Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26-05-2024 22:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll
-
Size
23KB
-
MD5
0a2f2a904eff14c196ddc6a26c63eea0
-
SHA1
fe3d0dc9dc2c9ea56daf9d59102a4c3d834bef3f
-
SHA256
83b71fee3b40c6dd3825bc6cd826b20866c300ec1120694e1d66b60d1d41a37d
-
SHA512
0cbe8440205cab6b81dd9d8eb1b93d08b99876c270a62d15beb9b61e2ad792a610e38fa886c306e1ecbc0076f1747d90e781fec6892a099d2ed2c5e3c4aa6ec6
-
SSDEEP
384:Iq5fF9uLUzO6cHDo7UnWziLs8og3MUh8/jiS7nwqkCoTbsGxVVMSvZR0Ja0:XhvuLAc4UWeLsy3M1jiSUCoPsGzVMSvM
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2936 wrote to memory of 388 2936 rundll32.exe 82 PID 2936 wrote to memory of 388 2936 rundll32.exe 82 PID 2936 wrote to memory of 388 2936 rundll32.exe 82 PID 388 wrote to memory of 964 388 rundll32.exe 83 PID 388 wrote to memory of 964 388 rundll32.exe 83 PID 388 wrote to memory of 964 388 rundll32.exe 83 PID 964 wrote to memory of 2216 964 rundll32.exe 84 PID 964 wrote to memory of 2216 964 rundll32.exe 84 PID 964 wrote to memory of 2216 964 rundll32.exe 84 PID 2216 wrote to memory of 996 2216 rundll32.exe 85 PID 2216 wrote to memory of 996 2216 rundll32.exe 85 PID 2216 wrote to memory of 996 2216 rundll32.exe 85 PID 996 wrote to memory of 4768 996 rundll32.exe 86 PID 996 wrote to memory of 4768 996 rundll32.exe 86 PID 996 wrote to memory of 4768 996 rundll32.exe 86 PID 4768 wrote to memory of 1868 4768 rundll32.exe 87 PID 4768 wrote to memory of 1868 4768 rundll32.exe 87 PID 4768 wrote to memory of 1868 4768 rundll32.exe 87 PID 1868 wrote to memory of 2404 1868 rundll32.exe 88 PID 1868 wrote to memory of 2404 1868 rundll32.exe 88 PID 1868 wrote to memory of 2404 1868 rundll32.exe 88 PID 2404 wrote to memory of 3668 2404 rundll32.exe 89 PID 2404 wrote to memory of 3668 2404 rundll32.exe 89 PID 2404 wrote to memory of 3668 2404 rundll32.exe 89 PID 3668 wrote to memory of 3556 3668 rundll32.exe 90 PID 3668 wrote to memory of 3556 3668 rundll32.exe 90 PID 3668 wrote to memory of 3556 3668 rundll32.exe 90 PID 3556 wrote to memory of 4708 3556 rundll32.exe 91 PID 3556 wrote to memory of 4708 3556 rundll32.exe 91 PID 3556 wrote to memory of 4708 3556 rundll32.exe 91 PID 4708 wrote to memory of 2240 4708 rundll32.exe 92 PID 4708 wrote to memory of 2240 4708 rundll32.exe 92 PID 4708 wrote to memory of 2240 4708 rundll32.exe 92 PID 2240 wrote to memory of 1820 2240 rundll32.exe 93 PID 2240 wrote to memory of 1820 2240 rundll32.exe 93 PID 2240 wrote to memory of 1820 2240 rundll32.exe 93 PID 1820 wrote to memory of 3832 1820 rundll32.exe 94 PID 1820 wrote to memory of 3832 1820 rundll32.exe 94 PID 1820 wrote to memory of 3832 1820 rundll32.exe 94 PID 3832 wrote to memory of 428 3832 rundll32.exe 95 PID 3832 wrote to memory of 428 3832 rundll32.exe 95 PID 3832 wrote to memory of 428 3832 rundll32.exe 95 PID 428 wrote to memory of 440 428 rundll32.exe 96 PID 428 wrote to memory of 440 428 rundll32.exe 96 PID 428 wrote to memory of 440 428 rundll32.exe 96 PID 440 wrote to memory of 3344 440 rundll32.exe 97 PID 440 wrote to memory of 3344 440 rundll32.exe 97 PID 440 wrote to memory of 3344 440 rundll32.exe 97 PID 3344 wrote to memory of 3032 3344 rundll32.exe 98 PID 3344 wrote to memory of 3032 3344 rundll32.exe 98 PID 3344 wrote to memory of 3032 3344 rundll32.exe 98 PID 3032 wrote to memory of 1308 3032 rundll32.exe 99 PID 3032 wrote to memory of 1308 3032 rundll32.exe 99 PID 3032 wrote to memory of 1308 3032 rundll32.exe 99 PID 1308 wrote to memory of 2156 1308 rundll32.exe 100 PID 1308 wrote to memory of 2156 1308 rundll32.exe 100 PID 1308 wrote to memory of 2156 1308 rundll32.exe 100 PID 2156 wrote to memory of 4060 2156 rundll32.exe 101 PID 2156 wrote to memory of 4060 2156 rundll32.exe 101 PID 2156 wrote to memory of 4060 2156 rundll32.exe 101 PID 4060 wrote to memory of 4028 4060 rundll32.exe 102 PID 4060 wrote to memory of 4028 4060 rundll32.exe 102 PID 4060 wrote to memory of 4028 4060 rundll32.exe 102 PID 4028 wrote to memory of 2140 4028 rundll32.exe 103
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2936 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:388 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:964 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:2216 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:996 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:4768 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:1868 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:3668 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:3556 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:4708 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:1820 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:3832 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:428 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:440 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:3344 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:3032 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:1308 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:2156 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:4060 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:4028 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#123⤵PID:2140
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#124⤵PID:3692
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#125⤵PID:3384
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#126⤵PID:3956
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#127⤵PID:3380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#128⤵PID:4756
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#129⤵PID:4692
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#130⤵PID:1984
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#131⤵PID:4736
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#132⤵PID:804
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#133⤵PID:4684
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#134⤵PID:1828
