Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
54267efe6370310351a9a08bdacbcc04b8dd34ef0de781f8c85d81d3c61703a0_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
54267efe6370310351a9a08bdacbcc04b8dd34ef0de781f8c85d81d3c61703a0_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
54267efe6370310351a9a08bdacbcc04b8dd34ef0de781f8c85d81d3c61703a0_NeikiAnalytics.exe
Size
783KB
MD5
f3a8a58a9d83315f8c79815eed556d40
SHA1
5516d1fca53f0d4f9785c8c69a1603a795a9579e
SHA256
54267efe6370310351a9a08bdacbcc04b8dd34ef0de781f8c85d81d3c61703a0
SHA512
e1be935a5bd159820b3f7a63edd67a2e42855347098384ed1dea3bef9b326fc90a01b370dd0ada94e8fcfad867c49e87ca2155167c72fa44e16628977587910b
SSDEEP
12288:wR1Q/gqksduN3YyeRAv6/4ZS1ZzutszES2TaBil:w7Qhkso3YyeRAv6/4ZSuM8TaU
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
s:\MechaniCS\Lib\ReleaseMcGe142Wx64\FormDesigner.pdb
?SetObject@CxFtEdit@@QEAAXPEAUIMcObject@@HK@Z
?SetHistory@CxFtEdit@@QEAAHPEB_W0HH@Z
?AddToHistory@CxFtEdit@@QEAAHXZ
?GetTextConverter@CxFtEdit@@QEAA?AV?$MComQIPtr@UIMcTextConverter@@$1?_GUID_00000001_0007_aaaa_aaaa_050b00000000@@3U__s_GUID@@B@@XZ
?CreateMeasureButton@@YAPEAUHWND__@@PEAU1@W4MeasureShema@@K@Z
GetCommonImageListDisabled16x16
??1CxPopup@@UEAA@XZ
McHatchParamEdit
?Track@CxPopup@@QEAAHAEAVCRect@@PEAVCWnd@@@Z
??0CxPopup@@QEAA@PEAVCWnd@@W4BorderEnum@0@@Z
?SetImageList@CxToolBar@@QEAAPEAVCImageList@@PEAV2@@Z
?GetText@CxFtEdit@@QEAA?AVMcsStringW@@XZ
?SetText@CxFtEdit@@QEAAHPEB_W@Z
?SubclassWindow@CxFtEdit@@QEAAHPEAUHWND__@@@Z
??1CxFtEdit@@UEAA@XZ
??0CxFtEdit@@QEAA@XZ
??0CxDialog@@QEAA@IPEAVCWnd@@@Z
?SetElementInfo@IDBObjectContainer@@QEAAXPEAVIDBElement@@@Z
GetCommonImageList16x16
??1CxDialog@@UEAA@XZ
?OnExitSizeMoving@CxDialog@@UEAA_NXZ
?OnHelpCall@CxDialog@@UEAA_NXZ
?CompleteEditorCommand@CxDialog@@UEAA_NXZ
?BeginEditorCommand@CxDialog@@UEAA_NXZ
?WindowProc@CxDialog@@UEAA_JI_K_J@Z
?PreTranslateMessage@CxDialog@@UEAAHPEAUtagMSG@@@Z
?CreateStdButton@CxButtonLt@@QEAAHPEAVCWnd@@KH@Z
?UpdatePosition@CxToolBar@@QEAA_NH@Z
?AddButton@CxToolBar@@QEAA_NIHPEB_WI@Z
?Create@CxToolBar@@QEAA_NPEAVCWnd@@PEAUtagRECT@@I_N@Z
??1CxButtonLt@@UEAA@XZ
??0CxButtonLt@@QEAA@XZ
??1CxToolBar@@UEAA@XZ
??0CxToolBar@@QEAA@XZ
McHatchParamGetInfoString
_TrackMouseEvent
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DrawEx
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DragMove
PathAppendW
PathRemoveFileSpecW
PathIsRelativeW
ord11594
ord10119
ord1055
ord361
ord3713
ord8063
ord8501
ord12762
ord6549
ord4499
ord13757
ord12746
ord2473
ord1086
ord438
ord6634
ord1369
