Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b92957d433c9d1f61fe6cdbf3fac86c0_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b92957d433c9d1f61fe6cdbf3fac86c0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
b92957d433c9d1f61fe6cdbf3fac86c0_NeikiAnalytics.exe
Size
1.8MB
MD5
b92957d433c9d1f61fe6cdbf3fac86c0
SHA1
b8e1ce48557472fef35055bdfd103758908f77a1
SHA256
b2fb117bc04808efad7e8400537f203ba74e6286a632741904bb2e3a5cbf1e6c
SHA512
a369bef38763392dd26440652d67baae65057e005ec9e9c3ba72f7d244123183de3157706039af785ff03bac2a752d8c90127b8a97529010faf9e7db9b012450
SSDEEP
49152:xNqrk7LneN9geM1i4rrxOLf+JcYNGaA75Z3e2KvdC7K3dIzkDwhl:9n3MiEsIzk
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\jenkins\workspace\Client\Client\Windows\release\Bin\release\mcm.pdb
ConfigrateGlobalDescription
GetMethod
ConfigrateMonitor
ConfigrateMemoryTrace
ConfigrateTrace
GetAPISet
?on_self_destroy@?$ref_count_t@Unull_lock@ssb@@@ssb@@MAEXXZ
?increment@?$ref_count_t@Unull_lock@ssb@@@ssb@@UAEIXZ
?get_count@?$ref_count_t@Unull_lock@ssb@@@ssb@@UAEIXZ
?decrement@?$ref_count_t@Unull_lock@ssb@@@ssb@@UAEIXZ
?spawn@thread_mgr_t@ssb@@QAEPAVthread_wrapper_t@2@III_NPACI@Z
?instance@thread_mgr_t@ssb@@SAPAV12@XZ
?post_ctrl_msg@thread_wrapper_t@ssb@@QAEHPAVmsg_it@2@PAVmsg_queue_sink_it@2@@Z
?post_msg@thread_wrapper_t@ssb@@QAEHPAVmsg_it@2@PAVmsg_queue_sink_it@2@@Z
??1timer_elem_t@ssb@@UAE@XZ
??0timer_elem_t@ssb@@QAE@IPAVthread_wrapper_t@1@@Z
??0timer_sink_it@ssb@@QAE@XZ
??1timer_sink_it@ssb@@UAE@XZ
get_reset_all_flag_for_evsdk
get_singleon_life
?unregist@singleton_life_t@ssb@@QAEXP6AXXZ@Z
?regist@singleton_life_t@ssb@@QAEXP6AXXZ@Z
?to_string@_uuid_t@ssb@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0bytes_convertor@ssb@@QAE@_KAA_K@Z
?query_interface@timer_sink_it@ssb@@UAEPAX_K@Z
??0bytes_convertor@ssb@@QAE@GAAG@Z
?peek@msg_db_t@ssb@@QAEHPACII@Z
?release@msg_db_t@ssb@@QAEPAV12@XZ
?duplicate@msg_db_t@ssb@@QAEPAV12@XZ
?length@msg_db_t@ssb@@QBEIXZ
?write@msg_db_t@ssb@@QAEHPBV12@IPAI@Z
?write@msg_db_t@ssb@@QAEHPBCIPAI@Z
?read@msg_db_t@ssb@@QAEHPAV12@IPAI_N2@Z
?read@msg_db_t@ssb@@QAEHPACIPAI_N@Z
?new_instance@msg_db_t@ssb@@SAPAV12@I@Z
??1?$ref_count_t@Unull_lock@ssb@@@ssb@@MAE@XZ
??0?$ref_count_t@Unull_lock@ssb@@@ssb@@QAE@XZ
?memcmp_s@ssb@@YAHPBXI0IPAH@Z
?length@text_stream_t@ssb@@QBEIXZ
??6text_stream_t@ssb@@QAEAAV01@PBE@Z
??6text_stream_t@ssb@@QAEAAV01@M@Z
??6text_stream_t@ssb@@QAEAAV01@_N@Z
??6text_stream_t@ssb@@QAEAAV01@H@Z
??6text_stream_t@ssb@@QAEAAV01@G@Z
??6text_stream_t@ssb@@QAEAAV01@E@Z
