Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 04:24
Static task
static1
Behavioral task
behavioral1
Sample
d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll
-
Size
286KB
-
MD5
d51702536b115c07e999f9dc5320f8d0
-
SHA1
f46c27ea7dcf618242813bea1bd548006c7b467f
-
SHA256
60ba177470e6365872e5df8f16e256f3da663483af47fcad51e5411e15e17250
-
SHA512
3f56aec943e57035a25953ecffcf7f2ff27a23adf03309f67a6426778654b2bf8d062d25a427cba7433186cb2a0281cccf331e0fe156d9ff2347e6ca6de9ff59
-
SSDEEP
6144:ikDexVLfobSKre51uYRr9L6Jj/s/HEIy5C0Hw/Y8rizC2UX4iMSt+orFdPT917Ht:vDexVJSmAcw+22WkUZbLEnUA1DlhS0B1
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 956 wrote to memory of 3144 956 rundll32.exe 91 PID 956 wrote to memory of 3144 956 rundll32.exe 91 PID 956 wrote to memory of 3144 956 rundll32.exe 91 PID 3144 wrote to memory of 4684 3144 rundll32.exe 92 PID 3144 wrote to memory of 4684 3144 rundll32.exe 92 PID 3144 wrote to memory of 4684 3144 rundll32.exe 92 PID 4684 wrote to memory of 1884 4684 rundll32.exe 93 PID 4684 wrote to memory of 1884 4684 rundll32.exe 93 PID 4684 wrote to memory of 1884 4684 rundll32.exe 93 PID 1884 wrote to memory of 2312 1884 rundll32.exe 94 PID 1884 wrote to memory of 2312 1884 rundll32.exe 94 PID 1884 wrote to memory of 2312 1884 rundll32.exe 94 PID 2312 wrote to memory of 332 2312 rundll32.exe 95 PID 2312 wrote to memory of 332 2312 rundll32.exe 95 PID 2312 wrote to memory of 332 2312 rundll32.exe 95 PID 332 wrote to memory of 5076 332 rundll32.exe 96 PID 332 wrote to memory of 5076 332 rundll32.exe 96 PID 332 wrote to memory of 5076 332 rundll32.exe 96 PID 5076 wrote to memory of 3716 5076 rundll32.exe 97 PID 5076 wrote to memory of 3716 5076 rundll32.exe 97 PID 5076 wrote to memory of 3716 5076 rundll32.exe 97 PID 3716 wrote to memory of 4512 3716 rundll32.exe 98 PID 3716 wrote to memory of 4512 3716 rundll32.exe 98 PID 3716 wrote to memory of 4512 3716 rundll32.exe 98 PID 4512 wrote to memory of 3364 4512 rundll32.exe 99 PID 4512 wrote to memory of 3364 4512 rundll32.exe 99 PID 4512 wrote to memory of 3364 4512 rundll32.exe 99 PID 3364 wrote to memory of 3776 3364 rundll32.exe 100 PID 3364 wrote to memory of 3776 3364 rundll32.exe 100 PID 3364 wrote to memory of 3776 3364 rundll32.exe 100 PID 3776 wrote to memory of 2704 3776 rundll32.exe 101 PID 3776 wrote to memory of 2704 3776 rundll32.exe 101 PID 3776 wrote to memory of 2704 3776 rundll32.exe 101 PID 2704 wrote to memory of 4360 2704 rundll32.exe 102 PID 2704 wrote to memory of 4360 2704 rundll32.exe 102 PID 2704 wrote to memory of 4360 2704 rundll32.exe 102 PID 4360 wrote to memory of 3220 4360 rundll32.exe 103 PID 4360 wrote to memory of 3220 4360 rundll32.exe 103 PID 4360 wrote to memory of 3220 4360 rundll32.exe 103 PID 3220 wrote to memory of 4600 3220 rundll32.exe 104 PID 3220 wrote to memory of 4600 3220 rundll32.exe 104 PID 3220 wrote to memory of 4600 3220 rundll32.exe 104 PID 4600 wrote to memory of 2096 4600 rundll32.exe 105 PID 4600 wrote to memory of 2096 4600 rundll32.exe 105 PID 4600 wrote to memory of 2096 4600 rundll32.exe 105 PID 2096 wrote to memory of 4460 2096 rundll32.exe 107 PID 2096 wrote to memory of 4460 2096 rundll32.exe 107 PID 2096 wrote to memory of 4460 2096 rundll32.exe 107 PID 4460 wrote to memory of 3172 4460 rundll32.exe 108 PID 4460 wrote to memory of 3172 4460 rundll32.exe 108 PID 4460 wrote to memory of 3172 4460 rundll32.exe 108 PID 3172 wrote to memory of 1736 3172 rundll32.exe 109 PID 3172 wrote to memory of 1736 3172 rundll32.exe 109 PID 3172 wrote to memory of 1736 3172 rundll32.exe 109 PID 1736 wrote to memory of 728 1736 rundll32.exe 110 PID 1736 wrote to memory of 728 1736 rundll32.exe 110 PID 1736 wrote to memory of 728 1736 rundll32.exe 110 PID 728 wrote to memory of 2596 728 rundll32.exe 111 PID 728 wrote to memory of 2596 728 rundll32.exe 111 PID 728 wrote to memory of 2596 728 rundll32.exe 111 PID 2596 wrote to memory of 848 2596 rundll32.exe 112 PID 2596 wrote to memory of 848 2596 rundll32.exe 112 PID 2596 wrote to memory of 848 2596 rundll32.exe 112 PID 848 wrote to memory of 2796 848 rundll32.exe 113
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:956 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:3144 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:4684 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:1884 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:2312 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:332 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:5076 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:3716 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:4512 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:3364 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:3776 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:2704 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:4360 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:3220 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:4600 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:2096 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:4460 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:3172 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:1736 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:728 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:2596 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:848 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#123⤵PID:2796
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#124⤵PID:1792
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#125⤵PID:3036
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#126⤵PID:4016
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#127⤵PID:2088
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#128⤵PID:5044
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#129⤵PID:2792
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#130⤵PID:2536
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#131⤵PID:660
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#132⤵PID:1068