ord878
ord7394
ord11813
ord8731
ord11085
ord3951
ord3308
ord3307
ord3071
ord6000
ord13397
ord2697
ord8830
ord8901
ord8449
ord13199
ord4726
ord10704
ord7619
ord1489
ord13309
ord7780
ord5641
ord13307
ord12706
ord2212
ord4724
ord7775
ord5240
ord13568
ord3089
ord5907
ord2475
ord2187
ord6247
ord13767
ord10163
ord7233
ord6320
ord3756
ord296
ord1033
ord4656
ord2270
ord1641
ord6313
ord1149
ord528
ord1158
ord990
ord1454
ord6343
ord8900
ord9946
ord7922
ord5227
ord7450
ord7461
ord7460
ord5771
ord5062
ord5229
ord5083
ord5582
ord5339
ord6603
ord1439
ord3169
ord4324
ord4725
ord9041
ord5552
ord1491
ord8468
ord6724
ord363
ord489
ord1121
ord3952
ord13999
ord9159
ord5152
ord6619
ord8441
ord4086
ord6361
ord3803
ord2479
ord446
ord1089
ord3685
ord6285
ord2487
ord11854
ord6090
ord13761
ord4343
ord13864
ord8471
ord4727
ord7725
ord448
ord266
ord265
ord6505
ord1670
ord14098
ord6648
ord14211
ord13577
ord4722
ord6848
ord4084
ord6002
ord13401
ord3212
ord3209
ord7913
ord2698
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8823
ord11771
ord3718
ord11625
ord14209
ord8656
ord11902
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord9384
ord4352
ord5363
ord5080
ord11850
ord3172
ord3278
ord3279
ord3812
ord11806
ord2629
ord5723
ord13354
ord11406
ord6631
ord14217
ord7651
ord2967
GetModuleFileNameW
MultiByteToWideChar
GetCurrentThreadId
lstrlenW
lstrlenA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
OutputDebugStringW
GetLastError
HeapReAlloc
GetModuleHandleA
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
GetCurrentProcessId
SetCurrentDirectoryW
LoadLibraryW
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
GetModuleHandleExW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
lstrcpyW
GetACP
GlobalLock
GlobalUnlock
lstrcmpW
GetPrivateProfileIntW
lstrcpynW
VirtualQuery
InitializeSListHead
HeapSize
InitializeCriticalSectionEx
HeapFree
GetFileAttributesW
GetTickCount
MulDiv
ReadFile
GetFileSize
IsDebuggerPresent
DebugBreak
lstrcmpiW
IsBadWritePtr
CloseHandle
WriteFile
CreateFileW
GlobalSize
GetCurrentDirectoryW
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
RaiseException
GetProcAddress
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
OffsetRect
DrawFocusRect
EqualRect
SetWindowTextW
DrawTextW
InflateRect
UnionRect
SetRect
GetClientRect
SetRectEmpty
GetSysColor
InvalidateRect
GetParent
RegisterClipboardFormatW
SetClipboardData
EmptyClipboard
LoadCursorW
SetCursor
EnableMenuItem
CheckMenuItem
IsWindowVisible
SetWindowPos
RegisterClassW
UnregisterClassW
DestroyWindow
CreateWindowExW
SetWindowLongPtrW
