Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
30bdebc917b5e58dc1e5a663793b91a0_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
30bdebc917b5e58dc1e5a663793b91a0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
30bdebc917b5e58dc1e5a663793b91a0_NeikiAnalytics.exe
Size
1.1MB
MD5
30bdebc917b5e58dc1e5a663793b91a0
SHA1
05290486f0b3be4aefc49550cce20af3a8460cc9
SHA256
828fcf6266b9ee472685e43c519cbad6c048ba5d285a9a44b4247f3dd898581f
SHA512
d6ff4457372c683eb7bd38f4e6f4f3ceff05efb72224bb1db73de4241e90a956b2187b21db9f39070d899970cc214f501b1445e5645012726adb82a20155e5c3
SSDEEP
24576:wlLrfcwTcfbnXOrNmqXe2zFebR6QlFE9PeWPp5ru+iEfdF1ausqqCr:wlLrafbnXOeGY3FEJT5rbiEvMusqqCr
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\ProjectBuild\Branches\3.6\RhinoProtect\Publish\OutPut\Bin\Win32\release\pdb\SdAntiVEngine.pdb
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetCurrentThreadId
WaitForMultipleObjects
SetFilePointer
WriteFile
GetModuleFileNameW
CreateFileW
GetLocalTime
CloseHandle
GetCurrentProcessId
GetEnvironmentVariableW
GetLogicalDriveStringsW
lstrlenW
QueryDosDeviceW
GetUserDefaultLangID
GetFullPathNameW
GetDriveTypeW
FreeLibrary
HeapAlloc
SetFilePointerEx
HeapFree
WaitForSingleObject
VirtualFree
GetProcessHeap
IsBadReadPtr
GlobalMemoryStatusEx
GetVolumePathNameW
LoadLibraryW
IsBadWritePtr
ReadFile
FlushFileBuffers
GetProcAddress
VirtualAlloc
GetDiskFreeSpaceW
GetFileType
DeviceIoControl
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
LocalFree
GetVolumeInformationW
SetEvent
SleepEx
Sleep
ResetEvent
InterlockedExchangeAdd
CreateEventW
SetThreadAffinityMask
ResumeThread
GetCurrentProcess
GetModuleHandleW
GetSystemInfo
GetCurrentThread
FormatMessageW
GetTickCount
InitializeCriticalSectionAndSpinCount
EncodePointer
GetCompressedFileSizeW
IsDebuggerPresent
LocalFileTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
FindNextFileW
FindClose
SetFileAttributesW
GetWindowsDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
MoveFileW
GetCurrentDirectoryW
GetTempPathW
CopyFileW
GetSystemDirectoryW
CreateDirectoryW
MoveFileExW
GetTempFileNameW
DeleteFileW
GetFileSizeEx
lstrcpyW
lstrcatW
GlobalFree
GlobalAlloc
OpenProcess
ReleaseMutex
OpenMutexW
CreateMutexW
OpenEventW
LoadLibraryExW
MultiByteToWideChar
GetACP
lstrcmpiW
LockResource
GetVersionExW
LoadResource
FindResourceW
GetFileTime
SetFileTime
SetEndOfFile
GetFileSize
GetShortPathNameW
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
LoadLibraryA
GetFileAttributesW
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
SearchPathW
ExpandEnvironmentStringsW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
DecodePointer
ExitWindowsEx
LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xruntime_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?_Winerror_map@std@@YAPBDH@Z
?setf@ios_base@std@@QAEHH@Z
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
__clean_type_info_names_internal
_dtest
sprintf_s
memset
memcpy
_lock
sscanf
isalnum
wcstoul
calloc
_vswprintf_c_l
_localtime64
_mktime64
toupper
tolower
memchr
strchr
?terminate@@YAXXZ
_wcsicmp
wcsncpy
_splitpath_s
_stricmp
atof
sprintf
_wtoi
_errno
_time64
srand
rand
towupper
wcsstr
towlower
wcschr
_lock_file
setvbuf
fsetpos
fgetc
fflush
_fseeki64
fgetpos
strstr
ungetc
_unlock_file
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
_beginthreadex
_endthreadex
_vsnwprintf
fclose
fseek
ftell
_except1
fread
rewind
_wfopen_s
realloc
malloc
_wcsnicmp
free
memcpy_s
??_V@YAXPAX@Z
??2@YAPAXI@Z
_hypot
??3@YAXPAX@Z
_purecall
memmove
swscanf_s
strpbrk
abort
modf
_CxxThrowException
__RTDynamicCast
atoi
fwrite
PathUnquoteSpacesW
StrCmpNIW
StrDupW
PathIsRootW
PathGetDriveNumberW
StrCmpIW
PathCanonicalizeW
PathFindFileNameW
PathIsRelativeW
PathIsDirectoryW
PathIsNetworkPathW
PathMakePrettyW
CreateObject
DestroyObject
RCAvAcquireTopScanWrapper
RCAvReleaseTopScanWrapper
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