Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2e2db391ea828236d34fcdbf1a94c750_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2e2db391ea828236d34fcdbf1a94c750_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
2e2db391ea828236d34fcdbf1a94c750_NeikiAnalytics
Size
238KB
MD5
2e2db391ea828236d34fcdbf1a94c750
SHA1
a53fcb298b0c0ef87b43412374b493746d8775f1
SHA256
1ee4345eb8c8c81e28fb2964066de0600c6c5ca4ff40ea42ad3e3bb4ecb7bbb1
SHA512
8e0129cf29f02642e06636d6b933b9cbab1b2887e34d558ecd242a9a341674ad12d1c683f0e78e8125e62a5d5acface1fa27b2ab021a5c4fb3c6f6744a8b6139
SSDEEP
3072:44M3pq0N9QTv4JW8ZQlzOJe/bWuqU2HEoGzZqi7NrOFZ7qAYTZ/zRnFESn1wJpZV:h0N9QT3lAybKU2aNBRGzHQK
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Users\labuser\Documents\Projects\3dprinting\shared\agf\psinitial\formats\prcsdk\build\3d\common\a3d\dev\ttf\bin\x64\Release\TfFontMgr.pdb
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
MultiByteToWideChar
OutputDebugStringW
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCPInfo
lstrcpyW
lstrcpyA
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
wsprintfW
GetDC
ord1555
ord1583
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
__std_type_info_destroy_list
__vcrt_InitializeCriticalSectionEx
__telemetry_main_return_trigger
wcsrchr
__std_terminate
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memmove
memset
wcsstr
wcschr
memcpy
__CxxFrameHandler3
_CxxThrowException
__telemetry_main_invoke_trigger
malloc
_callnewh
free
fgetws
_wfopen
fclose
feof
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf
_wtoi
atof
qsort
rand
srand
towlower
wcscat_s
wcsncpy
iswspace
_wcsicmp
towupper
wcscpy_s
_initialize_onexit_table
_seh_filter_dll
_register_onexit_function
_cexit
_initialize_narrow_environment
_crt_atexit
_initterm
_execute_onexit_table
_configure_narrow_argv
terminate
_initterm_e
_invalid_parameter_noinfo_noreturn
_waccess
sqrt
log10
ceil
_time64
DeleteObject
GetOutlineTextMetricsW
AddFontResourceExW
SelectObject
GetTextMetricsW
CreateFontIndirectW
??0TfFontBox@@QEAA@XZ
??0TfFontKey@@QEAA@AEBV0@@Z
??0TfFontKey@@QEAA@HHH@Z
??0TfFontKey@@QEAA@XZ
??4TfFontBox@@QEAAAEAV0@$$QEAV0@@Z
??4TfFontBox@@QEAAAEAV0@AEBV0@@Z
??4TfFontKey@@QEAAAEAV0@AEBV0@@Z
?AddAttributes@TfFontKey@@QEAAXW4EFontAttributes@@@Z
?FontFamilyIndex@TfFontKey@@QEBAHXZ
?FontFilePath@TfFontKey@@QEBAAEBVTfString@@XZ
?FontLibAddFont@@YAXAEBVTfString@@_N1@Z
?FontLibCreateFontMgr@@YAXAEBVTfFontMgrInitializationData@@@Z
?FontLibCreateTextByBmp@@YA_NAEBVTfFontKey@@AEBVTfString@@@Z
?FontLibCreateTextByVector@@YAMAEBVTfFontKey@@AEBVTfString@@PEA_N@Z
?FontLibDeleteFontMgr@@YAXXZ
?FontLibDrawTextByBmp@@YAMAEBVTfFontKey@@AEBVTfString@@@Z
?FontLibDrawTextByVector@@YAMAEBVTfFontKey@@AEBVTfString@@PEAUct_Mesh@@PEAVTfFontBox@@@Z
?FontLibDrawTextByVectorContour@@YAMAEBVTfFontKey@@AEBVTfString@@@Z
?FontLibEstimateLength@@YAM_NAEBVTfString@@1W4EFontType@@AEAM3333AEA_NAEAW4EPRCCharSet@@4@Z
?FontLibExistFontName@@YA_NAEBVTfString@@@Z
?FontLibFindFontKey@@YA_NAEBVTfString@@GAEAVTfFontKey@@_N222@Z