GetWindowLongPtrW
DefWindowProcW
GetMenu
GetSubMenu
TrackPopupMenu
DestroyMenu
SetFocus
GetSystemMetrics
WindowFromPoint
GetCursor
TrackPopupMenuEx
LoadStringW
DestroyIcon
GetAsyncKeyState
PostMessageW
GetDlgCtrlID
GetMenuItemCount
GetMenuItemID
ShowWindow
RedrawWindow
AdjustWindowRect
CloseWindow
GetMessageW
TranslateMessage
IsDialogMessageW
DispatchMessageW
GetDesktopWindow
GetWindowDC
FillRect
ReleaseDC
SetWindowLongW
GetDC
PeekMessageW
CallWindowProcW
MapWindowPoints
IsWindowEnabled
GetSysColorBrush
GetFocus
BeginPaint
EndPaint
DrawTextA
SystemParametersInfoW
GetWindow
MoveWindow
GetWindowTextW
DialogBoxParamW
EndDialog
LoadImageW
GetDlgItem
SetDlgItemTextW
IntersectRect
IsRectEmpty
CreateDialogParamW
GetClassNameW
AdjustWindowRectEx
UpdateWindow
PtInRect
GetScrollInfo
KillTimer
ClientToScreen
SetTimer
CreatePopupMenu
DeleteMenu
AppendMenuW
MapDialogRect
MessageBoxA
SendMessageW
FindWindowA
IsWindow
FindWindowW
EnableWindow
LoadBitmapW
GetWindowRect
GetWindowLongW
GetKeyState
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
GetCursorPos
SetCapture
ReleaseCapture
ScreenToClient
CreateFontIndirectA
PlayEnhMetaFile
GetStockObject
GetDeviceCaps
DeleteDC
CreateFontW
StretchBlt
SetBrushOrgEx
SetStretchBltMode
Ellipse
Rectangle
CreateSolidBrush
SetBkMode
SetTextColor
DeleteObject
LineTo
MoveToEx
SetBkColor
SelectObject
CreatePen
SetPixel
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
GetOpenFileNameW
ChooseFontW
ChooseColorW
ShellExecuteW
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CLSIDFromString
SysFreeString
??0IMcObject@@IEAA@XZ
?RemoveLeft@McsStringW@@QEAAAEAV1@_J@Z
?FindNoCase@McsStringW@@QEBAHPEB_W_J@Z
?FormatD@McsStringW@@QEAAAEAV1@PEB_WZZ
?Replace@McsStringW@@QEAAH_W0@Z
?Trim@McsStringW@@QEAAHPEB_W@Z
?Remove@McsStringW@@QEAAH_W@Z
??1McSubentIdData@@QEAA@XZ
?isaDouble@McsStringW@@QEBA_NXZ
?MakeUpper@McsStringW@@QEAAXXZ
?FormatV@McsStringW@@QEAAAEAV1@PEB_WPEAD@Z
?Replace@McsStringW@@QEAAHPEB_W0@Z
?UnlockBuffer@McsStringW@@QEAAXXZ
?LockBuffer@McsStringW@@QEAAPEA_WXZ
?ComparePart@McsStringW@@QEBAHPEB_W_J@Z
?GetBufferSetLength@McsStringW@@QEAAPEA_W_J@Z
?isaLong@McsStringW@@QEBA_NXZ
?Find@McsStringW@@QEBAHPEB_W@Z
??$McsCopyElements@N@@YAXPEANPEBN_J@Z
??$McsDestructElements@N@@YAXPEAN_J@Z
??$McsConstructElements@N@@YAXPEAN_J@Z
?asDouble@McsStringW@@QEBANXZ
?Find@McsStringW@@QEBAHPEB_W_J@Z
??$McsCopyElements@E@@YAXPEAEPEBE_J@Z
??$McsConstructElements@E@@YAXPEAE_J@Z
??$McsDestructElements@E@@YAXPEAE_J@Z
?Find@McsStringW@@QEBAH_W@Z
?ReverseFind@McsStringW@@QEBAH_W@Z
