Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1142580077b209f27bf123288a1d704ab5e9260e9224ffc116a8687a7734fef2_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1142580077b209f27bf123288a1d704ab5e9260e9224ffc116a8687a7734fef2_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
1142580077b209f27bf123288a1d704ab5e9260e9224ffc116a8687a7734fef2_NeikiAnalytics.exe
Size
927KB
MD5
87ddc804ac04f77511ff9a8f3bbf8070
SHA1
69f273fc7aefc6a6dc5b9b6c72cc31eb0698ac2c
SHA256
1142580077b209f27bf123288a1d704ab5e9260e9224ffc116a8687a7734fef2
SHA512
aa89dbc7acfc311167f1ec650ca3edd9beb17dab2eb3c8b0426bbb73dd14cae68b26de6916b5dd8c9b006f3688fffd632c00e7120fdcd2913d773efef40593b7
SSDEEP
24576:W3cRfLI77Kk3//UjIeN1qJUpGQmeUEH/4QrjWWN0eGl:dG7ekP/eNGIA
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\Users\qt\work\qt\qtbase\plugins\sqldrivers\qsqlite.pdb
?staticMetaObject@QSqlDriver@@2UQMetaObject@@B
??1QSqlDriverPlugin@@UAE@XZ
?qt_metacast@QSqlDriver@@UAEPAXPBD@Z
?qt_metacall@QSqlDriver@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??0QSqlDriverPlugin@@QAE@PAVQObject@@@Z
?qt_metacall@QSqlDriverPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QSqlDriverPlugin@@UAEPAXPBD@Z
?staticMetaObject@QSqlDriverPlugin@@2UQMetaObject@@B
?stripDelimiters@QSqlDriver@@UBE?AVQString@@ABV2@W4IdentifierType@1@@Z
?sqlStatement@QSqlDriver@@UBE?AVQString@@W4StatementType@1@ABV2@ABVQSqlRecord@@_N@Z
?setSelect@QSqlResult@@MAEX_N@Z
?setQuery@QSqlResult@@MAEXABVQString@@@Z
?setNumericalPrecisionPolicy@QSqlCachedResult@@MAEXW4NumericalPrecisionPolicy@QSql@@@Z
?setLastError@QSqlResult@@MAEXABVQSqlError@@@Z
?setLastError@QSqlDriver@@MAEXABVQSqlError@@@Z
?setForwardOnly@QSqlResult@@MAEX_N@Z
?setAt@QSqlResult@@MAEXH@Z
?setActive@QSqlResult@@MAEX_N@Z
?savePrepare@QSqlResult@@MAE_NABVQString@@@Z
?nextResult@QSqlResult@@MAE_NXZ
?isOpen@QSqlDriver@@UBE_NXZ
?isNull@QSqlCachedResult@@MAE_NH@Z
?isIdentifierEscaped@QSqlDriver@@UBE_NABVQString@@W4IdentifierType@1@@Z
?formatValue@QSqlDriver@@UBE?AVQString@@ABVQSqlField@@_N@Z
?fieldSerial@QSqlResultPrivate@@UBE?AVQString@@H@Z
?fetchPrevious@QSqlCachedResult@@MAE_NXZ
?fetchNext@QSqlCachedResult@@MAE_NXZ
?fetchLast@QSqlCachedResult@@MAE_NXZ
?fetchFirst@QSqlCachedResult@@MAE_NXZ
?fetch@QSqlCachedResult@@MAE_NH@Z
?data@QSqlCachedResult@@MAE?AVQVariant@@H@Z
?cancelQuery@QSqlDriver@@UAE_NXZ
?bindValue@QSqlResult@@MAEXHABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?bindValue@QSqlResult@@MAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
??1QSqlCachedResultPrivate@@UAE@XZ
??0QSqlCachedResultPrivate@@QAE@PAVQSqlCachedResult@@PBVQSqlDriver@@@Z
?virtual_hook@QSqlCachedResult@@MAEXHPAX@Z
?clearValues@QSqlCachedResult@@IAEXXZ
?cleanup@QSqlCachedResult@@IAEXXZ
?init@QSqlCachedResult@@IAEXH@Z
??0QSqlCachedResult@@IAE@AAVQSqlCachedResultPrivate@@@Z
?numericalPrecisionPolicy@QSqlResult@@IBE?AW4NumericalPrecisionPolicy@QSql@@XZ
?boundValues@QSqlResult@@IBEAAV?$QVector@VQVariant@@@@XZ
