Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4c407822d02ca8a938621a92c5c5fce0_NeikiAnalytics.exe
Behavioral task
behavioral2
Sample
4c407822d02ca8a938621a92c5c5fce0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
4c407822d02ca8a938621a92c5c5fce0_NeikiAnalytics.exe
Size
640KB
MD5
4c407822d02ca8a938621a92c5c5fce0
SHA1
79035402fbe63805c2abea00cc085cf25ccc5bef
SHA256
c44c6493e2d2e3110384b005a82ac1cfddee08f870a58f091eef624e79a6f5d7
SHA512
6cf73ef05cb93ae359e784c7348db89cf5572b7ff82c58981d15b5d7b36ebafce42c0494b5e52f5efca5869d6d27da10d7bc2826b70b8c0d8f57decf4f0bea8e
SSDEEP
12288:Zx/YhtB6oZm2jQMuXbiNP++TOVQrWR6C3:ZKtB6oZm2M1XbsLTVC3
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\qt\work\qt\qtwebengine\bin\QtWebEngineProcess.pdb
?Windows8_1@QOperatingSystemVersion@@2V1@B
?compare@QOperatingSystemVersion@@CAHAEBV1@0@Z
?current@QOperatingSystemVersion@@SA?AV1@XZ
?setFileName@QLibrary@@QEAAXAEBVQString@@@Z
?load@QLibrary@@QEAA_NXZ
?resolve@QLibrary@@QEAAP6AXXZPEBD@Z
??1QLibrary@@UEAA@XZ
??0QLibrary@@QEAA@PEAVQObject@@@Z
??1QString@@QEAA@XZ
?qErrnoWarning@@YAXHPEBDZZ
?warning@QMessageLogger@@QEBAXPEBDZZ
??0QMessageLogger@@QEAA@PEBDH0@Z
??1QCoreApplication@@UEAA@XZ
??0QCoreApplication@@QEAA@AEAHPEAPEADH@Z
RegQueryValueExW
EventRegister
EventUnregister
EventWrite
GetTokenInformation
SetTokenInformation
SetEntriesInAclW
GetSecurityInfo
SetSecurityInfo
AccessCheck
EqualSid
FreeSid
GetAce
ImpersonateLoggedOnUser
IsValidSid
MapGenericMask
RevertToSelf
GetNamedSecurityInfoW
OpenProcessToken
CreateRestrictedToken
DuplicateToken
DuplicateTokenEx
LookupPrivilegeValueW
GetKernelObjectSecurity
GetLengthSid
GetSecurityDescriptorSacl
SetKernelObjectSecurity
ConvertSidToStringSidW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction036
CopySid
CreateWellKnownSid
GetSidSubAuthority
InitializeSid
CreateProcessAsUserW
SetThreadToken
RegCloseKey
RegDisablePredefinedCache
RegOpenKeyExW
RegCreateKeyExW
GetProcessWindowStation
CloseDesktop
GetUserObjectInformationW
CreateDesktopW
CreateWindowStationW
SetProcessWindowStation
CloseWindowStation
GetThreadDesktop
IsDebuggerPresent
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
InitOnceExecuteOnce
CloseHandle
GetLastError
GetCurrentProcessId
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetLastError
LocalFree
GetModuleHandleW
GetProcAddress
DuplicateHandle
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
CreateThread
GetCurrentThreadId
TerminateJobObject
SetInformationJobObject
RegisterWaitForSingleObject
UnregisterWait
SetHandleInformation
GetCurrentThread
GetProcessHandleCount
GetCurrentProcessorNumber
VirtualFree
GetModuleHandleA
SetThreadAffinityMask
GetProcessHeaps
VirtualAllocEx
VirtualProtectEx
WriteProcessMemory
LoadLibraryW
CreateJobObjectW
AssignProcessToJobObject
QueryInformationJobObject
CreateNamedPipeW
DebugBreak
lstrlenW
HeapSetInformation
ReleaseSRWLockExclusive
TryAcquireSRWLockExclusive
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
SearchPathW
GetCurrentDirectoryW
GetThreadId
CreateRemoteThread
CreateProcessW
ProcessIdToSessionId
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SignalObjectAndWait
CreateMutexW
TerminateProcess
FreeLibrary
HeapDestroy
GetTickCount
GetUserDefaultLangID
GetUserDefaultLCID
GetUserDefaultLocaleName
EnumSystemLocalesEx
UnregisterWaitEx
CreateFileW
GetFileAttributesW
GetLongPathNameW
QueryDosDeviceW
ReadProcessMemory
VirtualFreeEx
Sleep
AcquireSRWLockExclusive
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
GetNativeSystemInfo
GetProductInfo
IsWow64Process
WriteFile
OutputDebugStringA
GetLocalTime
GetModuleFileNameW
FormatMessageA
VirtualQuery
InitializeProcThreadAttributeList
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
GetSystemTimeAsFileTime
QueryThreadCycleTime
GetThreadPriority
ExpandEnvironmentStringsW
GetCommandLineW
LoadLibraryExW
GetModuleHandleExW
TlsGetValue
GetProcessTimes
SetCurrentDirectoryW
SetThreadPriority
K32QueryWorkingSetEx
RtlCaptureStackBackTrace
SetUnhandledExceptionFilter
TlsAlloc
TlsSetValue
TlsFree
RaiseException
CoTaskMemFree
?staticSandboxInterfaceInfo@QtWebEngineCore@@YAPEAUSandboxInterfaceInfo@sandbox@@PEAU23@@Z
?processMain@QtWebEngineCore@@YAHHPEAPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Xlength_error@std@@YAXPEBD@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
memset
_purecall
memcpy
memmove
__C_specific_handler
memcmp
memchr
strchr
strstr
__current_exception_context
__std_exception_copy
__std_exception_destroy
__current_exception
_CxxThrowException
__CxxFrameHandler4
_set_new_mode
malloc
free
realloc
_callnewh
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
strerror
exit
_c_exit
_register_thread_local_exe_atexit_callback
terminate
_exit
_invalid_parameter_noinfo_noreturn
_invoke_watson
abort
_errno
_wcsnicmp
wcscmp
isxdigit
strncpy
_wcsdup
_wcsicmp
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
fflush
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func
fwrite
__p__commode
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s
_write
__stdio_common_vsscanf
floor
ceil
log
round
ceilf
_dclass
exp
__setusermatherr
getenv
_configthreadlocale
CommandLineToArgvW
timeGetTime
GetHandleVerifier
IsSandboxedProcess
TargetConfigureOPMProtectedOutput
TargetConfigureOPMProtectedOutput64
TargetCreateNamedPipeW
TargetCreateNamedPipeW64
TargetCreateOPMProtectedOutputs
TargetCreateOPMProtectedOutputs64
TargetCreateProcessA
TargetCreateProcessA64
TargetCreateProcessW
TargetCreateProcessW64
TargetCreateThread
TargetCreateThread64
TargetDestroyOPMProtectedOutput
TargetDestroyOPMProtectedOutput64
TargetEnumDisplayDevicesA
TargetEnumDisplayDevicesA64
TargetEnumDisplayMonitors
TargetEnumDisplayMonitors64
TargetGdiDllInitialize
TargetGdiDllInitialize64
TargetGetCertificate
TargetGetCertificate64
TargetGetCertificateByHandle
TargetGetCertificateByHandle64
TargetGetCertificateSize
TargetGetCertificateSize64
TargetGetCertificateSizeByHandle
TargetGetCertificateSizeByHandle64
TargetGetMonitorInfoA
TargetGetMonitorInfoA64
TargetGetMonitorInfoW
TargetGetMonitorInfoW64
TargetGetOPMInformation
TargetGetOPMInformation64
TargetGetOPMRandomNumber
TargetGetOPMRandomNumber64
TargetGetStockObject
TargetGetStockObject64
TargetGetSuggestedOPMProtectedOutputArraySize
TargetGetSuggestedOPMProtectedOutputArraySize64
TargetNtCreateEvent
TargetNtCreateEvent64
TargetNtCreateFile
TargetNtCreateFile64
TargetNtCreateKey
TargetNtCreateKey64
TargetNtCreateSection
TargetNtCreateSection64
TargetNtMapViewOfSection
TargetNtMapViewOfSection64
TargetNtOpenEvent
TargetNtOpenEvent64
TargetNtOpenFile
TargetNtOpenFile64
TargetNtOpenKey
TargetNtOpenKey64
TargetNtOpenKeyEx
TargetNtOpenKeyEx64
TargetNtOpenProcess
TargetNtOpenProcess64
TargetNtOpenProcessToken
TargetNtOpenProcessToken64
TargetNtOpenProcessTokenEx
TargetNtOpenProcessTokenEx64
TargetNtOpenThread
TargetNtOpenThread64
TargetNtOpenThreadToken
TargetNtOpenThreadToken64
TargetNtOpenThreadTokenEx
TargetNtOpenThreadTokenEx64
TargetNtQueryAttributesFile
TargetNtQueryAttributesFile64
TargetNtQueryFullAttributesFile
TargetNtQueryFullAttributesFile64
TargetNtSetInformationFile
TargetNtSetInformationFile64
TargetNtSetInformationThread
TargetNtSetInformationThread64
TargetNtUnmapViewOfSection
TargetNtUnmapViewOfSection64
TargetRegisterClassW
TargetRegisterClassW64
TargetSetOPMSigningKeyAndSequenceNumbers
TargetSetOPMSigningKeyAndSequenceNumbers64
g_handles_to_close
g_interceptions
g_nt
g_originals
g_shared_IPC_size
g_shared_delayed_integrity_level
g_shared_delayed_mitigations
g_shared_policy_size
g_shared_section
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