?Insert@McsStringW@@QEAAH_J_W@Z
?addKind2@IMcObject@@IEAAXAEBUMcKindOfData@@_N@Z
??0McKindOfData@@QEAA@AEBU_GUID@@_J@Z
mcsGetCallerPtrModuleHandle
?RemoveRight@McsStringW@@QEAAAEAV1@_J@Z
??$McsCopyElements@UmcsWorkID@@@@YAXPEAUmcsWorkID@@PEBU0@_J@Z
??$McsDestructElements@UmcsWorkID@@@@YAXPEAUmcsWorkID@@_J@Z
gnErrCount
?Mid@McsStringW@@QEBA?AV1@_J@Z
?Release@IMcObject@@UEAAKXZ
?_groupPtrs@IMcObject@@UEAAJXZ
?_ungroupPtrs@IMcObject@@UEAAJXZ
?_getGroupPtrs@IMcObject@@UEAAJAEAV?$McsMapEx@PEAUIMcObject@@PEAU1@HH@@_N@Z
?_getGroupPtr@IMcObject@@UEBAPEAU1@XZ
?_getRefCount@IMcObject@@UEBAKXZ
?_getGrpRefCount@IMcObject@@UEBAKXZ
?isKindOf@IMcObject@@UEBA_NAEBU_GUID@@@Z
?getSpecificKindPtr@IMcObject@@UEAAPEAXAEBU_GUID@@@Z
?invalidate@IMcObject@@UEAAXXZ
??1McKindOfDataOptArrPtr@@QEAA@XZ
?Left@McsStringW@@QEBA?AV1@_J@Z
?AddRef@IMcObject@@UEAAKXZ
mcsGetIntOptionW
??YMcsStringW@@QEAAAEBV0@_W@Z
??H@YA?AVMcsStringW@@AEBV0@0@Z
?asLong@McsStringW@@QEBAJXZ
?Insert@McsStringW@@QEAAH_JPEB_W@Z
?SetAt@McsStringW@@QEAAX_J_W@Z
??BMcsStringA@@QEBAPEBDXZ
?GetLength@McsStringA@@QEBAHXZ
??1McsStringA@@QEAA@XZ
?asMB@McsStringW@@QEBA?AVMcsStringA@@I@Z
??H@YA?AVMcsStringW@@PEB_WAEBV0@@Z
?Mid@McsStringW@@QEBA?AV1@_J0@Z
?Empty@McsStringW@@QEAAXXZ
?Delete@McsStringW@@QEAAH_J0@Z
??H@YA?AVMcsStringW@@AEBV0@PEB_W@Z
?Right@McsStringW@@QEBA?AV1@_J@Z
?GetBuffer@McsStringW@@QEAAPEA_W_J@Z
?ReleaseBuffer@McsStringW@@QEAAX_J@Z
?Format@McsStringW@@QEAAAEAV1@PEB_WZZ
?LoadStringW@McsStringW@@QEAA_NPEAUHINSTANCE__@@I@Z
??$McsCopyElements@H@@YAXPEAHPEBH_J@Z
??$McsConstructElements@H@@YAXPEAH_J@Z
??$McsDestructElements@H@@YAXPEAH_J@Z
??YMcsStringW@@QEAAAEBV0@PEB_W@Z
??YMcsStringW@@QEAAAEBV0@AEBV0@@Z
?GetLength@McsStringW@@QEBAHXZ
?Create@McsPlex@@SAPEAU1@AEAPEAU1@_K1@Z
?FreeDataChain@McsPlex@@QEAAXXZ
?TrimRight@McsStringW@@QEAAXXZ
?Split@McsStringW@@QEBAHPEB_WAEAV?$McsArray@VMcsStringW@@PEB_W@@@Z
??0McsStringW@@QEAA@PEB_WPEAUHINSTANCE__@@@Z
??$McsConstructElements@VMcsStringW@@@@YAXPEAVMcsStringW@@_J@Z
??$McsCopyElements@VMcsStringW@@@@YAXPEAVMcsStringW@@PEBV0@_J@Z
??$McsDestructElements@VMcsStringW@@@@YAXPEAVMcsStringW@@_J@Z
??$McsHashKey@PEB_W@@YAIPEB_W@Z
??0McsStringW@@QEAA@AEBV0@@Z
??4McsStringW@@QEAAAEBV0@AEBV0@@Z
??BMcsStringW@@QEBAPEB_WXZ
??4McsStringW@@QEAAAEBV0@PEB_W@Z
??1McsStringW@@QEAA@XZ
?McsGetEmptyStringW@@YAAEBVMcsStringW@@XZ
??BMCSVariant@@QEBAHXZ
?GetAsString@MCSVariant@@QEBAAEBVMcsStringW@@XZ
?IsNull@MCSVariant@@QEBAHXZ
??4MCSVariant@@QEAAAEAU0@AEBU0@@Z
??0MCSVariant@@QEAA@AEBU0@@Z
?GetType@MCSVariant@@QEBA?AW4Type@1@XZ
