Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 01:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll
Resource
win7-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll
-
Size
24KB
-
MD5
5de89cdf224d32d9c5842240786b04d0
-
SHA1
dba07a5432baa1908f960098ca0e7e0b6666b1f1
-
SHA256
564c2dd4d44cb833822a3bff636f9b4d28c7b68bd7fcf724a21b7d2727f1f917
-
SHA512
c015ea2da78bd7143a0e0b307080cd8a14dc4ec23bd42df912c360692aaeeee100b98b7ea189eaee2f6a6422f70a31d8a6304ce204a124b3664370d5dae2198d
-
SSDEEP
768:uA/cyLiT4/YRtavXaFJvJPMIG79Xdc+4nS:uAs4yiwJvJUd79u+4nS
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3572 wrote to memory of 2124 3572 rundll32.exe 83 PID 3572 wrote to memory of 2124 3572 rundll32.exe 83 PID 3572 wrote to memory of 2124 3572 rundll32.exe 83 PID 2124 wrote to memory of 4308 2124 rundll32.exe 84 PID 2124 wrote to memory of 4308 2124 rundll32.exe 84 PID 2124 wrote to memory of 4308 2124 rundll32.exe 84 PID 4308 wrote to memory of 2716 4308 rundll32.exe 85 PID 4308 wrote to memory of 2716 4308 rundll32.exe 85 PID 4308 wrote to memory of 2716 4308 rundll32.exe 85 PID 2716 wrote to memory of 764 2716 rundll32.exe 86 PID 2716 wrote to memory of 764 2716 rundll32.exe 86 PID 2716 wrote to memory of 764 2716 rundll32.exe 86 PID 764 wrote to memory of 3532 764 rundll32.exe 87 PID 764 wrote to memory of 3532 764 rundll32.exe 87 PID 764 wrote to memory of 3532 764 rundll32.exe 87 PID 3532 wrote to memory of 1856 3532 rundll32.exe 88 PID 3532 wrote to memory of 1856 3532 rundll32.exe 88 PID 3532 wrote to memory of 1856 3532 rundll32.exe 88 PID 1856 wrote to memory of 440 1856 rundll32.exe 89 PID 1856 wrote to memory of 440 1856 rundll32.exe 89 PID 1856 wrote to memory of 440 1856 rundll32.exe 89 PID 440 wrote to memory of 2220 440 rundll32.exe 90 PID 440 wrote to memory of 2220 440 rundll32.exe 90 PID 440 wrote to memory of 2220 440 rundll32.exe 90 PID 2220 wrote to memory of 3084 2220 rundll32.exe 91 PID 2220 wrote to memory of 3084 2220 rundll32.exe 91 PID 2220 wrote to memory of 3084 2220 rundll32.exe 91 PID 3084 wrote to memory of 3232 3084 rundll32.exe 92 PID 3084 wrote to memory of 3232 3084 rundll32.exe 92 PID 3084 wrote to memory of 3232 3084 rundll32.exe 92 PID 3232 wrote to memory of 1004 3232 rundll32.exe 93 PID 3232 wrote to memory of 1004 3232 rundll32.exe 93 PID 3232 wrote to memory of 1004 3232 rundll32.exe 93 PID 1004 wrote to memory of 3212 1004 rundll32.exe 94 PID 1004 wrote to memory of 3212 1004 rundll32.exe 94 PID 1004 wrote to memory of 3212 1004 rundll32.exe 94 PID 3212 wrote to memory of 2748 3212 rundll32.exe 95 PID 3212 wrote to memory of 2748 3212 rundll32.exe 95 PID 3212 wrote to memory of 2748 3212 rundll32.exe 95 PID 2748 wrote to memory of 3508 2748 rundll32.exe 96 PID 2748 wrote to memory of 3508 2748 rundll32.exe 96 PID 2748 wrote to memory of 3508 2748 rundll32.exe 96 PID 3508 wrote to memory of 1832 3508 rundll32.exe 97 PID 3508 wrote to memory of 1832 3508 rundll32.exe 97 PID 3508 wrote to memory of 1832 3508 rundll32.exe 97 PID 1832 wrote to memory of 3168 1832 rundll32.exe 98 PID 1832 wrote to memory of 3168 1832 rundll32.exe 98 PID 1832 wrote to memory of 3168 1832 rundll32.exe 98 PID 3168 wrote to memory of 4428 3168 rundll32.exe 99 PID 3168 wrote to memory of 4428 3168 rundll32.exe 99 PID 3168 wrote to memory of 4428 3168 rundll32.exe 99 PID 4428 wrote to memory of 5040 4428 rundll32.exe 100 PID 4428 wrote to memory of 5040 4428 rundll32.exe 100 PID 4428 wrote to memory of 5040 4428 rundll32.exe 100 PID 5040 wrote to memory of 4568 5040 rundll32.exe 101 PID 5040 wrote to memory of 4568 5040 rundll32.exe 101 PID 5040 wrote to memory of 4568 5040 rundll32.exe 101 PID 4568 wrote to memory of 2440 4568 rundll32.exe 102 PID 4568 wrote to memory of 2440 4568 rundll32.exe 102 PID 4568 wrote to memory of 2440 4568 rundll32.exe 102 PID 2440 wrote to memory of 2704 2440 rundll32.exe 103 PID 2440 wrote to memory of 2704 2440 rundll32.exe 103 PID 2440 wrote to memory of 2704 2440 rundll32.exe 103 PID 2704 wrote to memory of 4016 2704 rundll32.exe 104
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3572 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:2124 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:4308 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:2716 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:764 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:3532 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:1856 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:440 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:2220 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:3084 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:3232 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:1004 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:3212 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:2748 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:3508 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:1832 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:3168 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:4428 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:5040 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:4568 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:2440 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:2704 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#123⤵PID:4016
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#124⤵PID:1668
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#125⤵PID:4656
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#126⤵PID:4932
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#127⤵PID:2292
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#128⤵PID:1904
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#129⤵PID:2104
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#130⤵PID:1336
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#131⤵PID:1624
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#132⤵PID:4100
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#133⤵PID:1040
