6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313

Analysis

max time kernel
14s
max time network
122s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
29-06-2024 04:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
Size

689KB
MD5

763dd6d5d550ebfc7f3270f1505a9960
SHA1

652870efed555125e3f97263c08d00a65107e447
SHA256

6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313
SHA512

ff8589591fcdad2d0bc1615b5f17814499db42581ca439fc579be1be8ae66f4a604785b3bf2e9838dac15f9e6402ce8692ddcf6c3fc2466ecc96a2a131b37ca5
SSDEEP

12288:OWji9BspKvTc2+gi2pBQqTpornB8s7yjxkw2cM2pq1p5YfFP:Csp4ThLnhporCs8k3Epq1p5aP

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe"	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\P:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\W:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\X:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\G:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\I:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\L:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\N:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\O:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\B:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\K:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\Y:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\Z:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\Q:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\S:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\T:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\A:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\E:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\H:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\J:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\M:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\U:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\R:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File opened (read-only)	\??\V:	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Drops file in System32 directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\lingerie masturbation redhair .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\russian handjob trambling public mature .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\black horse blowjob several models feet .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\black nude fucking public (Melissa).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\IME\shared\swedish porn horse masturbation titts .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\black gang bang bukkake uncut circumcision .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\System32\DriverStore\Temp\swedish fetish horse hidden (Melissa).rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\FxsTmp\chinese bukkake masturbation .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\System32\LogFiles\Fax\Incoming\bukkake sleeping high heels (Ashley,Janette).zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\config\systemprofile\american animal xxx full movie .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Drops file in Program Files directory 15 IoCs

description	ioc	Process
File created	C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian handjob trambling hidden lady (Gina,Samantha).mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\tyrkish nude blowjob catfight cock wifey .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\blowjob girls .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\tyrkish nude hardcore masturbation hole circumcision .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\sperm [bangbus] cock .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\italian action sperm several models titts .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Temp\danish cum lingerie several models swallow (Sonja,Karin).mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\lingerie hidden glans shoes .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\indian fetish sperm public girly .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\Templates\lingerie full movie titts latex (Liz).zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\black beastiality hardcore public .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\black fetish blowjob hot (!) feet .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\indian fetish trambling [bangbus] sweet .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\russian action beast uncut feet .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Update\Download\italian fetish xxx lesbian .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Drops file in Windows directory 31 IoCs

description	ioc	Process
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\indian porn fucking full movie hole gorgeoushorny .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\black kicking trambling public hole beautyfull .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\japanese beastiality lesbian girls blondie .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\PLA\Templates\russian animal sperm hot (!) glans .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\russian cum trambling voyeur .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\security\templates\black horse horse girls latex .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\danish fetish hardcore public penetration .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\danish animal blowjob public girly (Sonja,Melissa).avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\russian animal gay full movie pregnant .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\bukkake girls beautyfull .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\xxx licking leather (Anniston,Curtney).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\mssrv.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\indian nude fucking lesbian black hairunshaved .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\Downloads\indian handjob hardcore sleeping cock ejaculation (Sarah).mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\italian kicking lingerie public Ôë .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\swedish handjob lesbian several models beautyfull .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\danish kicking beast [bangbus] feet beautyfull (Melissa).rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\SoftwareDistribution\Download\indian horse lesbian uncut 50+ .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\temp\indian porn gay [free] cock boots .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\american cumshot lingerie hot (!) sm .rar.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\Downloads\brasilian porn trambling [bangbus] .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\italian horse horse several models cock hairy (Samantha).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\xxx [free] titts .avi.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\blowjob big glans fishy .mpeg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\danish kicking lesbian voyeur cock young (Melissa).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\tmp\bukkake masturbation ash .mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\Downloaded Program Files\tyrkish handjob gay [milf] (Sylvia).zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\brasilian beastiality horse hot (!) cock upskirt (Liz).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\russian nude horse girls (Curtney).mpg.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\trambling uncut (Curtney).zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\tyrkish action lesbian [bangbus] .zip.exe	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 37 IoCs