??6text_stream_t@ssb@@QAEAAV01@C@Z
?now@ticks_drv_t@ssb@@SAIXZ
?release@thread_mutex_recursive@ssb@@QAEXXZ
?acquire@thread_mutex_recursive@ssb@@QAEXXZ
??1thread_mutex_recursive@ssb@@QAE@XZ
??0thread_mutex_recursive@ssb@@QAE@XZ
??1no_copy@ssb@@IAE@XZ
??1no_heap@ssb@@IAE@XZ
??0dyna_para_table_it@ssb@@QAE@XZ
?get_persist_size@variant_t@ssb@@QBEIXZ
?attach_i64s@variant_t@ssb@@QAEXPA_JG@Z
?set_i64@variant_t@ssb@@QAEX_J@Z
?attach_i32s@variant_t@ssb@@QAEXPAHG@Z
?set_i32@variant_t@ssb@@QAEXH@Z
?attach_i16s@variant_t@ssb@@QAEXPAFG@Z
?set_i16@variant_t@ssb@@QAEXF@Z
?get_i8s@variant_t@ssb@@QBEPACPAIPAH@Z
?set_i8s@variant_t@ssb@@QAEXPACG@Z
?attach_i8s@variant_t@ssb@@QAEXPACG@Z
?set_i8@variant_t@ssb@@QAEXC@Z
?now@tick_strategy@ssb@@SAIXZ
??6text_stream_t@ssb@@QAEAAV01@F@Z
??6text_stream_t@ssb@@QAEAAV01@PBC@Z
??Btext_stream_t@ssb@@QAEPACXZ
??0log_stream_t@ssb@@QAE@PACIPBC1@Z
??1log_stream_t@ssb@@UAE@XZ
??6log_stream_t@ssb@@QAEAAV01@H@Z
??6log_stream_t@ssb@@QAEAAV01@I@Z
??6log_stream_t@ssb@@QAEAAV01@PBC@Z
??6log_stream_t@ssb@@QAEAAV01@PBD@Z
??6log_stream_t@ssb@@QAEAAV01@PAX@Z
??6log_stream_t@ssb@@QAEAAV01@_N@Z
get_mlog_mgr
get_module_name
??0thread_base_t@ssb@@QAE@XZ
??1thread_base_t@ssb@@UAE@XZ
??6text_stream_t@ssb@@QAEAAV01@W4ORDIX_ENUM@1@@Z
??0semaphore_t@ssb@@QAE@XZ
?create@semaphore_t@ssb@@QAEHHPBC@Z
??1semaphore_t@ssb@@QAE@XZ
?post@semaphore_t@ssb@@QBEHI@Z
??6text_stream_t@ssb@@QAEAAV01@PBD@Z
??6text_stream_t@ssb@@QAEAAV01@I@Z
??1text_stream_t@ssb@@UAE@XZ
??0text_stream_t@ssb@@QAE@PACI@Z
?zm_memset_s@ssb@@YAHPAXIHI@Z
?query_interface@?$ref_count_t@Unull_lock@ssb@@@ssb@@UAEPAX_K@Z
?stop_thread_by_id@thread_mgr_t@ssb@@QAEHI@Z
?get_cur_tid@thread_base_t@ssb@@SAIXZ
?release@msg_it@ssb@@UAEXXZ
?query_interface@msg_it@ssb@@UAEPAX_K@Z
?overtime@msg_it@ssb@@UAE_NXZ
?dump@msg_it@ssb@@UAEXXZ
??1msg_it@ssb@@MAE@XZ
??0msg_it@ssb@@QAE@W4MSG_TYPE@1@II_N@Z
get_process_cpu_usage
?remove_timer@timer_elem_t@ssb@@UAEHXZ
?release@timer_it@ssb@@MAEXXZ
?is_deposit@timer_it@ssb@@UBE_NXZ
?get_sink@timer_elem_t@ssb@@UBEPAVtimer_sink_it@2@XZ
?get_helper@timer_it@ssb@@UAEPAUticks_helper@2@XZ
?dump@timer_elem_t@ssb@@UAEXXZ
?add_timer@timer_elem_t@ssb@@UAEHPBVtimer_sink_it@2@II_N@Z
main_heartbeat
util_uninit
register_logger
util_init
??1event_t@ssb@@QAE@XZ
??0event_t@ssb@@QAE@_N0@Z
??0bytes_convertor@ssb@@QAE@IAAI@Z
?set_null@variant_t@ssb@@QAEXXZ
??4variant_t@ssb@@QAEABV01@ABV01@@Z
??1variant_t@ssb@@QAE@XZ
??0variant_t@ssb@@QAE@ABV01@@Z
??0queriable_it@ssb@@QAE@XZ
??6text_stream_t@ssb@@QAEAAV01@_K@Z
