Extended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0bfdb942e913cb229c7c9b3e8b3b8024e68327752a5852061653287c1ef13fdb_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0bfdb942e913cb229c7c9b3e8b3b8024e68327752a5852061653287c1ef13fdb_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
Target
0bfdb942e913cb229c7c9b3e8b3b8024e68327752a5852061653287c1ef13fdb_NeikiAnalytics.exe
Size
762KB
MD5
af44a9d5c84e44abe17689c51dd46d20
SHA1
006ebbae0f18fbe8bafc21d4ed4ade660762946c
SHA256
0bfdb942e913cb229c7c9b3e8b3b8024e68327752a5852061653287c1ef13fdb
SHA512
8125b0a40dec7aa230c0bd4e12cfd023530ad22de750d03cd05ebce63d0d576f0fa150a01a04b5cd835ac23db4e90b8897548c9bd98c5329cf2b45d76a077174
SSDEEP
12288:78hEl7ePKN9pq2mmyvCU3NlgLYtmBINJ1OZ2/hF3Z0dpnUBpD:gyYPKN/KmcCU3QLYYKNJ1OehF3adYN
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\Jenkins2\jobs\forgeAS_nightly\workspace\source\ffplugs\qt7plug\obj-x86\qt7plug.pdb
?SfVideo_ApproxFrameRateToSmpteType@@YGIN@Z
?AddExifTagsToSummaryListFromTiff@CSfExifMetaDataHelper@@QAEJPA_WPAUtSFLIST@@@Z
??1CSfExifMetaDataHelper@@UAE@XZ
??0CSfExifMetaDataHelper@@QAE@XZ
_Mpeg4MetaGetSmfmf@8
_Mpeg4MetaIsSmfmfAvailable@12
_Mpeg4MetaGetPicture@16
_Mpeg4MetaIsPictureAvailable@20
_Mpeg4MetaGetAllSummaryInfo@12
_Mpeg4MetaReset@4
?MediaMgrRiff_LoadPropertyInfo@@YGJPAXPAU_sfmeta_mediamgrchunk@@PAUtSFLIST@@PAH@Z
?ProjectLinkRiff_LoadInfo@@YGJPAXPAVCSfLinkProjectInfo@@PAH@Z
?FreeMemory@CSfLinkProjectInfo@@QAEXXZ
?Validate@CSfLinkProjectInfo@@QAEJXZ
?WriteProjectDataToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteCreatorAppWindowClassNameToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteCreatorAppInfoToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteRendererGuidToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteAppTemplateDataToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteTemplateDataToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteTemplateNameToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteCommandLineToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?WriteProjectPathToStream@CSfLinkProjectInfo@@QAEJPAUIStream@@@Z
?Init@CSfLinkProjectInfo@@QAEXXZ
??1CSfLinkProjectInfo@@QAE@XZ
??0CSfLinkProjectInfo@@QAE@XZ
?acidriff_LoadAcidizeInfo@@YGJPAXPAU_tagSFFIO_acidchunk@@PAHPAU_tagSFFIO_stretchinfo@@PAUtSFLIST@@2PAUtWAVEFORMATEX@@_J@Z
?SfPicture_GetPictureType@@YG?AW4_PICTUREMETADATATYPE_@@PAX@Z
?SfFMMeta_fillCDTracksFromFile@@YGJPAXPAUtSFLIST@@@Z
?SfFMMeta_fillDetectedBeatsFromFile@@YGJPAXPAUtSFLIST@@@Z
?SfFMMeta_fillBeatMarkersFromFile@@YGJPAXPAUtSFLIST@@@Z
?SfFMMeta_fillStretchInfo2FromFile@@YGJPAXPAUtSFLIST@@@Z
?SfFMMeta_fillCDInfoFromFile@@YGJPAXPAPAXPAKW4RiffType@@@Z
?SfFMMeta_fillSummaryFromFileEx@@YGJPAXPAUtSFLIST@@1@Z
?SfFMMeta_fillCuesFromFileEx@@YGJPAXKPAUtSFLIST@@1@Z
