Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
01/07/2024, 06:40
Static task
static1
Behavioral task
behavioral1
Sample
3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
General
-
Target
3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll
-
Size
53KB
-
MD5
89b02e828556119b43e23161ccf51100
-
SHA1
82c89f4899d70fa3074180db86a4436751613e0b
-
SHA256
3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7
-
SHA512
b277a7cb1d0da89c652b953cf8eb192fdbf8c645a461ebe95916b1c496f1ccd33977763e2395d0534a60c03ae53a033cfa357fbe96a79d79567dfea5105728cd
-
SSDEEP
1536:/lnE32hmLJrWbpYf0/A6i2eF5KFdhldwTl:NnlhirWbqf046i2eF5K3hrwTl
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3248 wrote to memory of 4644 3248 rundll32.exe 91 PID 3248 wrote to memory of 4644 3248 rundll32.exe 91 PID 3248 wrote to memory of 4644 3248 rundll32.exe 91 PID 4644 wrote to memory of 4020 4644 rundll32.exe 92 PID 4644 wrote to memory of 4020 4644 rundll32.exe 92 PID 4644 wrote to memory of 4020 4644 rundll32.exe 92 PID 4020 wrote to memory of 3336 4020 rundll32.exe 93 PID 4020 wrote to memory of 3336 4020 rundll32.exe 93 PID 4020 wrote to memory of 3336 4020 rundll32.exe 93 PID 3336 wrote to memory of 4084 3336 rundll32.exe 94 PID 3336 wrote to memory of 4084 3336 rundll32.exe 94 PID 3336 wrote to memory of 4084 3336 rundll32.exe 94 PID 4084 wrote to memory of 2592 4084 rundll32.exe 95 PID 4084 wrote to memory of 2592 4084 rundll32.exe 95 PID 4084 wrote to memory of 2592 4084 rundll32.exe 95 PID 2592 wrote to memory of 2724 2592 rundll32.exe 96 PID 2592 wrote to memory of 2724 2592 rundll32.exe 96 PID 2592 wrote to memory of 2724 2592 rundll32.exe 96 PID 2724 wrote to memory of 3804 2724 rundll32.exe 97 PID 2724 wrote to memory of 3804 2724 rundll32.exe 97 PID 2724 wrote to memory of 3804 2724 rundll32.exe 97 PID 3804 wrote to memory of 5060 3804 rundll32.exe 98 PID 3804 wrote to memory of 5060 3804 rundll32.exe 98 PID 3804 wrote to memory of 5060 3804 rundll32.exe 98 PID 5060 wrote to memory of 4120 5060 rundll32.exe 99 PID 5060 wrote to memory of 4120 5060 rundll32.exe 99 PID 5060 wrote to memory of 4120 5060 rundll32.exe 99 PID 4120 wrote to memory of 3400 4120 rundll32.exe 100 PID 4120 wrote to memory of 3400 4120 rundll32.exe 100 PID 4120 wrote to memory of 3400 4120 rundll32.exe 100 PID 3400 wrote to memory of 1848 3400 rundll32.exe 101 PID 3400 wrote to memory of 1848 3400 rundll32.exe 101 PID 3400 wrote to memory of 1848 3400 rundll32.exe 101 PID 1848 wrote to memory of 2160 1848 rundll32.exe 102 PID 1848 wrote to memory of 2160 1848 rundll32.exe 102 PID 1848 wrote to memory of 2160 1848 rundll32.exe 102 PID 2160 wrote to memory of 2896 2160 rundll32.exe 103 PID 2160 wrote to memory of 2896 2160 rundll32.exe 103 PID 2160 wrote to memory of 2896 2160 rundll32.exe 103 PID 2896 wrote to memory of 2172 2896 rundll32.exe 104 PID 2896 wrote to memory of 2172 2896 rundll32.exe 104 PID 2896 wrote to memory of 2172 2896 rundll32.exe 104 PID 2172 wrote to memory of 4432 2172 rundll32.exe 105 PID 2172 wrote to memory of 4432 2172 rundll32.exe 105 PID 2172 wrote to memory of 4432 2172 rundll32.exe 105 PID 4432 wrote to memory of 3060 4432 rundll32.exe 106 PID 4432 wrote to memory of 3060 4432 rundll32.exe 106 PID 4432 wrote to memory of 3060 4432 rundll32.exe 106 PID 3060 wrote to memory of 224 3060 rundll32.exe 107 PID 3060 wrote to memory of 224 3060 rundll32.exe 107 PID 3060 wrote to memory of 224 3060 rundll32.exe 107 PID 224 wrote to memory of 2260 224 rundll32.exe 108 PID 224 wrote to memory of 2260 224 rundll32.exe 108 PID 224 wrote to memory of 2260 224 rundll32.exe 108 PID 2260 wrote to memory of 3512 2260 rundll32.exe 109 PID 2260 wrote to memory of 3512 2260 rundll32.exe 109 PID 2260 wrote to memory of 3512 2260 rundll32.exe 109 PID 3512 wrote to memory of 4936 3512 rundll32.exe 110 PID 3512 wrote to memory of 4936 3512 rundll32.exe 110 PID 3512 wrote to memory of 4936 3512 rundll32.exe 110 PID 4936 wrote to memory of 3712 4936 rundll32.exe 111 PID 4936 wrote to memory of 3712 4936 rundll32.exe 111 PID 4936 wrote to memory of 3712 4936 rundll32.exe 111 PID 3712 wrote to memory of 4148 3712 rundll32.exe 112
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:3248 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:4644 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:4020 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:3336 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:4084 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:2592 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:2724 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:3804 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:5060 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:4120 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#111⤵
- Suspicious use of WriteProcessMemory
PID:3400 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:1848 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:2160 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:2896 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:2172 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:4432 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:3060 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:224 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:2260 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:3512 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:4936 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:3712 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#123⤵PID:4148
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#124⤵PID:4204
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#125⤵PID:3424
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#126⤵PID:824
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#127⤵PID:740
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#128⤵PID:4712
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#129⤵PID:4812
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#130⤵PID:1156
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#131⤵PID:3544
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#132⤵PID:3828