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#135⤵PID:620
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#136⤵PID:2852
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#137⤵PID:4228
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#138⤵PID:4856
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#139⤵PID:3968
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#140⤵PID:1332
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#141⤵PID:1616
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#142⤵PID:4576
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#143⤵PID:3576
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#144⤵PID:1440
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#145⤵PID:1664
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#146⤵PID:3356
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#147⤵PID:3684
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#148⤵PID:4480
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#149⤵PID:4052
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#150⤵PID:3368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#151⤵PID:2644
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#152⤵PID:1380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#153⤵PID:384
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#154⤵PID:1764
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#155⤵PID:4472
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#156⤵PID:4628
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#157⤵PID:4500
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#158⤵PID:1728
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#159⤵PID:4732
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#160⤵PID:2732
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#161⤵PID:3916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#162⤵PID:464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#163⤵PID:1628
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#164⤵PID:3496
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#165⤵PID:2572
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#166⤵PID:3396
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#167⤵PID:1840
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#168⤵PID:968
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#169⤵PID:5008
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#170⤵PID:3620
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#171⤵PID:376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#172⤵PID:5056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#173⤵PID:1432
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#174⤵PID:4568
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#175⤵PID:4700
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#176⤵PID:564
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#177⤵PID:3172
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#178⤵PID:4924
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#179⤵PID:2688
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#180⤵PID:5068
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#181⤵PID:3660
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#182⤵PID:4612
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#183⤵PID:2880
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#184⤵PID:2872
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#185⤵PID:4000
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#186⤵PID:1448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#187⤵PID:4436
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#188⤵PID:3980
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#189⤵PID:4424
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#190⤵PID:4428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#191⤵PID:2472
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#192⤵PID:1452
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#193⤵PID:1012
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#194⤵PID:3696
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#195⤵PID:2040
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#196⤵PID:4844
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#197⤵PID:1852
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#198⤵PID:328
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#199⤵PID:5136
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1100⤵PID:5152
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1101⤵PID:5164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1102⤵PID:5188
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1103⤵PID:5200
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1104⤵PID:5220
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1105⤵PID:5244
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1106⤵PID:5276
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1107⤵PID:5312
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1108⤵PID:5324
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1109⤵PID:5344
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1110⤵PID:5360
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1111⤵PID:5376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1112⤵PID:5392
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1113⤵PID:5404
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1114⤵PID:5424
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1115⤵PID:5436
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1116⤵PID:5448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1117⤵PID:5464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1118⤵PID:5484
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1119⤵PID:5500
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1120⤵PID:5516
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1121⤵PID:5532
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0a2f2a904eff14c196ddc6a26c63eea0_NeikiAnalytics.dll,#1122⤵PID:5548
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-