?SfFMMeta_IsMetaFile@@YGHPB_W0@Z
?SfFMMeta_CreateMetaName@@YGJPB_WPA_WJH@Z
?SfMetaStream_CreateUnknownChunk@@YGJPAXP6GH0K@ZPAPAUIStream@@@Z
?SfMetaStream_CreateGeneric@@YGJPAUtSFLIST@@U_GUID@@PAPAUIStream@@@Z
?SfProtectedStream_CreateFromMemory@@YGJPAXKKPAPAVISfProtectedStream@@@Z
_SfHMSFToNanoTime@12
_SfList_AllocAndInsertItem@20
_SfList_FindItemRange@20
?SfFio_GetMetricBool@@YGHPAUISfFileIOManager@@HH@Z
?SfVideo_ApproxFrameRateToExact@@YGNN@Z
?SfFio_SetStreamFormatInfo@@YGXPAU_SFFILESTREAMFORMATINFOv2@@PBUtagBITMAPINFOHEADER@@PBUtSFVIDEOEXTENSION@@_J@Z
?CopyData@CMappingOfSfMemoryToken@@SGJABU_sfmemorytoken@@PBXJ@Z
?SfFio_SetStreamFormatInfo@@YGXPAU_SFFILESTREAMFORMATINFOv2@@PBUtWAVEFORMATEX@@PBUtSFAUDIOEXTENSION@@_J@Z
?SfAudio_GeneralCopyWfx@@YGPAUtWAVEFORMATEX@@PAU1@IABU_sfwaveformat@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfFio_FillStreamFormatInfo@@YGJPAUISfReadStream@@W4SFFILESTREAMTYPE@@PAU_SFFILESTREAMFORMATINFOv2@@@Z
_SfGetFullPathName@16
_SfList_MoveRange@16
?IsTypeMP2FindSyncByte@@YGHPAXIPB_W@Z
_SfAddSlashToPathName@8
_SfDibCopy@52
_Mpeg4MetaDestroy@4
_SfList_Destroy@4
_Mpeg4MetaAddPicture@12
_Mpeg4MetaUpdateMetaData@16
_Mpeg4MetaSetFileName@8
?MediaMgrRiff_openAndWriteInfo@@YGJPA_WPAUISfReadMeta@@H@Z
?ProjectLinkRiff_openAndWriteInfo@@YGJPA_WPAUISfReadMeta@@H@Z
_SfLoadResourceCustom@16
?acidriff_openAndWriteAcidInfo@@YGJPA_WPAUISfReadMeta@@H@Z
?SfFMMeta_UpdateMetaStreamEx@@YGJPA_WHKPAUISfReadMeta@@W4SFFIO_TYPESOFMETADATA@@@Z
?SfFMMeta_openAndWriteMetaStreamEx@@YGJPA_WHKPAUISfReadMeta@@W4SFFIO_TYPESOFMETADATA@@2@Z
_SfErrorHandler_TranslateWin32Error@4
_SfDoesFileExist@8
_SfGetFileNameExtensionPtrW@4
_SfGetFileNamePtrW@4
_SfLang_Close@4
_SfList_DeleteList@16
?SfAudio_AllocAndCopyWfx@@YGPAUtWAVEFORMATEX@@PBU_sfwaveformat@@W4SFWAVEFORMAT_COPY_DEST@@@Z
_SfAboutBox@12
_SfGetPixelType@4
?SfFio_CopyTemplate@@YGJPAPAUtagSFTEMPLATExV2@@PBU1@@Z
?SfFio_FillBstrArrayFromStringResourceMap@@YGJPAUHSFLANG__@@PBW4SFFIO_FILECLASS_INFO_TEXT@@KPAPA_WPBUFILECLASS_INFO_STRING_MAP@@KPB_W@Z
?SfFio_GetTemplateInfo@@YGJPBUtagSFTEMPLATExV2@@KPAXIW4SFFIO_TEMPLATE_INFO@@@Z
_SfLang_Open@20
?SfFio_InitGUIDFromTemplateMD5DataHash@@YGJPAU_GUID@@PBUtagSFTEMPLATExV2@@H@Z
?SfFio_IsUpliftedV1Template@@YGHPBUtagSFTEMPLATExV2@@@Z
?SfFio_GetMetric@@YGKPAUISfFileIOManager@@HK@Z
_SfAudio_GetAttribsText@12
_SfGetModuleFileName@12
?SfLoadString@@YGHPAUHSFLANG__@@IPA_WH@Z
_SfLang_UpdateKernelLCID@12
_SfLang_GetLCID@4
_Trackbar_DefScrollProc@20
_SfYUVImageBytesAndOffsets@8
_SfVideo_InitBitmapInfo@28
?SfFio_SetTemplate@@YGJAAPAUtagSFTEMPLATExV2@@PBU1@K@Z
_SfHelp_ContextHelp@24
_SfHelp_CreatePluginHelpFilePath@20
SfSetWindowTextF
?SfVideo_ApproxFrameRateToRationals@@YGXPAK0N@Z
_SfDialogBoxParam@20
_SfCreateDialogParam@20