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#134⤵PID:428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#135⤵PID:3520
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#136⤵PID:1604
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#137⤵PID:4248
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#138⤵PID:3236
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#139⤵PID:3344
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#140⤵PID:1440
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#141⤵PID:3208
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#142⤵PID:828
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#143⤵PID:1844
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#144⤵PID:2460
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#145⤵PID:4340
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#146⤵PID:4412
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#147⤵PID:4728
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#148⤵PID:3124
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#149⤵PID:4592
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#150⤵PID:3288
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#151⤵PID:3732
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#152⤵PID:2428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#153⤵PID:4128
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#154⤵PID:1368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#155⤵PID:1156
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#156⤵PID:1056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#157⤵PID:3164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#158⤵PID:1084
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#159⤵PID:5100
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#160⤵PID:2400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#161⤵PID:4460
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#162⤵PID:1916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#163⤵PID:2244
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#164⤵PID:5088
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#165⤵PID:2980
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#166⤵PID:2176
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#167⤵PID:3652
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#168⤵PID:2956
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#169⤵PID:3536
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#170⤵PID:944
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#171⤵PID:1948
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#172⤵PID:4408
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#173⤵PID:4024
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#174⤵PID:2804
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#175⤵PID:4564
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#176⤵PID:4280
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#177⤵PID:4264
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#178⤵PID:1212
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#179⤵PID:4600
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#180⤵PID:3868
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#181⤵PID:2668
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#182⤵PID:3768
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#183⤵PID:2336
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#184⤵PID:1928
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#185⤵PID:4400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#186⤵PID:5076
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#187⤵PID:3256
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#188⤵PID:1376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#189⤵PID:4756
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#190⤵PID:1396
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#191⤵PID:4240
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#192⤵PID:700
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#193⤵PID:4212
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#194⤵PID:2348
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#195⤵PID:4884
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#196⤵PID:5148
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#197⤵PID:5164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#198⤵PID:5184
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#199⤵PID:5200
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1100⤵PID:5220
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1101⤵PID:5236
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1102⤵PID:5252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1103⤵PID:5268
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1104⤵PID:5292
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1105⤵PID:5304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1106⤵PID:5324
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1107⤵PID:5336
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1108⤵PID:5352
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1109⤵PID:5368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1110⤵PID:5380
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1111⤵PID:5400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1112⤵PID:5416
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1113⤵PID:5428
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1114⤵PID:5444
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1115⤵PID:5464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1116⤵PID:5480
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1117⤵PID:5496
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1118⤵PID:5508
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1119⤵PID:5532
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1120⤵PID:5552
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1121⤵PID:5568
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5de89cdf224d32d9c5842240786b04d0_NeikiAnalytics.dll,#1122⤵PID:5588
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-