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#133⤵PID:400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#134⤵PID:4972
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#135⤵PID:3704
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#136⤵PID:3760
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#137⤵PID:4916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#138⤵PID:1060
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#139⤵PID:2984
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#140⤵PID:820
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#141⤵PID:3292
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#142⤵PID:4492
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#143⤵PID:3728
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#144⤵PID:3992
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#145⤵PID:4356
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#146⤵PID:4444
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#147⤵PID:1052
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#148⤵PID:3516
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#149⤵PID:1056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#150⤵PID:64
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#151⤵PID:408
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#152⤵PID:2676
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#153⤵PID:880
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#154⤵PID:3520
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#155⤵PID:4420
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#156⤵PID:1440
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#157⤵PID:1808
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#158⤵PID:2384
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#159⤵PID:884
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#160⤵PID:3032
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#161⤵PID:1468
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#162⤵PID:4144
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#163⤵PID:4748
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#164⤵PID:2316
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#165⤵PID:1608
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#166⤵PID:4724
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#167⤵PID:624
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#168⤵PID:3128
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#169⤵PID:4088
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#170⤵PID:2988
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#171⤵PID:1180
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#172⤵PID:2900
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#173⤵PID:980
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#174⤵PID:5136
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#175⤵PID:5152
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#176⤵PID:5168
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#177⤵PID:5188
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#178⤵PID:5200
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#179⤵PID:5216
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#180⤵PID:5248
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#181⤵PID:5272
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#182⤵PID:5288
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#183⤵PID:5304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#184⤵PID:5320
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#185⤵PID:5336
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#186⤵PID:5356
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#187⤵PID:5372
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#188⤵PID:5388
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#189⤵PID:5404
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#190⤵PID:5420
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#191⤵PID:5436
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#192⤵PID:5448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#193⤵PID:5464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#194⤵PID:5480
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#195⤵PID:5496
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#196⤵PID:5512
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#197⤵PID:5528
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#198⤵PID:5544
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#199⤵PID:5560
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1100⤵PID:5576
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1101⤵PID:5592
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1102⤵PID:5608
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1103⤵PID:5624
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1104⤵PID:5640
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1105⤵PID:5656
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1106⤵PID:5672
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1107⤵PID:5688
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1108⤵PID:5704
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1109⤵PID:5720
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1110⤵PID:5732
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1111⤵PID:5748
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1112⤵PID:5764
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1113⤵PID:5780
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1114⤵PID:5796
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1115⤵PID:5812
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1116⤵PID:5828
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1117⤵PID:5844
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1118⤵PID:5860
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1119⤵PID:5876
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1120⤵PID:5888
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1121⤵PID:5904
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d51702536b115c07e999f9dc5320f8d0_NeikiAnalytics.dll,#1122⤵PID:5920
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-