?StringArray@MCSVariant@@QEAAAEAV?$McsArray@VMcsStringW@@PEB_W@@XZ
??4MCSVariant@@QEAAAEAU0@AEBVMcsStringW@@@Z
?StringArray@MCSVariant@@QEBAAEBV?$McsArray@VMcsStringW@@PEB_W@@XZ
??0MCSVariant@@QEAA@AEBVMcsStringW@@@Z
??0MCSVariant@@QEAA@_N@Z
??4MCSVariant@@QEAAAEAU0@PEB_W@Z
gpMcBrowser
??BMCSVariant@@QEBANXZ
?DoubleArray@MCSVariant@@QEAAAEAV?$McsArray@NN@@XZ
??4MCSVariant@@QEAAAEAU0@AEBV?$McsArray@VMcsStringW@@PEB_W@@@Z
?IntArray@MCSVariant@@QEAAAEAV?$McsArray@HH@@XZ
gpMcNativeGate
??0CxImage@@QEAA@XZ
??1CxImage@@UEAA@XZ
?setHEMF@CxImage@@QEAAJPEAUHENHMETAFILE__@@_N@Z
??BMCSVariant@@QEBA?AVMcGePoint3d@@XZ
??BMCSVariant@@QEBA?AVMcGeVector3d@@XZ
gpMcDocManager
??4MCSVariant@@QEAAAEAU0@N@Z
??0MCSVariant@@QEAA@XZ
??4MCSVariant@@QEAAAEAU0@_N@Z
??4MCSVariant@@QEAAAEAU0@H@Z
??0MCSVariant@@QEAA@PEB_W@Z
?IntArray@MCSVariant@@QEBAAEBV?$McsArray@HH@@XZ
?DoubleArray@MCSVariant@@QEBAAEBV?$McsArray@NN@@XZ
??4MCSVariant@@QEAAAEAU0@AEBUmcsWorkID@@@Z
??9MCSVariant@@QEBA_NAEBU0@@Z
?Clear@MCSVariant@@QEAAXXZ
?UnknownData@MCSVariant@@QEAAAEAV?$McsArray@EE@@XZ
??1MCSVariant@@QEAA@XZ
??8MCSVariant@@QEBA_NAEBU0@@Z
??0mcsComplexWorkID@@QEAA@XZ
??4MCSVariant@@QEAAAEAU0@K@Z
?load@CxImage@@QEAAJPEAUHINSTANCE__@@PEB_W@Z
?save@CxImage@@QEBAJAEAV?$McsArray@EE@@_N@Z
?getWidth@CxImage@@QEBAHXZ
?getHeight@CxImage@@QEBAHXZ
??BCxImage@@QEBAPEAUHENHMETAFILE__@@XZ
?Transparents@CxImage@@QEAAX_N@Z
?getHBMP@CxImage@@QEAAPEAUHBITMAP__@@JHH@Z
?load@CxImage@@QEAAJPEB_WPEAUHWND__@@@Z
?load@CxImage@@QEAAJPEBXK@Z
?clear@CxImage@@QEAAXXZ
?ChangeType@MCSVariant@@QEAAJW4Type@1@@Z
?UnknownData@MCSVariant@@QEBAAEBV?$McsArray@EE@@XZ
?getIProperty@McGeomExtendedPropArray@@QEBAHW4EMcGeomExtendedProperties@@@Z
?gPvTol@@3VMcGeTol@@A
gpMcNotificator
gpMcContext
gpMcStyleManager
?mcsCreateStream@@YAJAEAV?$MComQIPtr@UIMcsStream@@$1?_GUID_0000000c_0001_aaaa_aaaa_050b00000000@@3U__s_GUID@@B@@K@Z
??BMCSVariant@@QEBAPEB_WXZ
?SetType@MCSVariant@@QEAAXW4Type@1@@Z
gpMcObjManager
??BMCSVariant@@QEBA_NXZ
?isEqualTo@McGePoint3d@@QEBA_NAEBV1@AEBVMcGeTol@@@Z
??0McGePoint3d@@QEAA@AEBV0@@Z
??0McGePoint3d@@QEAA@XZ
??0McGeVector3d@@QEAA@XZ
??0McGePoint2d@@QEAA@XZ
?isEqualTo@McGeVector3d@@QEBA_NAEBV1@AEBVMcGeTol@@@Z
??0McGeVector3d@@QEAA@AEBV0@@Z
__CxxFrameHandler4
wcsrchr
_purecall
wcsstr
__std_terminate
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
memmove
memcpy
__RTDynamicCast
_CxxThrowException
_recalloc
free
_wunlink
localeconv
_wcsicmp
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
sin
ceil
MCSInit
MCSReInit
MCSUnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