Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
626d7ca7fffe7623919f57e28e75b1e3cb6dcfa29fe9157ba27afce1ae60b35d_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
626d7ca7fffe7623919f57e28e75b1e3cb6dcfa29fe9157ba27afce1ae60b35d_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
626d7ca7fffe7623919f57e28e75b1e3cb6dcfa29fe9157ba27afce1ae60b35d_NeikiAnalytics.exe
Size
207KB
MD5
78d8620310d2b88ae40b3db6a72ca250
SHA1
1a499cc1e8520021cb3b3ca6cd9cd47196754183
SHA256
626d7ca7fffe7623919f57e28e75b1e3cb6dcfa29fe9157ba27afce1ae60b35d
SHA512
d5b0ac1e65300ac26cad6bc274658a84348b13b14ede6c8f6a74e9b105d7624bdc9624ca71f6ff7864c71d6ecba67c42bb88acabd2423428c123aa9f26167a92
SSDEEP
3072:b802HRe29HoSxsP61RO0UbK1qMKnbqdEqXEQnDcz+IlJ/vPEDUxf7VYsOwvmw/1:b83CSxsPCUK5XEQLIlJ/vPGsOwf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\git_xunlei\pc_2022\symbols\x86\PRInstall\installtools.pdb
GetAdaptersInfo
HttpOpenRequestW
InternetSetOptionW
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpSendRequestW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
CreateThread
TerminateThread
GetLastError
SetEvent
WaitForSingleObject
LoadResource
SizeofResource
CloseHandle
CreateEventW
LoadLibraryW
GetModuleHandleW
OutputDebugStringW
FindResourceW
FindResourceExW
GetPrivateProfileStringW
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
FreeLibrary
DeleteCriticalSection
lstrcatA
GetFileAttributesA
lstrcpyA
WritePrivateProfileStringA
CreateDirectoryA
GetPrivateProfileStringA
SetPriorityClass
GetCurrentProcess
DeviceIoControl
GetVolumeInformationA
CreateFileA
GetVersionExA
LocalFree
InterlockedDecrement
GlobalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
IsDebuggerPresent
GetProcAddress
ResetEvent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
LockResource
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetWindowThreadProcessId
LoadStringW
AllowSetForegroundWindow
RegSetValueExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
CoUninitialize
CoInitialize
CoCreateInstance
SHChangeNotify
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SysAllocString
SysFreeString
VariantInit
VariantClear
PathFileExistsW
PathCombineW
ord176
PathRemoveFileSpecW
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?uncaught_exception@std@@YA_NXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryHeaders
WinHttpSetTimeouts
WinHttpSetOption
WinHttpReceiveResponse
WinHttpWriteData
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpQueryDataAvailable
WinHttpOpenRequest
__std_exception_destroy
__std_type_info_destroy_list
memchr
__std_exception_copy
_except_handler4_common
__std_terminate
__CxxFrameHandler3
_CxxThrowException
wcsstr
memset
memmove
memcpy
_crt_atexit
_invalid_parameter_noinfo
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_cexit
_errno
_register_onexit_function
_initterm_e
_initterm
isspace
iswdigit
wcscpy_s
tolower
isprint
wcsncmp
_wcsicmp
wmemcpy_s
_wcsnicmp
isalnum
strnlen
wcsncpy
wcslen
wcscat
_wcslwr_s
strncpy
strlen
malloc
_recalloc
free
calloc
_callnewh
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf
_time64
rand
srand
wcstol
_wtoi
_mbschr
_mbsinc
AddUninstallStat
DLLPathRemoveFileSpec
DLLResetFileRelation
GetChannelId
GetFileVersion
GetPeerIDW
GetProgramDataPath
SendHttpMessageW
UnpinFromTaskbar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