Analysis
-
max time kernel
133s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11-05-2024 12:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll
Resource
win7-20240419-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll
-
Size
1KB
-
MD5
025bcca4bb3607ff1f002bd305c58060
-
SHA1
b263881bc036cd635dfaba659c22f7b3aef28118
-
SHA256
92f8e587019945cec35aa14031858234a5a9c7a23e61aad1cf0bb52c24c2bfe7
-
SHA512
ff9680cb5f27f142e43c2b5a1e5674400acafc8ce377f697042fceed44c284dd88856441516d413977a48b190f16d66420f1bdcfa6d2cb7046380ad39013e861
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1224 wrote to memory of 2920 1224 rundll32.exe 83 PID 1224 wrote to memory of 2920 1224 rundll32.exe 83 PID 1224 wrote to memory of 2920 1224 rundll32.exe 83 PID 2920 wrote to memory of 1036 2920 rundll32.exe 84 PID 2920 wrote to memory of 1036 2920 rundll32.exe 84 PID 2920 wrote to memory of 1036 2920 rundll32.exe 84 PID 1036 wrote to memory of 2324 1036 rundll32.exe 85 PID 1036 wrote to memory of 2324 1036 rundll32.exe 85 PID 1036 wrote to memory of 2324 1036 rundll32.exe 85 PID 2324 wrote to memory of 924 2324 rundll32.exe 86 PID 2324 wrote to memory of 924 2324 rundll32.exe 86 PID 2324 wrote to memory of 924 2324 rundll32.exe 86 PID 924 wrote to memory of 4976 924 rundll32.exe 87 PID 924 wrote to memory of 4976 924 rundll32.exe 87 PID 924 wrote to memory of 4976 924 rundll32.exe 87 PID 4976 wrote to memory of 4868 4976 rundll32.exe 88 PID 4976 wrote to memory of 4868 4976 rundll32.exe 88 PID 4976 wrote to memory of 4868 4976 rundll32.exe 88 PID 4868 wrote to memory of 1192 4868 rundll32.exe 89 PID 4868 wrote to memory of 1192 4868 rundll32.exe 89 PID 4868 wrote to memory of 1192 4868 rundll32.exe 89 PID 1192 wrote to memory of 2952 1192 rundll32.exe 90 PID 1192 wrote to memory of 2952 1192 rundll32.exe 90 PID 1192 wrote to memory of 2952 1192 rundll32.exe 90 PID 2952 wrote to memory of 888 2952 rundll32.exe 91 PID 2952 wrote to memory of 888 2952 rundll32.exe 91 PID 2952 wrote to memory of 888 2952 rundll32.exe 91 PID 888 wrote to memory of 1424 888 rundll32.exe 92 PID 888 wrote to memory of 1424 888 rundll32.exe 92 PID 888 wrote to memory of 1424 888 rundll32.exe 92 PID 1424 wrote to memory of 3344 1424 rundll32.exe 93 PID 1424 wrote to memory of 3344 1424 rundll32.exe 93 PID 1424 wrote to memory of 3344 1424 rundll32.exe 93 PID 3344 wrote to memory of 1564 3344 rundll32.exe 94 PID 3344 wrote to memory of 1564 3344 rundll32.exe 94 PID 3344 wrote to memory of 1564 3344 rundll32.exe 94 PID 1564 wrote to memory of 4612 1564 rundll32.exe 95 PID 1564 wrote to memory of 4612 1564 rundll32.exe 95 PID 1564 wrote to memory of 4612 1564 rundll32.exe 95 PID 4612 wrote to memory of 720 4612 rundll32.exe 96 PID 4612 wrote to memory of 720 4612 rundll32.exe 96 PID 4612 wrote to memory of 720 4612 rundll32.exe 96 PID 720 wrote to memory of 1068 720 rundll32.exe 97 PID 720 wrote to memory of 1068 720 rundll32.exe 97 PID 720 wrote to memory of 1068 720 rundll32.exe 97 PID 1068 wrote to memory of 1836 1068 rundll32.exe 98 PID 1068 wrote to memory of 1836 1068 rundll32.exe 98 PID 1068 wrote to memory of 1836 1068 rundll32.exe 98 PID 1836 wrote to memory of 5044 1836 rundll32.exe 99 PID 1836 wrote to memory of 5044 1836 rundll32.exe 99 PID 1836 wrote to memory of 5044 1836 rundll32.exe 99 PID 5044 wrote to memory of 3912 5044 rundll32.exe 100 PID 5044 wrote to memory of 3912 5044 rundll32.exe 100 PID 5044 wrote to memory of 3912 5044 rundll32.exe 100 PID 3912 wrote to memory of 2660 3912 rundll32.exe 101 PID 3912 wrote to memory of 2660 3912 rundll32.exe 101 PID 3912 wrote to memory of 2660 3912 rundll32.exe 101 PID 2660 wrote to memory of 5088 2660 rundll32.exe 102 PID 2660 wrote to memory of 5088 2660 rundll32.exe 102 PID 2660 wrote to memory of 5088 2660 rundll32.exe 102 PID 5088 wrote to memory of 3272 5088 rundll32.exe 103 PID 5088 wrote to memory of 3272 5088 rundll32.exe 103 PID 5088 wrote to memory of 3272 5088 rundll32.exe 103 PID 3272 wrote to memory of 3436 3272 rundll32.exe 104
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1224 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:2920 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:1036 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:2324 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:924 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:4976 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:4868 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:1192 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:2952 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:888 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:1424 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:3344 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:1564 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:4612 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:720 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:1068 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:1836 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:5044 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:3912 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:2660 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:5088 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:3272 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#123⤵PID:3436
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#124⤵PID:4300
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#125⤵PID:3772
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#126⤵PID:4056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#127⤵PID:4688
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#128⤵PID:1180
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#129⤵PID:2012
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#130⤵PID:3960
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#131⤵PID:4532
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#132⤵PID:2220
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#133⤵PID:4476
