Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
36ebcdf76a57a339acae98fb86e5d440_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
36ebcdf76a57a339acae98fb86e5d440_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
36ebcdf76a57a339acae98fb86e5d440_NeikiAnalytics
Size
8.5MB
MD5
36ebcdf76a57a339acae98fb86e5d440
SHA1
9d337cc571b7f01dbcfd28feeed33e20760ea95a
SHA256
21e9d4bd641a1e7d8ba5081eb40b555677a4ef42ec34b70ac9427958eb1bef0c
SHA512
cd8f390a692b086c52872e2f932935cbb44688d54b927eeb3e76d474774d2d9dc7e86cc73649ba8692798a5a89d9912250d5d6724ddcbcbbe987dbc612da3866
SSDEEP
98304:F7xtevT1EZKG1rQgChcsAregZF7P8oW7GnlZoHMw5+HQuh2kRbdj2:FtIrKugntmj
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\PS18\PS_18.1_Win_x64_Daily_Retail\20170309.r.207\photoshop\main\plugins\fileformat\dicom\target\x64\release\Dicom.pdb
ord15
ord20
ord24
ord60
ord61
ord6
ord4
ord2
GetVolumeInformationW
SetErrorMode
GetVolumeInformationA
FreeResource
LoadResource
LockResource
SizeofResource
GetDiskFreeSpaceW
GetDiskFreeSpaceA
Sleep
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileSize
FlushFileBuffers
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FreeLibrary
VerifyVersionInfoW
LoadLibraryA
GetCurrentProcess
VerSetConditionMask
GlobalMemoryStatus
RemoveDirectoryW
RemoveDirectoryA
GetFileAttributesExW
GetFileAttributesExA
DeleteFileA
GetTickCount
GetUserDefaultUILanguage
GetLocaleInfoA
GetLocaleInfoW
GetACP
GetProcAddress
IsDBCSLeadByte
GetTempPathA
GetWindowsDirectoryW
GetWindowsDirectoryA
GetSystemDirectoryW
GetSystemDirectoryA
CloseHandle
GetTempPathW
GetLogicalDrives
CreateFileW
CreateFileA
GetDriveTypeW
GetCurrentDirectoryA
GetFileAttributesW
GetFileAttributesA
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
CreateDirectoryA
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
CompareStringA
WideCharToMultiByte
CompareStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
OutputDebugStringW
FindResourceA
EnumResourceNamesA
FormatMessageA
QueryPerformanceCounter
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
RtlVirtualUnwind
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
OutputDebugStringA
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
GetSystemTimeAsFileTime
GetLastError
DeleteFileW
GetCurrentDirectoryW
GetDriveTypeA
GetSystemTime
GetSystemInfo
SetEvent
WaitForSingleObject
CreateEventA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ResetEvent
GetStdHandle
GetFileType
AllocConsole
WriteConsoleA
ReleaseSemaphore
ReleaseMutex
CreateMutexA
CreateSemaphoreA
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
FormatMessageW
ValidateRgn
InvalidateRgn
EndPaint
BeginPaint
ReleaseDC
ShowWindow
SetActiveWindow
GetWindowLongPtrW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetFocus
GetActiveWindow
SetFocus
GetWindowRgn
GetUpdateRgn
SetWindowLongPtrW
GetParent
EnumThreadWindows
DefFrameProcW
DefMDIChildProcW
SystemParametersInfoW
GetDC
LoadIconW
DestroyIcon
DrawIconEx
GetIconInfo
SetCapture
ReleaseCapture
ScrollDC
FillRect
SetTimer
KillTimer
GetSysColor
GetDoubleClickTime
GetCaretBlinkTime
GetDesktopWindow
SendMessageA
DrawFocusRect
CreatePopupMenu
MapWindowPoints
GetMenuItemInfoW
SetMenuItemInfoA
SetMenuItemInfoW
InsertMenuItemW
CreateWindowExW
MoveWindow
TrackPopupMenuEx
GetDCEx
InvalidateRect
GetClientRect
GetWindowRect
ClientToScreen
ScreenToClient
IsIconic
TranslateAcceleratorW
WindowFromPoint
SetScrollInfo
GetScrollInfo
GetForegroundWindow
MonitorFromPoint
SetForegroundWindow
TranslateMDISysAccel
GetMonitorInfoW
EnumDisplayMonitors
IsClipboardFormatAvailable
SetScrollPos
SetPropW
GetPropW
RemovePropW
CallWindowProcW
SetWindowRgn
GetWindowRgnBox
DrawFrameControl
CopyImage
MapVirtualKeyW
RemoveMenu
InsertMenuItemA
