Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
acba73db5c42c692a1c93b002d2455c24607b0c952716975bf30746ca09c77bd_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
acba73db5c42c692a1c93b002d2455c24607b0c952716975bf30746ca09c77bd_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
acba73db5c42c692a1c93b002d2455c24607b0c952716975bf30746ca09c77bd_NeikiAnalytics.exe
Size
331KB
MD5
998f7e2f8b145f5200cd417e98923e90
SHA1
5123bc41c3e79229d563d351522398180a96854f
SHA256
acba73db5c42c692a1c93b002d2455c24607b0c952716975bf30746ca09c77bd
SHA512
f3c883a83f918e7a45d9039a411f083f987abcc4a9194412e68d5f65533aac51b307156d169be8019752a1c3d2a011f3dc6632ff859613adc443635b1c0e09b5
SSDEEP
6144:gepnKlhOTa4VxgOEupCigyM/NXhwFgdy+7dV39BfanT+6vQNarKm4p3uCsQgSThZ:LghOnb9DgD1X+/+Jt9BfanT+6vQNarKZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\dbs\sh\odct\0217_154505_1\client\onedrive\Product\UpdateRingSettings\dll\obj\i386\UpdateRingSettings.pdb
?LoggingWriteStructuredEvent@@YGXABUStructuredEvent@@QAUStructuredEventParameter@@@Z
?LoggingSetCommonDatapoint@@YGXPB_W0@Z
?WideStringToNarrowString@@YG?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z
?NarrowStringToWideString@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBD@Z
??0TelemetryEvent@@QAE@PBD0ABU_GUID@@II00II@Z
??1TelemetryEvent@@QAE@XZ
?LoggingSendTelemetryEvent@@YGXAAUTelemetryEvent@@QAUStructuredEventParameter@@@Z
?LoggingSetExperimentSetupData@@YGXPBDIQAUExperimentSetupData@@I1@Z
??0StructuredEvent@@QAE@PBDH0ABU_GUID@@IIII@Z
?LoggingRotateIfNeeded@@YGXXZ
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileInformationByHandleEx
SetFileInformationByHandle
GetExitCodeProcess
ExpandEnvironmentStringsW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
DeviceIoControl
GetFileSizeEx
ReadFile
GetEnvironmentVariableW
GetCommandLineW
CopyFileW
SetDllDirectoryW
ReleaseMutex
RegisterApplicationRestart
SetFilePointer
GetFileSize
OpenFileById
LoadLibraryExW
GetLongPathNameW
SetLastError
IsProcessorFeaturePresent
InterlockedPushEntrySList
OutputDebugStringW
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
CreateEventW
SetEvent
InitializeCriticalSectionAndSpinCount
CreateFileW
CreateIoCompletionPort
ReadDirectoryChangesW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
VerifyVersionInfoW
VerSetConditionMask
DeleteCriticalSection
GetFileAttributesW
CompareStringOrdinal
GetDiskFreeSpaceExW
MultiByteToWideChar
DeleteFileW
FreeLibrary
LoadLibraryW
IsWow64Process
CreateProcessW
CreateMutexW
GetProcessHeap
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
WaitForSingleObject
TerminateProcess
Sleep
GetLastError
MoveFileW
CloseHandle
K32GetModuleFileNameExW
OpenProcess
LocalFree
InitializeCriticalSectionEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetFileType
PostMessageW
CreateWindowExW
DestroyWindow
GetMessageW
ShowWindow
TranslateMessage
DispatchMessageW
RegisterClassW
RegSetKeyValueW
RegCloseKey
RegDeleteKeyExW
RegDeleteTreeW
ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
GetAclInformation
StartServiceW
QueryServiceConfigW
CreateWellKnownSid
ControlService
QueryServiceStatusEx
QueryServiceStatus
DeleteService
AllocateAndInitializeSid
CreateProcessAsUserW
DuplicateTokenEx
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
CreateServiceW
OpenSCManagerW
RegUnLoadKeyW
RegLoadKeyW
RegEnumKeyW
RegCreateKeyTransactedW
SetFileSecurityW
RegCreateKeyExW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumValueW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegGetValueW
SHGetFolderPathAndSubDirW
SHGetFolderPathW
SHChangeNotify
SHFileOperationW
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ShellExecuteExW
SHCreateDirectoryExW
SHCreateItemFromParsingName
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
StringFromGUID2
CLSIDFromString
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoCreateGuid
GetRecordInfoFromTypeInfo
SysStringByteLen
SysAllocStringByteLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
SysFreeString
SetErrorInfo
SysStringLen
GetErrorInfo
RpcServerRegisterIfEx
RpcServerUseProtseqW
RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
RpcServerInqCallAttributesW
RpcServerUnregisterIf
RpcEpUnregister
RpcBindingVectorFree
RpcEpRegisterW
RpcStringFreeW
RpcServerInqBindings
PathFileExistsW
SHCreateStreamOnFileW
SHGetValueW
SHRegGetBoolUSValueW
StrStrIW
PathRemoveFileSpecW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
InternetCheckConnectionW
WTSQueryUserToken
WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Query_perf_frequency
_Query_perf_counter
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Strxfrm
_Strcoll
?_Incref@facet@locale@std@@UAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$collate@D@std@@2V0locale@2@A
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
CreateEnvironmentBlock
strchr
_purecall
_except_handler4_common
__current_exception
__current_exception_context
_CxxThrowException
memset
__std_type_info_destroy_list
memmove
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
memcmp
memchr
memcpy
_errno
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
wcstol
wcstoul
_strtod_l
wcstod
strtoul
atof
atol
strtoll
_wtoi
strtol
_localtime64_s
_mkgmtime64
strftime
_difftime64
_time64
_gmtime64_s
realloc
_callnewh
free
malloc
__stdio_common_vsprintf
_wfopen_s
fclose
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
round
ceil
_wcsdup
towupper
iswspace
isxdigit
wcstok_s
_create_locale
_free_locale
?GetECSConfigurationManager@@YGPAVIECSConfigurationManager@@XZ
?GetFeatureSupport@@YGPAVIFeatureSupport@@XZ
?GetUpdateRingSettingsManager@@YGPAVIUpdateRingSettingsManager@@XZ
?OverrideECSConfigurationManager@@YGXPAVIECSConfigurationManager@@@Z
?OverrideFeatureSupport@@YGXPAVIFeatureSupport@@@Z
?OverrideUpdateRingSettingsManager@@YGXPAVIUpdateRingSettingsManager@@@Z
?ResetECSConfigurationManager@@YGXXZ
?ResetFeatureSupport@@YGXXZ
?ResetUpdateRingSettingsManager@@YGXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