Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7b387ab2db73e58f4861d0eb2f5c4fe43ae43fd8f3bd8ff1bc8802b937c13208_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7b387ab2db73e58f4861d0eb2f5c4fe43ae43fd8f3bd8ff1bc8802b937c13208_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
7b387ab2db73e58f4861d0eb2f5c4fe43ae43fd8f3bd8ff1bc8802b937c13208_NeikiAnalytics.exe
Size
434KB
MD5
1869a4f92476b7a82c62528f9e47d6a0
SHA1
18574c7815334842d5cd0060ffb0f4d8b90a51c8
SHA256
7b387ab2db73e58f4861d0eb2f5c4fe43ae43fd8f3bd8ff1bc8802b937c13208
SHA512
3a7bfd49c66c94175a66652875315755f9c90734dac1be81d223d2da81e4fa89f0296f9d2d64d597a7fdbb3616f2e0f55d4926eb0f49a4d551d343806366d438
SSDEEP
6144:UF2r8mO+w77pWOeC/d3sdPyuRR8kyioHW:UyboVWOridPvz8knoHW
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
ord3
ord1
ord7
ord5
ord2
ord3832
ord1920
ord2931
ord5224
ord5226
ord3948
ord4568
ord5230
ord5213
ord5566
ord2838
ord4481
ord3333
ord566
ord757
ord2248
ord297
ord1489
ord2902
ord299
ord2933
ord6118
ord3830
ord4035
ord781
ord5403
ord2468
ord762
ord266
ord265
ord3684
ord4232
ord3164
ord587
ord753
ord3210
ord1934
ord2368
ord3204
ord1280
ord3161
ord1063
ord3302
ord1279
ord5637
ord2372
ord1545
ord563
ord5563
ord3997
ord6037
ord2271
ord5642
ord5731
ord1425
ord602
ord5727
ord347
ord5613
ord6017
ord1009
ord2160
ord3989
ord2367
ord3641
ord4353
ord3163
ord4735
ord605
ord354
ord4580
ord709
ord501
ord2654
ord4320
ord1191
ord1187
ord1203
ord3919
ord1629
ord1628
ord6103
ord5141
ord5160
ord1609
ord4457
ord765
ord760
ord2566
ord5315
ord1320
ord1312
ord2146
ord5832
ord5831
ord2163
ord3988
ord6089
ord6064
ord4124
ord5802
ord2653
ord3759
ord6066
ord4117
ord4114
ord2718
ord3399
ord5571
ord5944
ord3114
ord3906
ord5947
ord5382
ord2058
ord1950
ord2942
ord3169
ord454
ord686
ord1054
ord763
ord4125
ord1793
ord6090
ord6236
ord1230
ord5235
ord5233
ord2390
ord2400
ord2398
ord2396
ord2392
ord2415
ord2403
ord1027
ord1614
ord1612
ord1613
ord3620
ord2250
ord314
ord2253
ord2252
ord578
ord911
ord304
ord2168
ord5655
ord1084
ord1903
ord1645
ord1586
ord5915
ord1620
ord1617
ord3946
ord1402
ord4244
ord5152
ord1908
ord5073
ord6275
ord4185
ord5214
ord3403
ord4722
ord4282
ord1600
ord5960
ord923
ord928
ord932
ord3909
ord930
ord934
ord2410
ord2394
ord2413
ord2408
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord581
ord1167
ord1092
ord1209
ord1177
ord1175
ord1201
ord1120
ord371
ord1098
ord1208
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord3683
ord1206
ord310
ord2657
ord3761
ord876
ord6067
ord784
ord1794
ord1100
ord3182
ord4262
ord5203
ord1401
ord5912
ord1551
ord1670
ord1671
ord2020
ord4890
ord4212
ord5182
ord730
ord764
ord572
ord3304
ord4261
ord4486
ord3949
ord2644
ord3709
ord3719
ord3718
ord2991
ord2533
ord2646
ord2540
ord2862
ord2714
ord4307
ord2835
ord2731
ord2537
ord5200
ord1599
ord1655
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord315
ord1037
_except_handler3
__CxxFrameHandler
free
??0exception@@QAE@ABV0@@Z
_CxxThrowException
_strdup
??1exception@@UAE@XZ
??0exception@@QAE@XZ
wcscmp
_mbsnbcpy
_mbscmp
strncat
_itoa
_snprintf
wcslen
strncpy
atoi
sprintf
__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
memset
memmove
_purecall
_vsnprintf
clock
toupper
_time64
_atoi64
_i64toa
ceil
_localtime64
