Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ec63ad8327ab4f78e9c53e329b884a50_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec63ad8327ab4f78e9c53e329b884a50_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
Target
ec63ad8327ab4f78e9c53e329b884a50_NeikiAnalytics.exe
Size
143KB
MD5
ec63ad8327ab4f78e9c53e329b884a50
SHA1
952a7417e13753048c674a273c5bbd964c902e2f
SHA256
58cb1a82d31a74870211becdbe6b40966b166bc70484ec84793bc48f6da93a38
SHA512
191f645a0f1b705cfe133dfe03e47a0506b50c8b14846a83e5c5da8ce43372720d7ac7221fdd1e76b741bc09dd334c2fc6a4c2d75411227a94aabe91a1b576b6
SSDEEP
3072:trTu+bw6pbZTsoZHJiar944F/O9caMFHt1BWg9RkkBzv6:dhbwmx44pRZUmR/v6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-CoreOnline.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?bIsDisabled@FLowLevelMemTracker@@2_NA
?AddError@FAutomationTestBase@@UEAAXAEBVFString@@H@Z
?AddErrorIfFalse@FAutomationTestBase@@UEAA_N_NAEBVFString@@H@Z
?AddErrorS@FAutomationTestBase@@UEAAXAEBVFString@@0H@Z
?AddWarningS@FAutomationTestBase@@UEAAXAEBVFString@@0H@Z
?AddWarning@FAutomationTestBase@@UEAAXAEBVFString@@H@Z
?AddInfo@FAutomationTestBase@@UEAAXAEBVFString@@H_N@Z
?AddEvent@FAutomationTestBase@@UEAAXAEBUFAutomationEvent@@H_N@Z
?AddAnalyticsItem@FAutomationTestBase@@UEAAXAEBVFString@@@Z
?AddTelemetryData@FAutomationTestBase@@UEAAXAEBV?$TMap@VFString@@NVFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@N$0A@@@@@AEBVFString@@@Z
?AddTelemetryData@FAutomationTestBase@@UEAAXAEBVFString@@N0@Z
?SetTelemetryStorage@FAutomationTestBase@@UEAAXAEBVFString@@@Z
?bSuppressLogWarnings@FAutomationTestBase@@2_NA
?bSuppressLogErrors@FAutomationTestBase@@2_NA
?bElevateLogWarningsToErrors@FAutomationTestBase@@2_NA
?SuppressedLogCategories@FAutomationTestBase@@2V?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@A
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?AssignRange@FString@@AEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?FromHexBlob@FString@@SA?AV1@PEBEI@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FMemScope@@QEAA@AEBVFName@@_N@Z
??1FMemScope@@QEAA@XZ
?Init@FLLMScope@@IEAAXVFName@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?Clear@FAutomationTestExecutionInfo@@QEAAXXZ
?Get@FAutomationTestFramework@@SAAEAV1@XZ
?RegisterAutomationTest@FAutomationTestFramework@@QEAA_NAEBVFString@@PEAVFAutomationTestBase@@@Z
?UnregisterAutomationTest@FAutomationTestFramework@@QEAA_NAEBVFString@@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
InitializeCriticalSection
SetCriticalSectionSpinCount
DeleteCriticalSection
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
memcpy
memmove
__C_specific_handler
__current_exception
__current_exception_context
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
__std_type_info_destroy_list
memcmp
__CxxFrameHandler4
_register_onexit_function
_initterm_e
_initterm
_initialize_narrow_environment
terminate
_seh_filter_dll
_initialize_onexit_table
_cexit
_crt_at_quick_exit
_crt_atexit
_configure_narrow_argv
_execute_onexit_table
_callnewh
free
malloc
??$StaticEnum@W4ECoreOnlineDummy@@@@YAPEAVUEnum@@XZ
?AreAccountIdsEquivalent@FOnlineIdRegistryRegistry@Online@UE@@QEBA_NAEBVFUniqueNetId@@V?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@@Z
?FromStandardizedRepresentation@FOnlineIdRegistryRegistry@Online@UE@@QEAA?AV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@AEBVFString@@W4EOnlineServices@23@@Z
?Get@FOnlineIdRegistryRegistry@Online@UE@@SAAEAV123@XZ
?GetAccountIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEBAPEAV?$IOnlineIdRegistry@UFAccount@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@@Z
?GetSessionIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEBAPEAV?$IOnlineIdRegistry@UFSession@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@@Z
?GetSessionInviteIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEBAPEAV?$IOnlineIdRegistry@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@@Z
?LexFromString@Online@UE@@YAXAEAW4EOnlineServices@12@PEB_W@Z
?LexToString@Online@UE@@YAPEB_WW4EOnlineServices@12@@Z
?RegisterAccountIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@PEAV?$IOnlineIdRegistry@UFAccount@OnlineIdHandleTags@Online@UE@@@23@H@Z
?RegisterSessionIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@PEAV?$IOnlineIdRegistry@UFSession@OnlineIdHandleTags@Online@UE@@@23@H@Z
?RegisterSessionInviteIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@PEAV?$IOnlineIdRegistry@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@23@H@Z
?TearDown@FOnlineIdRegistryRegistry@Online@UE@@SAXXZ
?ToAccountId@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@AEBV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ToDebugString@FUniqueNetIdWrapper@@QEBA?AVFString@@XZ
?ToLogString@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToLogString@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToLogString@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFLobby@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFVerifiedAuthSession@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToLogString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFVerifiedAuthTicket@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToReplicationData@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToReplicationData@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToReplicationData@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TOnlineId@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToSessionId@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@AEBV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ToSessionInviteId@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AV?$TOnlineId@UFSessionInvite@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@AEBV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ToStandardizedRepresentation@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@W4EOnlineServices@23@@Z
?ToString@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToString@FOnlineIdRegistryRegistry@Online@UE@@QEBA?AVFString@@AEBV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@23@@Z
?ToString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFAccount@OnlineIdHandleTags@Online@UE@@@12@@Z
?ToString@Online@UE@@YA?AVFString@@AEBV?$TOnlineId@UFSession@OnlineIdHandleTags@Online@UE@@@12@@Z
?UnregisterAccountIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@H@Z
?UnregisterSessionIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@H@Z
?UnregisterSessionInviteIdRegistry@FOnlineIdRegistryRegistry@Online@UE@@QEAAXW4EOnlineServices@23@H@Z
?Z_Construct_UEnum_CoreOnline_ECoreOnlineDummy@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FJoinabilitySettings@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FUniqueNetIdWrapper@@YAPEAVUScriptStruct@@XZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