Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e15c66d7581a11ce39417b49d1a36dc0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e15c66d7581a11ce39417b49d1a36dc0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
e15c66d7581a11ce39417b49d1a36dc0_NeikiAnalytics
Size
284KB
MD5
e15c66d7581a11ce39417b49d1a36dc0
SHA1
26d19fa2d7378fdcf224c4e1bb3c9c85343ca74a
SHA256
2da038a0875b3ccbd142316bcd702dd987183830f972ba67e1e598198d0644ab
SHA512
e5887d898641e99f4e178299e40ee7f5ebaa77eb6f1a3056d57ecad48c761d40de8c54338ba197a253069085e1f845c52493aa7d961a7835c70529c9ca7dda26
SSDEEP
6144:S1XB/nc8tSmULOCRmT8keWGsdxS9O18jwa1:SVB/n3tSKKkeAiBwa1
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
B:\jenkins\workspace\CEN_Intelligent_Soft_8.1\qqpcmgr_proj\Basic\Output\BinFinal\QQPCSoftConfig.pdb
htons
htonl
??0CxImage@@QAE@K@Z
?Destroy@CxImage@@QAE_NXZ
?Save@CxImage@@QAE_NPB_WK@Z
?Load@CxImage@@QAE_NPB_WK@Z
?IsValid@CxImage@@QBE_NXZ
??0CTXStringW@@QAE@PB_W@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??BCTXStringW@@QBEPB_WXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@XZ
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@ABV0@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??8@YA_NABVCTXStringW@@0@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Right@CTXStringW@@QBE?AV1@H@Z
??0CTXStringW@@QAE@PA_W@Z
?NotifyIdle@TXTimer@@YAXXZ
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??1CTXStringW@@QAE@XZ
??YCTXStringW@@QAEAAV0@PB_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?SetBugReportUin@TXBugReport@@YAXKPB_W@Z
??0CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ValidateBugReport@TXBugReport@@YAXXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnExitWinMain@Misc@Util@@YAXXZ
?TXAssert@@YAXPB_W0H@Z
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?Replace@CTXStringW@@QAEHPB_W0@Z
?OnUninitCom@Misc@Util@@YAXXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
?SplitQNC@FS@@YAHPB_WAAVCTXStringW@@1@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??0CTXBSTR@@QAE@H@Z
??M@YA_NABVCTXStringW@@0@Z
?GetLocalePath@TXI18N@@YA?AVCTXStringW@@PB_W@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
?GetPlatformTpc@CoreCenter@Util@@YAHPAPAUITXDataRead@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
GetCommandLineW
GetTickCount
OpenProcess
lstrcmpiW
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetShortPathNameW
GetCurrentProcess
GetSystemTimeAsFileTime
GetProcessTimes
ReleaseMutex
WaitForSingleObject
CreateFileMappingW
VirtualQuery
GetSystemDefaultLangID
GetSystemInfo
OpenEventW
SetEvent
OpenFileMappingW
InterlockedCompareExchange
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetLocalTime
SwitchToThread
InitializeCriticalSection
SetLastError
InterlockedExchange
WideCharToMultiByte
GetProcAddress
GetFileAttributesW
Sleep
WriteFile
lstrcpynW
CloseHandle
CreateFileW
ReadFile
CreateDirectoryW
GetTempPathW
WritePrivateProfileStringW
GetPrivateProfileIntW
RemoveDirectoryW
GetDiskFreeSpaceExW
RaiseException
SetDllDirectoryW
OpenMutexW
GetLastError
CreateMutexW
CopyFileW
FindFirstFileW
GetLongPathNameW
FindNextFileW
FindClose
DeleteFileW
GetUserDefaultUILanguage
GetLocaleInfoW
LoadLibraryW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
GetProcessHeap
HeapAlloc
HeapDestroy
GetModuleHandleW
DeleteCriticalSection
lstrlenW
SetFilePointer
HeapFree
TranslateMessage
PeekMessageW
DispatchMessageW
WaitMessage
UnregisterClassA
PostThreadMessageW
RegisterWindowMessageW
PostMessageW
SetWindowPos
SetForegroundWindow
IsIconic
ShowWindow
IsWindowVisible
SetWindowLongW
CallWindowProcW
GetPropW
SetPropW
LoadStringW
MessageBoxW
FindWindowW
SendMessageTimeoutW
FindWindowA
GetMessageW
RegQueryValueExW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
SHChangeNotify
ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
CoCreateInstance
CoInitialize
OleUninitialize
OleInitialize
CoUninitialize
SysFreeString
SysAllocString
VariantClear
LoadTypeLi
LoadRegTypeLi
SysStringLen
ord30
ord58
ord31
ord32
PathRemoveFileSpecW
PathAppendW
PathAddBackslashW
PathFileExistsW
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
InitCommonControlsEx
EnumProcesses
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
__CxxFrameHandler3
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
_purecall
free
_wcsicmp
wcscpy_s
wcsrchr
wcsstr
memset
_snwprintf
wcscat_s
wcsncpy_s
_wsplitpath_s
_time64
__argc
__wargv
towlower
_wtoi
_itow
wcschr
swprintf_s
strchr
strncpy_s
fflush
fwrite
strrchr
_snprintf_s
_memicmp
_vsnwprintf_s
_vsnprintf
swscanf_s
_wtoi64
malloc
strncpy
wcsncpy
_itow_s
srand
rand
realloc
wcsncat
_wtol
_recalloc
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
??3@YAXPAX@Z
memcpy
_except_handler3
??0exception@std@@QAE@XZ
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ImmDisableIME
GdipSetStringFormatLineAlign
GdipDisposeImage
GdipSetTextRenderingHint
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDrawString
GdipCloneImage
GdipDeleteStringFormat
GdipDeleteGraphics
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipSaveImageToFile
GdipGetImageEncodersSize
GdiplusStartup
GdipAlloc
GdipGetImageEncoders
GdipDeleteBrush
GdipFree
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusShutdown
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreateFont
GdipCreateBitmapFromFile
GdipDeleteFontFamily
GdipCreateStringFormat
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE