Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
507233f21b58637eee66af0adf23253f3946a1ecbb12a0ad78e1fde8e86abd49_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
507233f21b58637eee66af0adf23253f3946a1ecbb12a0ad78e1fde8e86abd49_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
Target
507233f21b58637eee66af0adf23253f3946a1ecbb12a0ad78e1fde8e86abd49_NeikiAnalytics.exe
Size
179KB
MD5
791cbcea1c2436914716a93f44dbca70
SHA1
17974fa00323525fbe61f78baaec7f4f7f25030c
SHA256
507233f21b58637eee66af0adf23253f3946a1ecbb12a0ad78e1fde8e86abd49
SHA512
b7bdcfcdfe2806abda8418688044cda9450cccabf55cf074d1d89ec29f017fccc7ec7ab3b7586a1cbe82d4f6474850e4ac3db9bd9dde752a1eca0e2a2f2be05e
SSDEEP
3072:iCJMXjiJ9paoDdUQUE02nUQak3GsJJnUwUE02pJJJJJxJPvQOgvnnUwUE02pnUwm:iTey6PA6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Users\qt\work\qt\qtdeclarative\qml\QtQuick\LocalStorage\qmllocalstorageplugind.pdb
?toQString@Value@QV4@@QEBA?AVQString@@XZ
?toQStringNoThrow@Value@QV4@@QEBA?AVQString@@XZ
?toBoolean@Value@QV4@@QEBA_NXZ
?toUInt32@Value@QV4@@QEBAIXZ
?toInt32@Value@QV4@@QEBAHXZ
?fromHeapObject@Value@QV4@@SA?AU12@PEAUBase@Heap@2@@Z
?managed@Value@QV4@@QEBAPEAUManaged@2@XZ
?objectValue@Value@QV4@@QEBAPEAUObject@2@XZ
?stringValue@Value@QV4@@QEBAPEAUString@2@XZ
?isString@Value@QV4@@QEBA_NXZ
?setM@Value@QV4@@QEAAXPEAUBase@Heap@2@@Z
?emptyValue@Value@QV4@@SA?AU12@XZ
?changePrototypeImpl@InternalClass@Heap@QV4@@AEAAPEAU123@PEAUObject@23@@Z
?changeVTableImpl@InternalClass@Heap@QV4@@AEAAPEAU123@PEBUVTable@3@@Z
?_checkIsInitialized@Base@Heap@QV4@@QEAAXXZ
?destroy@Base@Heap@QV4@@QEAAXXZ
?inUse@Base@Heap@QV4@@QEBA_NXZ
?qt_metacast@QQmlEngineExtensionPlugin@@UEAAPEAXPEBD@Z
?staticMetaObject@QQmlEngineExtensionPlugin@@2UQMetaObject@@B
?initializeEngine@QQmlEngineExtensionPlugin@@UEAAXPEAVQQmlEngine@@PEBD@Z
??1QQmlEngineExtensionPlugin@@UEAA@XZ
??0QQmlEngineExtensionPlugin@@QEAA@PEAVQObject@@@Z
?qt_metacall@QQmlEngineExtensionPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?fromReturnedValue@Value@QV4@@SA?AU12@_K@Z
?fromInt32@Value@QV4@@SA?AU12@H@Z
?undefinedValue@Value@QV4@@SA?AU12@XZ
??4Value@QV4@@QEAAAEAU01@_K@Z
??1QQmlModuleRegistration@@QEAA@XZ
??0QQmlModuleRegistration@@QEAA@PEBDHP6AXXZ@Z
?qmlRegisterModule@@YAXPEBDHH@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?static_vtbl@Object@QV4@@2UVTable@2@B
?nextPropertyName@ObjectIterator@QV4@@QEAA_KPEAUValue@2@@Z
??1ObjectIterator@QV4@@QEAA@XZ
??0ObjectIterator@QV4@@QEAA@AEAUScope@1@PEBUObject@1@I@Z
?call@FunctionObject@QV4@@QEBA_KAEBUJSCallData@2@@Z
?allocObjectWithMemberData@MemoryManager@QV4@@IEAAPEAUObject@Heap@2@PEBUVTable@2@I@Z
?virtualResolveLookupSetter@Object@QV4@@KA_NPEAU12@PEAUExecutionEngine@2@PEAULookup@2@AEBUValue@2@@Z
?virtualResolveLookupGetter@Object@QV4@@KA_KPEBU12@PEAUExecutionEngine@2@PEAULookup@2@@Z
?virtualInstanceOf@Object@QV4@@KA_KPEBU12@AEBUValue@2@@Z
?virtualGetLength@Object@QV4@@KA_JPEBUManaged@2@@Z
?virtualOwnPropertyKeys@Object@QV4@@KAPEAUOwnPropertyKeyIterator@2@PEBU12@PEAUValue@2@@Z
?virtualSetPrototypeOf@Object@QV4@@KA_NPEAUManaged@2@PEBU12@@Z
?virtualGetPrototypeOf@Object@QV4@@KAPEAU1Heap@2@PEBUManaged@2@@Z
?virtualPreventExtensions@Object@QV4@@KA_NPEAUManaged@2@@Z
?virtualIsExtensible@Object@QV4@@KA_NPEBUManaged@2@@Z
?virtualDefineOwnProperty@Object@QV4@@KA_NPEAUManaged@2@UPropertyKey@2@PEBUProperty@2@UPropertyAttributes@2@@Z
?virtualGetOwnProperty@Object@QV4@@KA?AUPropertyAttributes@2@PEBUManaged@2@UPropertyKey@2@PEAUProperty@2@@Z
?virtualHasProperty@Object@QV4@@KA_NPEBUManaged@2@UPropertyKey@2@@Z
?virtualDeleteProperty@Object@QV4@@KA_NPEAUManaged@2@UPropertyKey@2@@Z
?virtualPut@Object@QV4@@KA_NPEAUManaged@2@UPropertyKey@2@AEBUValue@2@PEAU52@@Z
?virtualGet@Object@QV4@@KA_KPEBUManaged@2@UPropertyKey@2@PEBUValue@2@PEA_N@Z
?getLength@Object@QV4@@QEBA_JXZ
?put@Object@QV4@@QEAA_NPEAUStringOrSymbol@2@AEBUValue@2@PEAU42@@Z
?get@Object@QV4@@QEBA_KIPEA_NPEBUValue@2@@Z
?setPrototypeUnchecked@Object@QV4@@QEAAXPEBU12@@Z
?defineAccessorProperty@Object@QV4@@QEAAXAEBVQString@@P6A_KPEBUFunctionObject@2@PEBUValue@2@2H@Z3@Z
?defineDefaultProperty@Object@QV4@@QEAAXAEBVQString@@P6A_KPEBUFunctionObject@2@PEBUValue@2@2H@ZHUPropertyAttributes@2@@Z
?defaultPrototype@Object@QV4@@SAPEAU12@PEAUExecutionEngine@2@@Z
?defaultInternalClass@Object@QV4@@SAPEAUInternalClass@Heap@2@PEAUEngineBase@2@@Z
?d@Object@QV4@@QEBAPEAU1Heap@2@XZ
?vtable@Object@Heap@QV4@@QEBAPEBUVTable@3@XZ
?init@Object@Heap@QV4@@QEAAXXZ
?markObjects@Object@Heap@QV4@@SAXPEAUBase@23@PEAUMarkStack@3@@Z
?get@QQmlEnginePrivate@@SAPEAV1@PEAVQQmlEngine@@@Z
?offlineStorageDatabaseDirectory@QQmlEnginePrivate@@QEBA?AVQString@@XZ
?offlineStorageDatabaseFilePath@QQmlEngine@@QEBA?AVQString@@AEBV2@@Z
?offlineStoragePath@QQmlEngine@@QEBA?AVQString@@XZ
?tr@QQmlEngine@@SA?AVQString@@PEBD0H@Z
?extensionData@ExecutionEngine@QV4@@QEBAPEAUDeletable@12@H@Z
?setExtensionData@ExecutionEngine@QV4@@QEAAXHPEAUDeletable@12@@Z
