Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2d211ac87e449a0f60e0a0f493e60ee62deaa1bb72830fdd28c45405e5faf7e1_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d211ac87e449a0f60e0a0f493e60ee62deaa1bb72830fdd28c45405e5faf7e1_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
2d211ac87e449a0f60e0a0f493e60ee62deaa1bb72830fdd28c45405e5faf7e1_NeikiAnalytics.exe
Size
123KB
MD5
7f169f194f2792726eb10917e75d77d0
SHA1
cb5e24f9ef9574deff25cb0a160bc8f1ffda4cb2
SHA256
2d211ac87e449a0f60e0a0f493e60ee62deaa1bb72830fdd28c45405e5faf7e1
SHA512
1956b049853d56480662ccc2c5d2feec4bf71e3ed97d9b6f9d046e833f89c74c31da92c393c867f8d793cdee7a11154f3ceb7a6bc109ddcbd1e3ddd7790009f8
SSDEEP
3072:azFEMFSeTG6YsB8MNyOQMD16h5Gih0SCy1KxXDB:aPhS0j/D19RB
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\works\10720\UniAccess3_1\src\UniAccessAgent\MozartBreath\MozartBreathHMA\x64\Release\MozartBreathHMA.pdb
?end_class@UniARCWriter@@QEAAH_J@Z
?begin_class@UniARCWriter@@QEAA_JXZ
?begin_main@UniARCWriter@@QEAAHXZ
??1UniARCWriter@@QEAA@XZ
??0UniARCWriter@@QEAA@H@Z
?get_bytes_from_file@HFileReader@@SAHAEBVHString@@AEAPEAEAEA_J_J@Z
?ins@MBCGlobal@@SAAEAV1@XZ
?get_smm@MBCGlobal@@QEAAPEAVHShareMemMgr@@XZ
?get_debug@HFileLog@@SA?AVHString@@HPEBGH@Z
?system_debug_log@HFileLog@@QEAAHAEBVHString@@@Z
?ins@HFileLog@@SAAEAV1@XZ
??1MBCAutoSetReEntry@@QEAA@XZ
??0MBCAutoSetReEntry@@QEAA@XZ
?Sleep@HEnvironment@@YAXI@Z
?get_user_name@HEnvironment@@YA?AVHString@@XZ
??1MBCAutoSetReEntryReg@@QEAA@XZ
??0MBCAutoSetReEntryReg@@QEAA@XZ
?write@HShareMemMgr@@QEAAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@HPEBDH_N@Z
?get_global_debugview_enable@HString@@SA_NXZ
?empty@HString@@QEBA_NXZ
??0HMutex@@QEAA@XZ
?get_map_size@UniARCReader@@QEAA_JHH@Z
?unlock@HMutexEx@@QEAAHXZ
?lock@HMutexEx@@QEAAHXZ
?init@HMutexEx@@QEAAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@K@Z
??1HMutexEx@@QEAA@XZ
??0HMutexEx@@QEAA@XZ
??1HAutoMutex@@QEAA@XZ
??0HAutoMutex@@QEAA@PEAVHMutex@@@Z
?get_file_cotent@HFileMap@@QEAAPEADAEAH@Z
?read_init@HFileMap@@QEAAHAEBVHString@@@Z
??1HFileMap@@UEAA@XZ
?write_int32@UniARCWriter@@QEAAHH@Z
??H@YA?AVHString@@AEBV0@0@Z
?get_policy_version@HMZShareDataMgr@@QEAAHAEBVHString@@@Z
?pins@HMZShareDataMgr@@SAPEAV1@XZ
?get_agent_path_policy@HInsLocateMgr@@QEAA?AVHString@@_N@Z
?pins@HInsLocateMgr@@SAPEAV1@XZ
?is_super@MBCGlobal@@QEAA_NXZ
?is_equal@HString@@QEBA_NAEBV1@_N@Z
?is_agent_online@MBCGlobal@@QEAA_NXZ