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#134⤵PID:4384
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#135⤵PID:4992
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#136⤵PID:64
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#137⤵PID:916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#138⤵PID:4552
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#139⤵PID:2408
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#140⤵PID:2748
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#141⤵PID:4132
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#142⤵PID:4156
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#143⤵PID:4460
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#144⤵PID:1092
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#145⤵PID:4400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#146⤵PID:4036
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#147⤵PID:1380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#148⤵PID:2252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#149⤵PID:2684
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#150⤵PID:2944
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#151⤵PID:1976
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#152⤵PID:5056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#153⤵PID:3192
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#154⤵PID:2336
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#155⤵PID:1676
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#156⤵PID:3164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#157⤵PID:1704
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#158⤵PID:812
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#159⤵PID:3584
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#160⤵PID:3352
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#161⤵PID:1968
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#162⤵PID:3356
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#163⤵PID:1416
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#164⤵PID:4008
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#165⤵PID:3456
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#166⤵PID:3712
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#167⤵PID:1584
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#168⤵PID:4220
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#169⤵PID:3180
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#170⤵PID:1196
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#171⤵PID:3172
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#172⤵PID:3868
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#173⤵PID:2500
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#174⤵PID:2372
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#175⤵PID:5092
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#176⤵PID:4852
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#177⤵PID:2452
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#178⤵PID:1520
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#179⤵PID:712
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#180⤵PID:2496
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#181⤵PID:4380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#182⤵PID:3236
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#183⤵PID:1280
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#184⤵PID:4128
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#185⤵PID:4368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#186⤵PID:4940
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#187⤵PID:3012
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#188⤵PID:4012
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#189⤵PID:4396
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#190⤵PID:1252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#191⤵PID:2780
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#192⤵PID:996
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#193⤵PID:4276
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#194⤵PID:4180
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#195⤵PID:5132
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#196⤵PID:5144
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#197⤵PID:5164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#198⤵PID:5176
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#199⤵PID:5196
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1100⤵PID:5208
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1101⤵PID:5232
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1102⤵PID:5248
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1103⤵PID:5272
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1104⤵PID:5288
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1105⤵PID:5304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1106⤵PID:5324
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1107⤵PID:5340
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1108⤵PID:5352
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1109⤵PID:5368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1110⤵PID:5392
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1111⤵PID:5412
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1112⤵PID:5428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1113⤵PID:5444
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1114⤵PID:5460
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1115⤵PID:5476
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1116⤵PID:5488
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1117⤵PID:5504
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1118⤵PID:5520
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1119⤵PID:5536
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1120⤵PID:5548
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1121⤵PID:5560
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\025bcca4bb3607ff1f002bd305c58060_NeikiAnalytics.dll,#1122⤵PID:5576
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-