?registerExtension@ExecutionEngine@QV4@@SAHXZ
?registrationMutex@ExecutionEngine@QV4@@SAPEAVQMutex@@XZ
?fromVariant@ExecutionEngine@QV4@@QEAA_KAEBVQVariant@@@Z
?toVariant@ExecutionEngine@QV4@@QEAA?AVQVariant@@AEBUValue@2@H_N@Z
?throwReferenceError@ExecutionEngine@QV4@@QEAA_KAEBUValue@2@@Z
?throwTypeError@ExecutionEngine@QV4@@QEAA_KXZ
?throwError@ExecutionEngine@QV4@@QEAA_KAEBUValue@2@@Z
?newErrorObject@ExecutionEngine@QV4@@QEAAPEAUObject@Heap@2@AEBUValue@2@@Z
?newIdentifier@ExecutionEngine@QV4@@QEAAPEAUString@Heap@2@AEBVQString@@@Z
?newString@ExecutionEngine@QV4@@QEAAPEAUString@Heap@2@AEBVQString@@@Z
?newObject@ExecutionEngine@QV4@@QEAAPEAUObject@Heap@2@XZ
?qmlEngine@ExecutionEngine@QV4@@QEBAPEAVQQmlEngine@@XZ
?jsAlloca@ExecutionEngine@QV4@@QEAAPEAUValue@2@H@Z
?toQString@String@QV4@@QEBA?AVQString@@XZ
?value@PersistentValue@QV4@@QEBA_KXZ
??1PersistentValue@QV4@@QEAA@XZ
??4PersistentValue@QV4@@QEAAAEAV01@PEAUObject@1@@Z
??0PersistentValue@QV4@@QEAA@XZ
?virtualIsEqualTo@Managed@QV4@@KA_NPEAU12@0@Z
?engine@Managed@QV4@@QEBAPEAUExecutionEngine@2@XZ
??4Value@QV4@@QEAAAEAU01@PEAUBase@Heap@1@@Z
?m@Value@QV4@@QEBAPEAUBase@Heap@2@XZ
??4Value@QV4@@QEAAAEAU01@PEAUManaged@1@@Z
?text@QSqlError@@QEBA?AVQString@@XZ
??1QSqlError@@QEAA@XZ
?count@QSqlRecord@@QEBAHXZ
?fieldName@QSqlRecord@@QEBA?AVQString@@H@Z
?value@QSqlRecord@@QEBA?AVQVariant@@H@Z
??1QSqlRecord@@QEAA@XZ
?lastInsertId@QSqlQuery@@QEBA?AVQVariant@@XZ
?bindValue@QSqlQuery@@QEAAXHAEBVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?bindValue@QSqlQuery@@QEAAXAEBVQString@@AEBVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?prepare@QSqlQuery@@QEAA_NAEBVQString@@@Z
?exec@QSqlQuery@@QEAA_NXZ
?last@QSqlQuery@@QEAA_NXZ
?seek@QSqlQuery@@QEAA_NH_N@Z
?setForwardOnly@QSqlQuery@@QEAAX_N@Z
?record@QSqlQuery@@QEBA?AVQSqlRecord@@XZ
?isForwardOnly@QSqlQuery@@QEBA_NXZ
?lastError@QSqlQuery@@QEBA?AVQSqlError@@XZ
?numRowsAffected@QSqlQuery@@QEBAHXZ
?at@QSqlQuery@@QEBAHXZ
?size@QSqlQuery@@QEBAHXZ
??4QSqlQuery@@QEAAAEAV0@AEBV0@@Z
??0QSqlQuery@@QEAA@VQSqlDatabase@@@Z
??0QSqlQuery@@QEAA@AEBVQString@@VQSqlDatabase@@@Z
?connectionNames@QSqlDatabase@@SA?AVQStringList@@XZ
?database@QSqlDatabase@@SA?AV1@AEBVQString@@_N@Z
?addDatabase@QSqlDatabase@@SA?AV1@AEBVQString@@0@Z
?connectionName@QSqlDatabase@@QEBA?AVQString@@XZ
?setDatabaseName@QSqlDatabase@@QEAAXAEBVQString@@@Z
?rollback@QSqlDatabase@@QEAA_NXZ
?commit@QSqlDatabase@@QEAA_NXZ
?transaction@QSqlDatabase@@QEAA_NXZ