?driver@QSqlResult@@IBEPBVQSqlDriver@@XZ
?isSelect@QSqlResult@@IBE_NXZ
?isActive@QSqlResult@@IBE_NXZ
?lastError@QSqlResult@@IBE?AVQSqlError@@XZ
??1QSqlResult@@UAE@XZ
?next@QSqlQuery@@QAE_NXZ
?value@QSqlQuery@@QBE?AVQVariant@@H@Z
?exec@QSqlQuery@@QAE_NABVQString@@@Z
?setForwardOnly@QSqlQuery@@QAEX_N@Z
?lastError@QSqlQuery@@QBE?AVQSqlError@@XZ
??1QSqlQuery@@QAE@XZ
??0QSqlQuery@@QAE@PAVQSqlResult@@@Z
?append@QSqlIndex@@QAEXABVQSqlField@@@Z
??1QSqlIndex@@QAE@XZ
??0QSqlIndex@@QAE@ABVQString@@0@Z
?count@QSqlRecord@@QBEHXZ
?clear@QSqlRecord@@QAEXXZ
?isEmpty@QSqlRecord@@QBE_NXZ
?append@QSqlRecord@@QAEXABVQSqlField@@@Z
??1QSqlRecord@@QAE@XZ
??0QSqlRecord@@QAE@ABV0@@Z
??0QSqlRecord@@QAE@XZ
?setAutoValue@QSqlField@@QAEX_N@Z
?setSqlType@QSqlField@@QAEXH@Z
?setDefaultValue@QSqlField@@QAEXABVQVariant@@@Z
?setRequiredStatus@QSqlField@@QAEXW4RequiredStatus@1@@Z
??1QSqlField@@QAE@XZ
??0QSqlField@@QAE@ABVQString@@W4Type@QVariant@@0@Z
?isValid@QSqlError@@QBE_NXZ
?databaseText@QSqlError@@QBE?AVQString@@XZ
??1QSqlError@@QAE@XZ
??0QSqlError@@QAE@ABVQString@@0W4ErrorType@0@0@Z
?setOpenError@QSqlDriver@@MAEX_N@Z
?setOpen@QSqlDriver@@MAEX_N@Z
??0QSqlDriver@@IAE@AAVQSqlDriverPrivate@@PAVQObject@@@Z
?notification@QSqlDriver@@QAEXABVQString@@W4NotificationSource@1@ABVQVariant@@@Z
?notification@QSqlDriver@@QAEXABVQString@@@Z
?isOpenError@QSqlDriver@@QBE_NXZ
??1QSqlDriver@@UAE@XZ
?shared_null@QHashData@@2U1@B
?shared_null@QListData@@2UData@1@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
??0QMessageLogger@@QAE@PBDH0@Z
?warning@QMessageLogger@@QBAXPBDZZ
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?invokeMethod@QMetaObject@@SA_NPAVQObject@@PBDW4ConnectionType@Qt@@VQGenericReturnArgument@@VQGenericArgument@@444444444@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?allocate@QArrayData@@SAPAU1@IIIV?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPAU1@II@Z
??0QByteArray@@QAE@PBDH@Z
??1QByteArray@@QAE@XZ
?constData@QByteArray@@QBEPBDXZ
??0QString@@QAE@XZ
??0QString@@QAE@PBVQChar@@H@Z
??0QString@@QAE@VQLatin1String@@@Z
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
?constData@QString@@QBEPBVQChar@@XZ
?clear@QString@@QAEXXZ
?at@QString@@QBE?BVQChar@@H@Z
?arg@QString@@QBE?AV1@VQLatin1String@@HVQChar@@@Z
?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?contains@QString@@QBE_NABVQRegularExpression@@@Z
?left@QString@@QBE?AV1@H@Z
?mid@QString@@QBE?AV1@HH@Z
?startsWith@QString@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?startsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?endsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?toLower@QString@@QGBE?AV1@XZ
?toLower@QString@@QHAE?AV1@XZ
?trimmed@QString@@QHAE?AV1@XZ
?insert@QString@@QAEAAV1@HVQChar@@@Z
?append@QString@@QAEAAV1@VQChar@@@Z
?append@QString@@QAEAAV1@ABV1@@Z
??YQString@@QAEAAV0@VQChar@@@Z
?remove@QString@@QAEAAV1@VQChar@@W4CaseSensitivity@Qt@@@Z
