2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14

Analysis

max time kernel
4s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01/07/2024, 02:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
Size

456KB
MD5

9627e8cf8db181432fc05ab2e0d3aac0
SHA1

b5b597d10830f0b1ebb37dcf6b8b3c3a232d5695
SHA256

2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14
SHA512

cf3e5d72b8d4f8c767a5b74f15b3e1ec9ca7e92701525996b3922bf56673ee16d6162c4760b0fa6245c19626c357926144dead1d8a2693474543ec5aaa2f1ab3
SSDEEP

12288:ZNzi9Bo/HEWELE6/vgDnx9/OD1KEmK6Q3+bAXPRFGob:QIEn/6nx9s1KEepbkPPGG

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe"	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\X:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\I:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\L:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\N:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\R:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\W:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\S:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\V:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\Z:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\A:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\E:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\G:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\H:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\K:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\B:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\J:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\O:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\P:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\U:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\M:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\Q:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\T:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File opened (read-only)	\??\Y:	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese porn gay masturbation 50+ .mpeg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\xxx uncut .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\Updates\Download\brasilian cum gay lesbian titts hairy (Sylvia).avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\nude sperm several models ¤ç (Sandy,Tatjana).rar.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\italian action sperm girls .zip.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\canadian horse [free] hole balls (Karin).avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Update\Download\horse catfight femdom .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\brasilian porn fucking girls hole lady (Tatjana).rar.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\beast lesbian .rar.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft\Temp\russian animal gay [bangbus] shoes .avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\brasilian cum fucking voyeur .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\Templates\indian handjob lingerie catfight .avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\lesbian hot (!) .rar.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\danish cumshot sperm girls boots .avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Shared Gadgets\danish animal lesbian licking shoes (Kathrin,Liz).zip.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\blowjob catfight feet swallow .zip.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Google\Temp\indian cumshot lingerie sleeping (Curtney).rar.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\horse big .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Drops file in Windows directory 8 IoCs

description	ioc	Process
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\swedish action lingerie several models (Liz).mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\assembly\temp\italian cumshot trambling hot (!) feet .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\assembly\tmp\black kicking xxx uncut glans .mpeg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\CbsTemp\gay sleeping (Janette).avi.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\mssrv.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\gay hidden cock .mpg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\russian nude sperm uncut .zip.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\japanese action beast catfight cock hairy (Karin).mpeg.exe	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
828	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
828	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1124 wrote to memory of 828	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	81
PID 1124 wrote to memory of 828	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	81
PID 1124 wrote to memory of 828	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	81
PID 828 wrote to memory of 4160	828	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	82
PID 828 wrote to memory of 4160	828	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	82
PID 828 wrote to memory of 4160	828	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	82
PID 1124 wrote to memory of 4988	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	83
PID 1124 wrote to memory of 4988	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	83
PID 1124 wrote to memory of 4988	1124	2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe	83

C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1124
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  - Checks computer location settings
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:828
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:4160
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4740
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:1528
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:2212
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        8⤵
        
        PID:11212
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:7784
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        8⤵
        
        PID:15532
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:10352
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:14512
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:8848
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:12640
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:13240
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:8696
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:12352
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:448
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:9876
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:13776
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7664
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10268
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:14444
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:540
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7816
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10360
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:14496
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:6632
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:12268
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:8712
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12276
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:1892
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:3676
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:5644
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:9900
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:13852
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7360
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:9784
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13656
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:3968
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7800
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10344
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:14256
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:6284
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13000
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:8288
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:11172
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:15560
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4504
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5752
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10436
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:14748
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7500
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:15488
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10000
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13888
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:3916
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7156
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13356
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:9628
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13480
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5992
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:11796
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8124
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10668
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:15052
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:2920
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:1864
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:4532
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:10044
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:13880
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7376
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:14452
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:9888
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13904
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:2708
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7368
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:15480
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:9720
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13632
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:6320
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:12376
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:8312
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:11256
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4188
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5904
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10916
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:15352
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7760
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10444
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14884
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:1844
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:6952
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13104
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:9156
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12732
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5976
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:11736
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7836
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10464
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:14488
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:1284
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4416
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5704
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10068
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13932
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7492
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10036
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13896
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:800
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7880
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10484
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14972
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:6056
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12056
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8104
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10572
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:15036
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:1356
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5352
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:8524
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:11492
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:6832
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13016
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8720
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12360
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:1764
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4708
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14212
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:9648
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13552
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:6048
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:11764
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:8028
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:10604
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:14980
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:4988
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:1412
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4040
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:1400
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        7⤵
        
        PID:11728
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:7996
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:10332
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:14404
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5448
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:9636
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13544
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7056
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13416
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:9296
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13080
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:2964
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5920
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:11584
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7768
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10400
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14604
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5192
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7828
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10368
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14504
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:6708
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12368
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8680
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12284
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:3444
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:1768
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5944
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:11708
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7808
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10476
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14876
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5388
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:9368
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13188
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:6824
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13096
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8872
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12580
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:4908
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5824
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10412
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14740
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7508
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10016
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13860
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:440
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7164
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14192
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:9668
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13640
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:6312
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:11988
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:8324
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:8640
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:4144
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:4624
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:4492
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:5984
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:11056
      - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        6⤵
        
        PID:13216
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:7964
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10596
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:14988
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5436
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:9356
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13088
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:6848
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13008
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8732
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12344
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:4824
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5964
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:10980
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12868
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:8112
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10660
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:15044
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:5200
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7652
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:15540
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10172
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:14184
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:6616
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12444
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:8688
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:12524
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:3856
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:4176
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:5928
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:12064
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7776
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:15524
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:10312
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:14460
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:2244
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:7120
    - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
        5⤵
        
        PID:13940
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:9520
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13332
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:6424
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:12096
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:8332
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:11248
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:3432
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:5612
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:9512
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13348
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:212
  - - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
      4⤵
      PID:13624
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:9656
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:13560
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:2060
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:7404
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:10008
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:13872
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:6116
- - C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
    3⤵
    PID:11996
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:8084
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:10564
- C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\2d94b8733e94bafd749283a0b004972440aa87d15129287a8f48f472661bfc14_NeikiAnalytics.exe"
  2⤵
  PID:14996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese porn gay masturbation 50+ .mpeg.exe

Filesize
1.9MB

MD5
8def2d895261e0735534c4b6267e326b

SHA1
03e1bcc8e719b329da17b2ad84cdf34667b5a6e9

SHA256
f8301e81c6a9a1f2232eaa32e67d09484f6b427f657c8c1fad993a4fc442a67f

SHA512
a7a741f9bd46b6352d8346cdd46dd697fc043185fe9d9c5f0529662b2cf554f3e291b76c7d1620cdbd1ceadd85a270b902dce9428c8452cfe17215fcd3b9df9e

Download Submit