??6text_stream_t@ssb@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??7semaphore_t@ssb@@QAE_NXZ
SSBDestroyAudioSDK
SSBCreateAudioSDK
EVP_sha256
CRYPTO_memcmp
HMAC
RAND_bytes
?CreateMeetingCryptoMCM@aesgcm@zoombase@@YAPAVIMeetingCrypto@12@IP6AXPBD@Z@Z
?CreateE2EEMeetingCrypto@aesgcm@zoombase@@YA?AV?$shared_ptr@VIE2EEMeetingCrypto@aesgcm@zoombase@@@std@@ABQ6AXPBD@Z@Z
??1ErrorOrSuccess@mmr@zoombase@@QAE@XZ
?MakeSigVerifier@rtpsigning@mmr@zoombase@@YAPAVISigVerifier@123@XZ
?DestroySigVerifier@rtpsigning@mmr@zoombase@@YAXPAVISigVerifier@123@@Z
?DestroyMeetingCrypto@aesgcm@zoombase@@YAXPAPAVIMeetingCrypto@12@@Z
?GetWMIInfo@@YA_NW4HardwareDeviceInfo@@AAV?$vector@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@V?$allocator@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@2@@std@@@Z
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
FreeLibrary
IsDebuggerPresent
WaitForSingleObject
TerminateThread
WideCharToMultiByte
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
GlobalMemoryStatusEx
GetSystemInfo
GetNativeSystemInfo
GetModuleHandleW
LoadLibraryA
LocalFree
GetSystemPowerStatus
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
CloseHandle
InitializeSListHead
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
NetApiBufferFree
NetWkstaGetInfo
memcpy
memset
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memmove
memchr
__RTDynamicCast
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
_initialize_narrow_environment
terminate
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_errno
_seh_filter_dll
_beginthreadex
_configure_narrow_argv
_invalid_parameter_noinfo
tolower
strncmp
strncpy_s
strcpy_s
wcscpy_s
wcscat_s
strnlen
_wsplitpath_s
free
calloc
malloc
_callnewh
__stdio_common_vfprintf
__acrt_iob_func
fclose
fopen
fread
fseek
fwrite
_libm_sse2_log10_precise
_libm_sse2_sqrt_precise
_libm_sse2_pow_precise
strtol
InitModule
SSBAudioDirectorConnect
SSBAudioDirectorDisconnect
SSBCreateASDirector
SSBCreateAudioDirector
SSBCreateGeniusGenerator
SSBCreateMediaPlayer
SSBCreatePBXDirector
SSBCreateRecoderDirector
SSBCreateRendererDirector
SSBCreateVideoDirector
SSBDestroyASDirector
SSBDestroyAudioDirector
SSBDestroyGeniusGenerator
SSBDestroyMediaPlayer
SSBDestroyPBXDirector
SSBDestroyRecoderDirector
SSBDestroyRendererDirector
SSBDestroyVideoDirector
SSBGetCpuDescription
SSBGetGpuDescription
SSBGetGpuMonitorInfo
SSBGetMachineInfo
SSBMediaClientGlobalSetting
SSBMediaClientHeartBeat
SSBSetOSType
SSB_INIT_MCM
SSB_UNINIT_MCM
TermModule
amr2wav_c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