strtol
printf
_stat64
_utime64
strchr
_resetstkoflw
malloc
time
atol
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentThreadId
ExitProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetWindowsDirectoryW
GetVolumeInformationW
GetFileAttributesA
SetFileAttributesA
GetTickCount
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetLastError
ReleaseMutex
WaitForSingleObject
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FormatMessageA
lstrlenA
LocalAlloc
MultiByteToWideChar
LocalFree
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryExW
LoadLibraryA
FreeLibrary
OpenMutexA
CreateMutexA
CreateFileA
CloseHandle
ReadFile
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetUserDefaultLCID
CopyRect
SendMessageA
MessageBoxA
wsprintfA
EnableWindow
SetRect
SendMessageW
FindWindowA
LoadCursorA
SetCursor
CharLowerBuffA
ReleaseDC
GetDC
SetWindowRgn
PostMessageA
InflateRect
IsWindow
ReleaseCapture
GetParent
SetCapture
InvalidateRect
UpdateWindow
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
LoadBitmapA
LoadImageA
DeleteDC
GetObjectA
CreateBitmap
CreateCompatibleBitmap
CreateRectRgn
PtInRegion
CreateSolidBrush
SetStretchBltMode
CreateDIBSection
SelectObject
ExtCreateRegion
CombineRgn
CreateFontIndirectA
DeleteObject
GetStockObject
GetTextExtentPoint32A
ExtTextOutA
StretchBlt
BitBlt
CreateCompatibleDC
SetFileSecurityW
GetSidLengthRequired
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
InitializeSid
GetSidSubAuthority
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
MakeAbsoluteSD
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetAclInformation
InitializeAcl
AddAce
CopySid
InitializeSecurityDescriptor
GetSecurityDescriptorControl
IsValidSid
GetLengthSid
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
ShellExecuteA
SHGetSpecialFolderPathW
PathFileExistsW
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstance
CoTaskMemFree
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantCopy
VariantChangeType
SafeArrayCreateVector
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
GetErrorInfo
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xran@_String_base@std@@QBEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??1strstream@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Xlen@_String_base@std@@QBEXXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?width@ios_base@std@@QAEHH@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??1strstreambuf@std@@UAE@XZ
?freeze@strstreambuf@std@@QAEX_N@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
Netbios
?SAR_UsePermissionsCache@@YAX_N@Z
Dispatch_GetLiveShareProfileID
Dispatch_InvokeUpdate
GetCertificateItemValue
GetFeatureEnabled
GetFeatureEnabledGroup
GetFeatureGroup
GetFeatureGroupActivationDetail
GetRoxioKeyContents
LaunchPermission
LaunchPermission_Str
Restricted_GetFeatureEnabled
Restricted_InitProcess
SAR_Dispatch_ActivateComponent
SAR_Dispatch_ActivateProduct
SAR_Dispatch_ActivateProductGroup
SAR_Dispatch_DoRegister
SAR_Dispatch_GetActivationDetail
SAR_Dispatch_IncrementUsage
SAR_Dispatch_IsActivated
SAR_Dispatch_IsRegistered
SAR_Dispatch_ReleaseActivation
SAR_GetCDKey
Upgrade
UseCodecPermission
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