_SfGetDialogSize@20
SfCchPrintF
_SfList_CreateExZ@32
??8_sfwaveformat@@QBE_NABUtWAVEFORMATEX@@@Z
SfPrintF
_SfTextToDoubleTokenEx@36
_SfTextToLongTokenEx@20
?SfGetString@@YGPB_WPAUHSFLANG__@@I@Z
_SfGetWideFromPrintString@8
_SfList_InsertList@16
?BitsPerSample@_sfwaveformat@@QBEGXZ
?InitAsWfx@_sfwaveformat@@QAEXGKGGKK@Z
??0_sfwaveformat_wfxcopyhelper@@QAE@ABU_sfwaveformat@@@Z
_SfReadFile@20
_Mpeg4MetaShutDown@0
_Mpeg4MetaStartUp@0
_SfOSVersionOK@8
?SfFindAtom@@YGHPAXK_K1PA_K2@Z
_Mpeg4MetaCreate@0
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
?_Xlength_error@std@@YAXPBD@Z
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
SysAllocStringLen
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
DuplicateHandle
OutputDebugStringA
DeleteFileW
MultiByteToWideChar
GlobalFree
GlobalHandle
GlobalUnlock
SetFilePointer
GlobalLock
GlobalAlloc
CreateMutexW
CloseHandle
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
InitializeSListHead
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalReAlloc
MulDiv
lstrcmpiW
lstrlenA
WideCharToMultiByte
GetFileSize
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
SetEvent
ReleaseMutex
WaitForSingleObject
CreateEventW
Sleep
CreateThread
GetCurrentThread
TerminateThread
LockResource
CreateFileMappingW
GetModuleFileNameA
CreateMutexA
GetSystemDirectoryA
LoadLibraryA
lstrcmpW
GetCurrentProcess
GetCurrentProcessId
OpenProcess
ReadProcessMemory
GetModuleHandleA
CreateFileW
WriteProcessMemory
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
SetDlgItemInt
SetDlgItemTextW
GetDlgCtrlID
EnableWindow
InvalidateRect
GetWindowTextW
DestroyWindow
GetWindowRect
GetWindowLongW
SetWindowLongW
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfA
SendMessageW
MoveWindow
GetDlgItem
EndDialog
ShowWindow
__std_type_info_destroy_list
_except_handler4_common
__CxxFrameHandler3
_purecall
memset
memcpy
_CxxThrowException
strncpy_s
strncpy
wcsncat_s
strncmp
wcsncpy_s
strncat_s
free
calloc
malloc
_invalid_parameter_noinfo_noreturn
_statusfp
_seh_filter_dll
_configure_narrow_argv
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_controlfp_s
terminate
_clearfp
_fpreset
_libm_sse2_pow_precise
_except1
_libm_sse2_asin_precise
_libm_sse2_acos_precise
_libm_sse2_sqrt_precise
_access
_wfopen_s
_read
_write
_lseeki64
fclose
_telli64
??0CMappingOfSfMemoryToken@@QAE@ABU_sfmemorytoken@@K@Z
??0COutOfProcessMemoryToken@@QAE@AAU_sfmemorytoken@@KH@Z
??0CSfExifMetaDataHelper@@QAE@ABV0@@Z
??1CMappingOfSfMemoryToken@@QAE@XZ
??1COutOfProcessMemoryToken@@QAE@XZ
??4CMappingOfSfMemoryToken@@QAEAAV0@ABV0@@Z
??4COutOfProcessMemoryToken@@QAEAAV0@ABV0@@Z
??4CSfExifMetaDataHelper@@QAEAAV0@ABV0@@Z
??4CSfLinkProjectInfo@@QAEAAV0@ABV0@@Z
??_7CSfExifMetaDataHelper@@6B@
?Close@CMappingOfSfMemoryToken@@QAEXXZ
