Malware Analysis Report

2025-08-05 15:57

Sample ID 240612-fhf1pa1epg
Target 1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe
SHA256 53fdb6d6befdb63468bf859d3738f83cea7b9535ace9a7355f8db12fe85fb72a
Tags
score
4/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
4/10

SHA256

53fdb6d6befdb63468bf859d3738f83cea7b9535ace9a7355f8db12fe85fb72a

Threat Level: Likely benign

The file 1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe was found to be: Likely benign.

Malicious Activity Summary


Drops file in Windows directory

Unsigned PE

Program crash

Suspicious use of WriteProcessMemory

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-12 04:52

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 04:52

Reported

2024-06-12 04:54

Platform

win7-20240221-en

Max time kernel

140s

Max time network

120s

Command Line

"C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe"

Signatures

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinRar 4 (with crack).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\mugen (full).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\German extreme violation.mpg.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\BsPlayer v3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Solo para Maricas.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Shinchan screen saver.scr C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai Shizuka clit.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\GameCube Emulator.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\MSN messenger 6.3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\RealOne Player (Full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Follada brutal coño roto.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hacha Profesional Edition.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual C.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\VMIntel386.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\GBAEmu.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\humor.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\3D Movie Maker.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinZip 9.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 3 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Silent Hill.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual Basic 6.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual Studio (full).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\a pelo.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\RM2GBA.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WAV2MP3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Sexo con una menor.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\No lo Descargues.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinAmp skings and plugins.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\PSEmu.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Matrix Wallpapers.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Dont Download.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Resident Evil for GameCube.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\DivX 7.2 freeware.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Puta come mierda.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Dont Touch.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Chenoa en cueros.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1904 -s 92

Network

N/A

Files

memory/1904-0-0x0000000000400000-0x0000000000428000-memory.dmp

C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe

MD5 1fa6a2bbf2dfc687a34a9d3b1dd1922e
SHA1 f88ee0d23d495051c9a94c761c45c058d13e9bed
SHA256 d0bc139e899150389ad3a2da621c50eb8981522bbc8934009f38c5ad522965ab
SHA512 4cacbb722ae00cc422d85156349559fecdad2f654634a9e6a968a91cd43207720bfb02af604c8c099e7a83df4d6ad293e5fad47748b7287951dbe007870dd6cb

memory/1904-65-0x0000000000400000-0x0000000000428000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 04:52

Reported

2024-06-12 04:54

Platform

win10v2004-20240508-en

Max time kernel

147s

Max time network

150s

Command Line

"C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe"

Signatures

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual Studio (full).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\GameCube Emulator.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual Basic 6.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\a pelo.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Matrix Wallpapers.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\VMIntel386.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Dont Download.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WAV2MP3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Solo para Maricas.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Shinchan screen saver.scr C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinZip 9.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hacha Profesional Edition.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\RM2GBA.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Follada brutal coño roto.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Hentai Shizuka clit.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\BsPlayer v3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinRar 4 (with crack).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\mugen (full).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Puta come mierda.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Dont Touch.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Silent Hill.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\humor.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\RealOne Player (Full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Resident Evil for GameCube.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\GBAEmu.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Visual C.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Sexo con una menor.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\WinAmp skings and plugins.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Winamp 3 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\DivX 7.2 freeware.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\MSN messenger 6.3.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\3D Movie Maker.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\No lo Descargues.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\PSEmu.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\German extreme violation.mpg.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\Chenoa en cueros.exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A
File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\1f86f5e9eece3a8b6d8b9c708c0235c0_NeikiAnalytics.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 352 -ip 352

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 352 -s 288

Network

Files

memory/352-0-0x0000000000400000-0x0000000000428000-memory.dmp

C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe

MD5 1fa6a2bbf2dfc687a34a9d3b1dd1922e
SHA1 f88ee0d23d495051c9a94c761c45c058d13e9bed
SHA256 d0bc139e899150389ad3a2da621c50eb8981522bbc8934009f38c5ad522965ab
SHA512 4cacbb722ae00cc422d85156349559fecdad2f654634a9e6a968a91cd43207720bfb02af604c8c099e7a83df4d6ad293e5fad47748b7287951dbe007870dd6cb

memory/352-65-0x0000000000400000-0x0000000000428000-memory.dmp