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#133⤵PID:1612
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#134⤵PID:1600
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#135⤵PID:1492
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#136⤵PID:2184
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#137⤵PID:1112
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#138⤵PID:1392
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#139⤵PID:4996
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#140⤵PID:4012
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#141⤵PID:3092
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#142⤵PID:2128
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#143⤵PID:1768
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#144⤵PID:2236
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#145⤵PID:3448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#146⤵PID:1756
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#147⤵PID:1196
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#148⤵PID:2364
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#149⤵PID:1448
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#150⤵PID:1704
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#151⤵PID:1808
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#152⤵PID:3664
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#153⤵PID:608
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#154⤵PID:2560
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#155⤵PID:2640
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#156⤵PID:4900
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#157⤵PID:4440
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#158⤵PID:3348
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#159⤵PID:1992
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#160⤵PID:5000
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#161⤵PID:1516
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#162⤵PID:4700
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#163⤵PID:5024
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#164⤵PID:1376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#165⤵PID:4684
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#166⤵PID:3464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#167⤵PID:2108
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#168⤵PID:4248
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#169⤵PID:2868
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#170⤵PID:2080
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#171⤵PID:4736
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#172⤵PID:5028
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#173⤵PID:4452
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#174⤵PID:2008
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#175⤵PID:2688
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#176⤵PID:1512
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#177⤵PID:1108
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#178⤵PID:4340
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#179⤵PID:544
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#180⤵PID:4676
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#181⤵PID:4056
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#182⤵PID:4468
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#183⤵PID:4564
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#184⤵PID:3456
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#185⤵PID:2164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#186⤵PID:3268
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#187⤵PID:3396
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#188⤵PID:3280
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#189⤵PID:3608
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#190⤵PID:3100
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#191⤵PID:5068
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#192⤵PID:1752
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#193⤵PID:3088
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#194⤵PID:4744
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#195⤵PID:2720
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#196⤵PID:5128
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#197⤵PID:5140
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#198⤵PID:5152
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#199⤵PID:5164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1100⤵PID:5176
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1101⤵PID:5188
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1102⤵PID:5204
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1103⤵PID:5216
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1104⤵PID:5228
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1105⤵PID:5240
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1106⤵PID:5252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1107⤵PID:5264
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1108⤵PID:5276
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1109⤵PID:5288
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1110⤵PID:5304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1111⤵PID:5316
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1112⤵PID:5328
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1113⤵PID:5340
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1114⤵PID:5352
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1115⤵PID:5364
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1116⤵PID:5376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1117⤵PID:5388
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1118⤵PID:5400
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1119⤵PID:5412
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1120⤵PID:5424
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1121⤵PID:5436
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cd99ba381be2ae54bbdf4d82b501464750cf482bd74e2551ad11b41407250c7_NeikiAnalytics.dll,#1122⤵PID:5452
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-