?ConvertDWord@CSfExifMetaDataHelper@@AAEKK@Z
?ConvertDWord@CSfExifMetaDataHelper@@AAEKPBE@Z
?ConvertWord@CSfExifMetaDataHelper@@AAEGG@Z
?ConvertWord@CSfExifMetaDataHelper@@AAEGPBE@Z
?DataSize@CMappingOfSfMemoryToken@@QAEJXZ
?Dispose@CMappingOfSfMemoryToken@@QAEXXZ
?GetAppTemplateData@CSfLinkProjectInfo@@QAEPAXXZ
?GetAppTemplateDataPtr@CSfLinkProjectInfo@@QAEPAPAXXZ
?GetAppTemplateDataSize@CSfLinkProjectInfo@@QAEKXZ
?GetAppTemplateDataSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetCommandLinePtr@CSfLinkProjectInfo@@QAEPAPA_WXZ
?GetCommandLineSize@CSfLinkProjectInfo@@QAEKXZ
?GetCommandLineSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetCommandLineW@CSfLinkProjectInfo@@QAEPA_WXZ
?GetCreatorAppInfo@CSfLinkProjectInfo@@QAEPA_WXZ
?GetCreatorAppInfoPtr@CSfLinkProjectInfo@@QAEPAPA_WXZ
?GetCreatorAppInfoSize@CSfLinkProjectInfo@@QAEKXZ
?GetCreatorAppInfoSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetCreatorAppWindowClassName@CSfLinkProjectInfo@@QAEPA_WXZ
?GetCreatorAppWindowClassNamePtr@CSfLinkProjectInfo@@QAEPAPA_WXZ
?GetCreatorAppWindowClassNameSize@CSfLinkProjectInfo@@QAEKXZ
?GetCreatorAppWindowClassNameSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetMemoryToken@COutOfProcessMemoryToken@@QAEJAAU_sfmemorytoken@@@Z
?GetPointer@CMappingOfSfMemoryToken@@QAEJPAPAX@Z
?GetProjectData@CSfLinkProjectInfo@@QAEPAXXZ
?GetProjectDataPtr@CSfLinkProjectInfo@@QAEPAPAXXZ
?GetProjectDataSize@CSfLinkProjectInfo@@QAEKXZ
?GetProjectDataSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetProjectPath@CSfLinkProjectInfo@@QAEPA_WXZ
?GetProjectPathPtr@CSfLinkProjectInfo@@QAEPAPA_WXZ
?GetProjectPathSize@CSfLinkProjectInfo@@QAEKXZ
?GetProjectPathSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetRendererGuid@CSfLinkProjectInfo@@QAEPAU_GUID@@XZ
?GetTemplateData@CSfLinkProjectInfo@@QAEPAXXZ
?GetTemplateDataPtr@CSfLinkProjectInfo@@QAEPAPAXXZ
?GetTemplateDataSize@CSfLinkProjectInfo@@QAEKXZ
?GetTemplateDataSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetTemplateName@CSfLinkProjectInfo@@QAEPA_WXZ
?GetTemplateNamePtr@CSfLinkProjectInfo@@QAEPAPA_WXZ
?GetTemplateNameSize@CSfLinkProjectInfo@@QAEKXZ
?GetTemplateNameSizePtr@CSfLinkProjectInfo@@QAEPAKXZ
?GetVersion@CSfLinkProjectInfo@@QAEKXZ
?JPEG_MARKER_APP0@CSfExifMetaDataHelper@@0GB
?JPEG_MARKER_APP1@CSfExifMetaDataHelper@@0GB
?JPEG_MARKER_APP2@CSfExifMetaDataHelper@@0GB
?JPEG_MARKER_SOI@CSfExifMetaDataHelper@@0GB
?Pointer@CMappingOfSfMemoryToken@@QAEPAXXZ
?SwapDWord@CSfExifMetaDataHelper@@AAEKK@Z
?SwapWord@CSfExifMetaDataHelper@@AAEGG@Z
?TIFF_ARBITRARY_MARKER@CSfExifMetaDataHelper@@0GB
?TIFF_BYTEORDERING_BIG@CSfExifMetaDataHelper@@0GB
?TIFF_BYTEORDERING_LITTLE@CSfExifMetaDataHelper@@0GB
DllCanUnloadNow
DllGetClassObject
DllInitClasses
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