?isOpen@QSqlDatabase@@QEBA_NXZ
?open@QSqlDatabase@@QEAA_NXZ
??4QSqlDatabase@@QEAAAEAV0@AEBV0@@Z
??1QSqlDatabase@@QEAA@XZ
??0QSqlDatabase@@QEAA@AEBV0@@Z
??0QSqlDatabase@@QEAA@XZ
??1QSqlQuery@@QEAA@XZ
?size@QByteArray@@QEBAHXZ
??0QByteArray@@QEAA@PEBDH@Z
??0QByteArray@@QEAA@XZ
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?className@QMetaObject@@QEBAPEBDXZ
?qt_check_pointer@@YAXPEBDH@Z
?qt_assert_x@@YAXPEBD00H@Z
?value@QSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z
?setValue@QSettings@@QEAAXAEBVQString@@AEBVQVariant@@@Z
??1QSettings@@UEAA@XZ
??0QSettings@@QEAA@AEBVQString@@W4Format@0@PEAVQObject@@@Z
?mkpath@QDir@@QEBA_NAEBVQString@@@Z
?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z
?absolutePath@QDir@@QEBA?AVQString@@XZ
??1QDir@@QEAA@XZ
??0QDir@@QEAA@AEBVQString@@@Z
?dir@QFileInfo@@QEBA?AVQDir@@XZ
?fileName@QFileInfo@@QEBA?AVQString@@XZ
??1QFileInfo@@QEAA@XZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
?exists@QFile@@SA_NAEBVQString@@@Z
?unlock@QMutex@@QEAAXXZ
?lock@QMutex@@QEAAXXZ
??9QVariant@@QEBA_NAEBV0@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?isNull@QVariant@@QEBA_NXZ
??0QVariant@@QEAA@VQLatin1String@@@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@H@Z
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@XZ
?QStringList_contains@QtPrivate@@YA_NPEBVQStringList@@AEBVQString@@W4CaseSensitivity@Qt@@@Z
?dispose@QListData@@SAXPEAUData@1@@Z
??0QString@@QEAA@UQStringDataPtr@@@Z
??0QString@@QEAA@PEBD@Z
??8@YA_NAEBVQString@@0@Z
??YQString@@QEAAAEAV0@AEBV0@@Z
?startsWith@QString@@QEBA_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
?isEmpty@QString@@QEBA_NXZ
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@XZ
??0QChar@@QEAA@UQLatin1Char@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_assert@@YAXPEBD0H@Z
?reserve@QByteArray@@QEAAXH@Z
?constData@QByteArray@@QEBAPEBDXZ
?append@QByteArray@@QEAAAEAV1@D@Z
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
??1QByteArray@@QEAA@XZ
GetSystemTimeAsFileTime
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
InitializeSListHead
memset
memcmp
memcpy
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
__std_type_info_destroy_list
_invalid_parameter
_CrtDbgReport
strcmp
strlen
free
malloc
_callnewh
_free_dbg
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_CrtDbgReportW
_initterm
_initterm_e
terminate
qt_plugin_instance
qt_plugin_query_metadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