pid	Process
2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2384	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1424	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
748	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2000	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
840	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1936	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2464	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
844	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1056	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2032	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
2008	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 2744	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	28
PID 2208 wrote to memory of 2744	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	28
PID 2208 wrote to memory of 2744	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	28
PID 2208 wrote to memory of 2744	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	28
PID 2744 wrote to memory of 2732	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	29
PID 2744 wrote to memory of 2732	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	29
PID 2744 wrote to memory of 2732	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	29
PID 2744 wrote to memory of 2732	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	29
PID 2208 wrote to memory of 2480	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	30
PID 2208 wrote to memory of 2480	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	30
PID 2208 wrote to memory of 2480	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	30
PID 2208 wrote to memory of 2480	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	30
PID 2480 wrote to memory of 1596	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	31
PID 2480 wrote to memory of 1596	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	31
PID 2480 wrote to memory of 1596	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	31
PID 2480 wrote to memory of 1596	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	31
PID 2732 wrote to memory of 1104	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	32
PID 2732 wrote to memory of 1104	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	32
PID 2732 wrote to memory of 1104	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	32
PID 2732 wrote to memory of 1104	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	32
PID 2744 wrote to memory of 2820	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	33
PID 2744 wrote to memory of 2820	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	33
PID 2744 wrote to memory of 2820	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	33
PID 2744 wrote to memory of 2820	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	33
PID 2208 wrote to memory of 2784	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	34
PID 2208 wrote to memory of 2784	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	34
PID 2208 wrote to memory of 2784	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	34
PID 2208 wrote to memory of 2784	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	34
PID 1596 wrote to memory of 2548	1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	35
PID 1596 wrote to memory of 2548	1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	35
PID 1596 wrote to memory of 2548	1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	35
PID 1596 wrote to memory of 2548	1596	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	35
PID 1104 wrote to memory of 2384	1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	36
PID 1104 wrote to memory of 2384	1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	36
PID 1104 wrote to memory of 2384	1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	36
PID 1104 wrote to memory of 2384	1104	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	36
PID 2480 wrote to memory of 1424	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	37
PID 2480 wrote to memory of 1424	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	37
PID 2480 wrote to memory of 1424	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	37
PID 2480 wrote to memory of 1424	2480	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	37
PID 2744 wrote to memory of 748	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	38
PID 2744 wrote to memory of 748	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	38
PID 2744 wrote to memory of 748	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	38
PID 2744 wrote to memory of 748	2744	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	38
PID 2784 wrote to memory of 2000	2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	39
PID 2784 wrote to memory of 2000	2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	39
PID 2784 wrote to memory of 2000	2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	39
PID 2784 wrote to memory of 2000	2784	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	39
PID 2732 wrote to memory of 1936	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	40
PID 2732 wrote to memory of 1936	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	40
PID 2732 wrote to memory of 1936	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	40
PID 2732 wrote to memory of 1936	2732	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	40
PID 2820 wrote to memory of 840	2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	41
PID 2820 wrote to memory of 840	2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	41
PID 2820 wrote to memory of 840	2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	41
PID 2820 wrote to memory of 840	2820	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	41
PID 2208 wrote to memory of 2464	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	42
PID 2208 wrote to memory of 2464	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	42
PID 2208 wrote to memory of 2464	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	42
PID 2208 wrote to memory of 2464	2208	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	42
PID 2548 wrote to memory of 844	2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	43
PID 2548 wrote to memory of 844	2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	43
PID 2548 wrote to memory of 844	2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	43
PID 2548 wrote to memory of 844	2548	6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe	43

C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2744
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2732
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:1104
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2384
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:1712
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:3716
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:10796
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:16488
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:8416
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:15544
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8132
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:16728
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:3428
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:5952
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:9220
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        9⤵
        
