
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:15048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9680
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:20080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:14388
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6872
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11960
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9704
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:20064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13268
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:832
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9688
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11236
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:14312
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5504
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:16988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:15040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:14564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2408
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:16872
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7000
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16896
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:14852
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5260
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5768
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:14860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7120
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:17376
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:20072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11336
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:14576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4708
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1924
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:16880
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:7088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:17704
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10528
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:14636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3176
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:14056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5488
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:16888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:14660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2464
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:15368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1804
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5880
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7024
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:17520
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9792
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:20024
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:15072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5240
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:17200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5376
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11488
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:15676
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7112
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6908
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9696
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11344
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:14652
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3568
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:16964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7040
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5924
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:14684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:15400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5480
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:14596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:19360
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\0fb02e96a51d855b8399f2bbde7f3cd8be95f5f0c32a81a37a729f0a7c4b0fee_NeikiAnalytics.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:15104

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\malaysia blowjob hardcore sleeping leather (Britney).mpeg.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1.4MB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4c2171654e40a1de1f65a4e4619cebcf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            14614399f2317f09cdfaf9db6d1099ba9785ffc4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            873eac36d70a7d38640e87dcb33ea30429d8e1c4f90413099146fb64ba275223

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            68e52e2e96b061f2d0bd7d1b248a85fe3cf64ec36b6d08956f86478dedbfe74d0d5ed0d0cc3e95aa79d60ff23ed3693f5214dffa294a4bbdab33e69f6dd3ab72

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Download Submit

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\debug.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            146B

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            88bb8e26962ffbbe254138ea94d29c7e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            b41e4f694c7d12a584750edc02e33b5818492823

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ec3a96488647a9ae5f906befdbc9bb0c4a80e0d9b9916c07e7befc23d8d36dc6

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            51e03681b840d34f4e357ae0f8bbcecb262065eb4759b30d8921d29ce2e09b3d92a6d901e70356d34493c37804931e46d9383a960ddd871aae4ab2a5ec4d126e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Download Submit