?replace@QString@@QAEAAV1@VQChar@@VQLatin1String@@W4CaseSensitivity@Qt@@@Z
?splitRef@QString@@QBE?AV?$QVector@VQStringRef@@@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?utf16@QString@@QBEPBGXZ
?toUtf8@QString@@QGBE?AVQByteArray@@XZ
?toLocal8Bit@QString@@QGBE?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@PBDH@Z
?number@QString@@SA?AV1@HH@Z
??8@YA_NABVQString@@0@Z
??8QString@@QBE_NVQLatin1String@@@Z
?mid@QStringRef@@QBE?AV1@HH@Z
?startsWith@QStringRef@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?startsWith@QStringRef@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?trimmed@QStringRef@@QBE?AV1@XZ
?toInt@QStringRef@@QBEHPA_NH@Z
??8@YA_NVQLatin1String@@ABVQStringRef@@@Z
?qHash@@YAIABVQString@@I@Z
?detach@QListData@@QAEPAUData@1@H@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?dispose@QListData@@SAXPAUData@1@@Z
?append@QListData@@QAEPAPAXXZ
?remove@QListData@@QAEXH@Z
?QStringList_contains@QtPrivate@@YA_NPBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
?allocateNode@QHashData@@QAEPAXH@Z
?freeNode@QHashData@@QAEXPAX@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?hasShrunk@QHashData@@QAEXXZ
?rehash@QHashData@@QAEXH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?toString@QTime@@QBE?AVQString@@VQStringView@@@Z
??1QDateTime@@QAE@XZ
?toString@QDateTime@@QBE?AVQString@@W4DateFormat@Qt@@@Z
??0QVariant@@QAE@XZ
??1QVariant@@QAE@XZ
?shared_null@QArrayData@@2QBU1@B
??0QVariant@@QAE@HPBXI@Z
??0QVariant@@QAE@ABV0@@Z
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@_J@Z
??0QVariant@@QAE@N@Z
??0QVariant@@QAE@ABVQByteArray@@@Z
??0QVariant@@QAE@ABVQString@@@Z
??4QVariant@@QAEAAV0@ABV0@@Z
??0QVariant@@QAE@$$QAV0@@Z
??4QVariant@@QAEAAV0@$$QAV0@@Z
?type@QVariant@@QBE?AW4Type@1@XZ
?isNull@QVariant@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
?toLongLong@QVariant@@QBE_JPA_N@Z
?toDouble@QVariant@@QBENPA_N@Z
?toString@QVariant@@QBE?AVQString@@XZ
?toTime@QVariant@@QBE?AVQTime@@XZ
?toDateTime@QVariant@@QBE?AVQDateTime@@XZ
?toList@QVariant@@QBE?AV?$QList@VQVariant@@@@XZ
?constData@QVariant@@QBEPBXXZ
??0QObjectPrivate@@QAE@H@Z
??1QObjectPrivate@@UAE@XZ
??0QRegularExpression@@QAE@ABVQString@@V?$QFlags@W4PatternOption@QRegularExpression@@@@@Z
??1QRegularExpression@@QAE@XZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
??0QVariant@@QAE@W4Type@0@@Z
InitializeSListHead
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
AreFileApisANSI
ReadFile
HeapCreate
HeapFree
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
LocalFree
LockFileEx
GetFileSize
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
memcpy
memset
strrchr
memmove
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
free
malloc
_msize
realloc
_callnewh
qsort
strncmp
strcspn
_localtime64_s
_beginthreadex
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_endthreadex
_libm_sse2_log_precise
_except1
qt_plugin_instance
qt_plugin_query_metadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