        PID:15244
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:10828
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:16700
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:4536
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8288
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15756
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:12096
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:2212
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:3848
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:7068
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15516
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:9228
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3444
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5820
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:9244
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15708
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:10788
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:16504
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4592
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:13252
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7420
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:11376
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16672
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2008
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:2236
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:3680
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:6408
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:10808
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:16648
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:9260
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15692
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8340
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:6428
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3420
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8836
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15676
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:13160
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4584
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7444
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10884
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16640
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:1720
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3724
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:6448
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:14800
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5372
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8256
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15748
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3452
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5564
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:9252
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4608
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10856
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16480
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7428
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11348
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16464
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1936
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:1920
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:2724
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:11416
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:16456
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:7296
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5724
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10624
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:2908
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8072
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:15552
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6268
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:9152
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4676
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3796
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7312
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:12620
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5484
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8100
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15788
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2260
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:2544
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5040
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8140
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15724
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4168
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8272
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15764
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6236
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8248
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15772
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:1728
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4440
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8080
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15740
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6728
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16424
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3760
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6856
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16392
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5444
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8056
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15700
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:10632
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2820
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:840
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:1184
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3288
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5212
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8408
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15608
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8308
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:15592
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4332
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8168
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:15600
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6220
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8220
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5320
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:1108
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5024
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8064
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15796
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3904
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8120
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3688
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5580
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8008
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2872
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:2072
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4704
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:9380
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6944
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15128
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3872
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7280
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:14812
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5732
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:10640
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2388
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4480
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7676
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:17252
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6864
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13128
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:12868
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3768
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6472
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11568
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:12832
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5436
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:14792
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:748
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:428
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:2568
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5164
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8848
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:17372
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8016
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:17200
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4176
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8460
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16416
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5772
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11628
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2760
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4688
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6924
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16400
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3788
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7396
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11368
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16664
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5516
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:8212
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:15732
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2948
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2504
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5016
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8112
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15536
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3812
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7288
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11612
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5388
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:8196
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:15560
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2136
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3920
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7348
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13108
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16584
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5812
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:10816
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:16576
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:3504
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:6260
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:8176
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:17360
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:4720
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:6228
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:8264
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:15624
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2480
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1596
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:2548
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:844
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:1120
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:3364
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8552
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:1040
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:4392
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:8092
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        8⤵
        
        PID:15572
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:6340
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:11312
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3328
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8544
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:15524
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4324
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6276
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:11584
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10544
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:480
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3488
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5868
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:15116
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4616
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7436
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10844
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16656
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3352
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5312
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8184
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6852
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4384
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6284
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:12292
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1056
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:1532
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:5852
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:14136
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:4560
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7092
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3376
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:8744
        
        C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        7⤵
        
        PID:16684
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:10876
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16592
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4552
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6912
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:10896
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16600
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:696
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3700
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6440
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:14780
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5380
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8236
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15780
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3436
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5888
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13168
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:4544
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:7060
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11620
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1424
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2232
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:2892
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5008
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8048
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:12812
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3896
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:7340
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15228
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5588
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8040
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13456
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:868
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4460
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6872
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13120
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16552
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3880
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7984
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15716
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5740
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:8348
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2076
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3036
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5000
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8332
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16432
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3784
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8560
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4360
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5764
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11964
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:1608
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3752
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6896
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:10904
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16496
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5452
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:14820
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:3460
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5912
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:10836
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:13200
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:4600
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:7412
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:11340
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:16448
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2784
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2000
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2276
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:3024
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:5032
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8024
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4196
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:6480
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:13076
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:16544
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6212
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11400
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16692
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:2604
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4936
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8424
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:17244
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6300
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11424
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:16472
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3864
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:7356
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15220
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5468
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:7992
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2228
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3028
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:4896
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:8856
      - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        6⤵
        
        PID:15636
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6348
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:11604
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3828
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:6936
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15424
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:5508
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:8032
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:1652
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:1696
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:4420
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:6752
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:16408
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:3836
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:6904
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:14832
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:5500
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:8204
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:15812
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:928
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:3268
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:5128
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8000
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:13516
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:4340
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:6372
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11304
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2904
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:4712
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:6952
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11576
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:3820
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:7332
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:15580
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:5492
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:8152
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:16720
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  PID:1564
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:2588
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:4572
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:8820
    - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
        5⤵
        
        PID:15804
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:7052
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11592
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:3804
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:7404
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:11332
  - - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
      4⤵
      PID:16440
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:5476
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:8228
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:15616
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  PID:2996
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:4488
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:6820
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:11408
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:15252
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  PID:3776
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:7304
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:12412
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  PID:5428
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:9236
- - C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
    3⤵
    PID:15684
- C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\6550ca547134c9612e11eed88658933ef654bdb4c43d38bca9af0d315a91b313_NeikiAnalytics.exe"
  2⤵
  PID:10860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian handjob trambling hidden lady (Gina,Samantha).mpeg.exe

Filesize
315KB

MD5
3730b525940efbbc9262970a839e7225

SHA1
7fd903c4d0685f7dc253e472275ecbba7d08e1da

SHA256
9f7012d5ca3616d6b175e9dd5ef82d15a577120046b256b77308a32de16f460d

SHA512
b064070c3e5b1c5261f99cd3091050985938ea410ef4c21e3c43cb039e69d4731c9730487f5b993538c4af702928515de605225404c4b96ed0731b726e081454

Download Submit