?is_exe_in_config@MBCIniConfig@@QEAA_NAEBV?$vector@VHString@@V?$allocator@VHString@@@std@@@std@@@Z
?ins@MBCIniConfig@@SAAEAV1@XZ
?read_string@HIniFileHelper@@QEAAHAEBVHString@@0AEAV2@@Z
?setFile@HIniFileHelper@@QEAAXAEBVHString@@@Z
??1HIniFileHelper@@QEAA@XZ
??0HIniFileHelper@@QEAA@XZ
?get_vt_str_by_sep@HString@@QEBAHAEAV?$vector@VHString@@V?$allocator@VHString@@@std@@@std@@AEBV1@@Z
?pins@HDynSysAPICall@@SAPEAV1@XZ
?generateLVUUID@UUIDLVGenerate@@QEAA?AVHString@@XZ
?pins@UUIDLVGenerate@@SAPEAV1@XZ
?is_fun_should_hook@MBCIniConfig@@QEAA_NAEBVHString@@@Z
?add_cb@MBCProcess@@QEAAHPEAVMBCProcessCallback@@@Z
?ins@MBCProcess@@SAAEAV1@XZ
?create_proc@MBCProcessCallback@@UEAAHAEBVHString@@000AEAV2@1AEAVMBCCallbackResult@@@Z
??0MBCProcessCallback@@QEAA@XZ
?is_not_equal@HString@@QEBA_NAEBV1@_N@Z
??1MBCProcessCallback@@UEAA@XZ
?end_main@UniARCWriter@@QEAAHXZ
?write_int64@UniARCWriter@@QEAAH_J@Z
?write_bool@UniARCWriter@@QEAAH_N@Z
?write_wstring@UniARCWriter@@QEAAHAEBVHString@@@Z
??0UniARCReader@@QEAA@XZ
??1UniARCReader@@QEAA@XZ
?begin_main@UniARCReader@@QEAAHPEBD_J@Z
?begin_class@UniARCReader@@QEAAHXZ
?end_class@UniARCReader@@QEAAHXZ
?read_int32@UniARCReader@@QEAAHAEAH@Z
?read_int64@UniARCReader@@QEAAHAEA_J@Z
?read_bool@UniARCReader@@QEAAHAEA_N@Z
?read_wstring@UniARCReader@@QEAAHAEAVHString@@@Z
?vt_read_wstring@UniARCReader@@QEAAHAEAV?$vector@VHString@@V?$allocator@VHString@@@std@@@std@@@Z
?get_ct_class_size@UniARCReader@@QEAA_JXZ
?append_ct_class_head@UniARCArrayBytes@@QEAAH_N_J@Z
??0HString@@QEAA@AEBV0@@Z
??0HString@@QEAA@_N@Z
??0HString@@QEAA@_JH@Z
??0HString@@QEAA@HH@Z
??0HString@@QEAA@PEBG@Z
??0HString@@QEAA@XZ
??6HString@@QEAAAEAV0@AEBV0@@Z
??1HString@@UEAA@XZ
??4HString@@QEAAAEAV0@AEBV0@@Z
?clear@HString@@QEAAXXZ
??0HFileMap@@QEAA@XZ
??M@YA_NAEBVHString@@0@Z
PublicService
_amsg_exit
_XcptFilter
__dllonexit
_lock
_onexit
_unlock
_initterm
memmove
_callnewh
malloc
_CxxThrowException
free
??0exception@@QEAA@AEBQEBDH@Z
strcmp
memset
memcpy
?terminate@@YAXXZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
__C_specific_handler
_errno
__CxxFrameHandler
??1type_info@@UEAA@XZ
VirtualProtect
GetModuleHandleA
GetCurrentThread
GetProcAddress
GetLastError
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtectEx
VirtualQueryEx
SetLastError
GetModuleHandleW
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
DllMainInit
PublicService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