SetCursor
DestroyCursor
CreateIconIndirect
MessageBeep
MessageBoxA
SetWindowTextA
SetWindowTextW
GetWindowTextA
GetWindowTextW
GetWindowTextLengthA
GetWindowTextLengthW
SetCursorPos
DestroyMenu
GetCursorPos
GetSystemMenu
DeleteMenu
DrawTextW
UnregisterClassW
MessageBoxW
RegisterClassW
DrawMenuBar
SetMenu
GetSystemMetrics
UpdateWindow
IsWindowEnabled
EnableWindow
IsZoomed
BringWindowToTop
GetWindowPlacement
SetWindowPos
DestroyWindow
DefWindowProcW
SendMessageW
GetMessageTime
GetAsyncKeyState
GetKeyState
GetWindowThreadProcessId
GetClassNameA
EnumWindows
EnumChildWindows
CharUpperA
RedrawWindow
IsWindowVisible
CreateFontIndirectA
TextOutW
MoveToEx
WidenPath
FillPath
SetWorldTransform
SetWindowOrgEx
SetBrushOrgEx
CreateSolidBrush
GetROP2
GetBkColor
GetBkMode
GetBrushOrgEx
GetCurrentObject
EndPath
BeginPath
GetTextMetricsW
SetTextAlign
SetStretchBltMode
StretchBlt
SetBkMode
SelectObject
SelectClipRgn
RoundRect
Rectangle
PaintRgn
LineTo
GetTextExtentPoint32W
FrameRgn
Ellipse
GetStockObject
GetObjectW
SetTextColor
SetROP2
SetBkColor
GetRegionData
GetWorldTransform
GetClipRgn
DeleteObject
CreateDCW
DeleteDC
GetDeviceCaps
CreateRectRgn
CombineRgn
GetTextColor
CreateDIBSection
CreateICW
CreatePalette
RealizePalette
SelectPalette
GetObjectA
RestoreDC
SaveDC
CreateBrushIndirect
ExtCreatePen
CreatePen
CreatePatternBrush
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetGraphicsMode
GetViewportExtEx
GetWindowOrgEx
SetGraphicsMode
CreateFontIndirectW
SHBrowseForFolderW
DragAcceptFiles
SHBindToParent
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
SHGetPathFromIDListW
ShellExecuteW
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipResetPath
GdipClosePathFigure
GdipAddPathLine
GdipAddPathBezier
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipFlush
GdipDrawPath
GdipSetCompositingQuality
GdipSetPenMode
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipDeletePen
GdipCreatePen1
GdipAddPathEllipseI
GdipAddPathLineI
GdipAddPathEllipse
GdipSetPathFillMode
GdipFillPath
GdipFillRectangleI
GdipSetPageUnit
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
memcpy
memset
__std_terminate
__std_exception_copy
__std_exception_destroy
memchr
strchr
memcmp
__C_specific_handler
__RTDynamicCast
wcsstr
longjmp
__vcrt_InitializeCriticalSectionEx
__intrinsic_setjmp
__std_type_info_destroy_list
__CxxFrameHandler3
_CxxThrowException
memmove
_purecall
_initterm_e
_initterm
terminate
_invalid_parameter_noinfo_noreturn
_wassert
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
strerror
_beginthreadex
abort
exit
_errno
_invalid_parameter_noinfo
_getpid
calloc
malloc
free
_callnewh
realloc
_pclose
feof
fwrite
fgets
clearerr
getc
_get_stream_buffer_pointers
_wfopen
__stdio_common_vsscanf
ferror
_fseeki64
fseek
fopen_s
__acrt_iob_func
fsetpos
_mktemp
fgetc
setvbuf
fread
fputc
__stdio_common_vfprintf
_fileno
ungetc
fgetpos
fclose
fflush
fopen
__stdio_common_vsprintf
__stdio_common_vsprintf_s
isspace
tolower
strncmp
strncpy
strcmp
isalpha
toupper
wcsncpy
strspn
isupper
islower
strlen
wcslen
wcscpy
strcat
strcpy
isdigit
strncat_s
strcpy_s
_localtime64
strftime
_gmtime64
_mktime64
_ftime64
_time64
remove
_unlock_file
rename
_fstat64
_lock_file
_unlink
ceil
floor
modf
_isnan
log10
exp
atan2
cos
sin
_finite
pow
acos
fmod
strtod
wcstod
_ultoa_s
atof
atoi
getenv
TransparentBlt
AlphaBlend
gethostname
WSAStartup
WSACleanup
closesocket
connect
gethostbyname
htons
ioctlsocket
recv
send
setsockopt
socket
WSAGetLastError
htonl
Netbios
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
GetTokenInformation
GetLengthSid
CopySid
OpenProcessToken
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
CoTaskMemFree
EntryFM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