?FontLibFindFontKey@@YA_NAEBVTfString@@GDAEAVTfFontKey@@W4EPRCCharSet@@@Z
?FontLibFindFontKey@@YA_NHGAEAVTfFontKey@@_N111@Z
?FontLibFontMgrExist@@YA_NPEAH@Z
?FontLibGetDefaultFontName@@YAAEBVTfString@@XZ
?FontLibGetFontName@@YAXHAEAVTfString@@@Z
?FontLibGetFontNameForRTF@@YAXAEAVTfString@@@Z
?FontLibGetFontNameWithPrefix@@YAXAEAVTfString@@PEA_N@Z
?FontLibGetResolution@@YAHXZ
?FontLibGetSymbolFontKey@@YAXAEAVTfFontKey@@@Z
?FontLibGetSymbolFontName@@YAXAEAVTfString@@@Z
?FontLibGetTextBox@@YAXAEBVTfFontKey@@AEBVTfString@@AEAM2_N@Z
?FontLibGetTypeFontFromName@@YA?AW4EFontType@@AEAVTfString@@@Z
?FontLibInitFctSystem@@YA_NP6A?AW4EFontStatus@@AEAV?$TfSArray@VTfString@@@@@Z@Z
?FontLibIsCoolType@@YA_NXZ
?FontLibLoadAllFont@@YAXAEBV?$TfSArray@VTfString@@@@H@Z
?FontLibLoadCatiaFont@@YAXAEBV?$TfSArray@VTfString@@@@@Z
?FontLibLoadUGFont@@YAXAEBV?$TfSArray@VTfString@@@@@Z
?FontLibRemoveAllFonts@@YAXXZ
?FontLibRetrieveFontFamilies@@YAXHAEAV?$TfSArray@VTfString@@@@@Z
?FontLibSetDefaultFontName@@YAXAEBVTfString@@@Z
?FontLibSetResolution@@YAXH@Z
?FontLibSetSymbolFontName@@YAXAEBVTfString@@@Z
?FontSizeIndex@TfFontKey@@QEBAHXZ
?FontStyleIndex@TfFontKey@@QEBAHXZ
?GetAttributes@TfFontKey@@QEBADXZ
?GetBitmapFont@TfFontKey@@QEBA?AV?$C_ptr@VTfFont@@@@XZ
?GetCharSet@TfFontKey@@QEBA?AW4EPRCCharSet@@XZ
?GetFontAdvance@TfFontKey@@QEBAMAEBVTfString@@_N@Z
?GetFontAscent@TfFontKey@@QEBAM_N@Z
?GetFontContours@TfFontKey@@QEBA_NAEB_WAEAV?$TfSArray@VTfContour@@@@_N@Z
?GetFontDescent@TfFontKey@@QEBAM_N@Z
?GetFontFamilyInfo@TfFontKey@@QEBA_NHAEAVTfString@@@Z
?GetFontFamilyName@TfFontKey@@QEBAAEBVTfString@@XZ
?GetFontScale@TfFontKey@@QEBAMXZ
?GetFontScalePixel@TfFontKey@@QEBAMXZ
?GetFontSize@TfFontKey@@QEBAGXZ
?GetInternalFontInfo@TfFontKey@@QEBAMW4EFontInfo@@@Z
?GetTextBox@TfFontKey@@QEBAXAEBVTfString@@AEAM1_N@Z
?GetTextBox@TfFontKey@@QEBAXAEBVTfString@@AEAVTfFontBox@@_N@Z
?GetType@TfFontKey@@QEBA?AW4EFontType@@XZ
?GetVectorFont@TfFontKey@@QEBA?AV?$C_ptr@VTfFont@@@@XZ
?HasSymbol@TfFontKey@@QEBA_NXZ
?HasValidFamily@TfFontKey@@QEBA_NXZ
?HasValidStyle@TfFontKey@@QEBA_NXZ
?IsBold@TfFontKey@@QEBA_NXZ
?IsFixedWidth@TfFontKey@@QEBA_NXZ
?IsInternal@TfFontKey@@QEBA_NXZ
?IsItalic@TfFontKey@@QEBA_NXZ
?IsNull@TfFontKey@@QEAA_NXZ
?IsOverlined@TfFontKey@@QEBA_NXZ
?IsSoftware@TfFontKey@@QEBA_NXZ
?IsStretch@TfFontKey@@QEBA_NXZ
?IsStrikeOut@TfFontKey@@QEBA_NXZ
?IsTTFSymbols@TfFontKey@@QEBA_NXZ
?IsUnderlined@TfFontKey@@QEBA_NXZ
?IsValid@TfFontKey@@QEBA_NXZ
?IsWired@TfFontKey@@QEBA_NXZ
?LoadInternal@TfFontKey@@QEAA_NXZ
?ReSet@TfFontKey@@QEAAXXZ
?Set@TfFontKey@@QEAAXHHH@Z
?SetAttributes@TfFontKey@@QEAAXD@Z
?SetCharSet@TfFontKey@@QEAAXW4EPRCCharSet@@@Z
?SetFamily@TfFontKey@@QEAAXH@Z
?SetFontScale@TfFontKey@@QEBAXM@Z
?SetInternalBold@TfFontKey@@QEAAX_N@Z
?SetInternalItalic@TfFontKey@@QEAAX_N@Z
?SetOverlined@TfFontKey@@QEAAX_N@Z
?SetSize@TfFontKey@@QEAAXH@Z
?SetStrikeOut@TfFontKey@@QEAAX_N@Z
?SetStyle@TfFontKey@@QEAAXH@Z
?SetStyleSoftware@TfFontKey@@QEAAXAEA_N0_N@Z
?SetUnderlined@TfFontKey@@QEAAX_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