Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
09ba6d1dc3866cf9050d2877536d6f7c1fcba55ac3016c3918d6712c5779f12b_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
09ba6d1dc3866cf9050d2877536d6f7c1fcba55ac3016c3918d6712c5779f12b_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
09ba6d1dc3866cf9050d2877536d6f7c1fcba55ac3016c3918d6712c5779f12b_NeikiAnalytics.exe
Size
143KB
MD5
ff31bdc3503ed04fbe7152f360d17b80
SHA1
e51b4f752e701330591991adef98edd19cc1ab61
SHA256
09ba6d1dc3866cf9050d2877536d6f7c1fcba55ac3016c3918d6712c5779f12b
SHA512
685c94826c5fe2db1d1ba12f792ddc8c8744d695cdc51f1671afcc565a0d8ab162f0456b6dc91748bc01aca89389f2a2c18c574fd035b9e408d611f22c0b54de
SSDEEP
3072:rdZTiBv+q2av3sTBmbHliM4/okjKO9caMFHt1BWg9RkkBzol:rdZTiWgGokmRZUmR/ol
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-ImageWriteQueue-Win64-Shipping.pdb
?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?Z_Construct_UClass_UTexture_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
?GetPrivateStaticClass@UTextureRenderTarget2D@@CAPEAVUClass@@XZ
?GetPixelFormat@UTexture2D@@QEBA?AW4EPixelFormat@@I@Z
?GetPrivateStaticClass@UTexture2D@@CAPEAVUClass@@XZ
?GetResource@UTexture@@QEAAPEAVFTextureResource@@XZ
??1UBlueprintFunctionLibrary@@UEAA@XZ
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ
?GetImmediateCommandList_ForRenderCommand@@YAAEAVFRHICommandListImmediate@@XZ
?InitializeImmediateContexts@FRHICommandListImmediate@@QEAAXXZ
?Destroy@FRHIResource@@AEBAXXZ
?ExecuteAndReset@FRHICommandListImmediate@@AEAAX_N@Z
?GDynamicRHI@@3PEAVFDynamicRHI@@EA
?WaitForRHIThreadTasks@FRHICommandListImmediate@@AEAAXXZ
?GetBaseFilename@FPaths@@SA?AVFString@@AEBV2@_N@Z
?Singleton@IConsoleManager@@0PEAU1@EA
?GIOThreadPool@@3PEAVFQueuedThreadPool@@EA
?GThreadPool@@3PEAVFQueuedThreadPool@@EA
??0FQueuedThreadPoolWrapper@@QEAA@PEAVFQueuedThreadPool@@HV?$TFunction@$$A6A?AW4EQueuedWorkPriority@@W41@@Z@@@Z
?Get@FPlatformFileManager@@SAAEAV1@XZ
?GetPlatformFile@FPlatformFileManager@@QEAAAEAVIPlatformFile@@XZ
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?SaveArrayToFile@FFileHelper@@SA_NAEBV?$TArray@EV?$TSizedDefaultAllocator@$0EA@@@@@PEB_WPEAVIFileManager@@I@Z
?GetPath@FPaths@@SA?AVFString@@AEBV2@@Z
?AsyncTask@@YAXW4Type@ENamedThreads@@V?$TUniqueFunction@$$A6AXXZ@@@Z
?Get@IFileManager@@SAAEAV1@XZ
?AccessDesktopShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessMobileShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessGeneralShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?SetupSingleton@IConsoleManager@@CAXXZ
?Free@FMemory@@SAXPEAX@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GetSystemErrorMessage@FWindowsPlatformMisc@@SAPEB_WPEA_WHH@Z
?NumberOfCores@FWindowsPlatformMisc@@SAHXZ
?GetLastError@FWindowsPlatformMisc@@SAIXZ
?GetDiskTotalAndFreeSpace@FWindowsPlatformMisc@@SA_NAEBVFString@@AEA_K1@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0EA@UFMemory@@@@QEAAX_J0_KI@Z
??0FString@@QEAA@PEB_W@Z
?AppendChar@FString@@QEAAAEAV1@_W@Z
?ConcatFC@FString@@CA?AV1@$$QEAV1@PEB_W@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?IsInGameThread@@YA_NXZ
?IsInParallelGameThread@@YA_NXZ
?IsInRenderingThread@@YA_NXZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?Allocate@FQueuedThreadPool@@SAPEAV1@XZ
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?FindFunction@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?FindFunctionChecked@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?StaticClass@FStrProperty@@SAPEAVFFieldClass@@XZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?KismetExecutionMessage@FFrame@@SAXPEB_WW4Type@ELogVerbosity@@VFName@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?GetBytesPerPixel@ERawImageFormat@@YA_JW4Type@1@@Z
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
__C_specific_handler
memset
memmove
_purecall
__std_type_info_destroy_list
memcpy
__CxxFrameHandler4
_configure_narrow_argv
_crt_atexit
_initterm_e
_initterm
_register_onexit_function
_execute_onexit_table
_seh_filter_dll
_initialize_narrow_environment
_cexit
_initialize_onexit_table
free
??$StaticClass@VUImageWriteBlueprintLibrary@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4EDesiredImageFormat@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFImageWriteOptions@@@@YAPEAVUScriptStruct@@XZ
?AddEndpoint@FImagePixelPipe@@QEAAX$$QEAV?$TUniquePtr@UFImageStreamEndpoint@@U?$TDefaultDelete@UFImageStreamEndpoint@@@@@@@Z
?AddEndpoint@FImagePixelPipe@@QEAAXAEBV?$TFunction@$$A6AX$$QEAV?$TUniquePtr@UFImagePixelData@@U?$TDefaultDelete@UFImagePixelData@@@@@@@Z@@@Z
?ExportToDisk@UImageWriteBlueprintLibrary@@SAXPEAVUTexture@@AEBVFString@@AEBUFImageWriteOptions@@@Z
?FOnImageWriteComplete_DelegateWrapper@@YAXAEBV?$TScriptDelegate@UFNotThreadSafeDelegateMode@@@@_N@Z
?ImageFormatFromDesired@@YA?AW4EImageFormat@@W4EDesiredImageFormat@@@Z
?OnAbandoned@FImageWriteTask@@UEAAXXZ
?PipeImage@FImageStreamEndpoint@@QEAAX$$QEAV?$TUniquePtr@UFImagePixelData@@U?$TDefaultDelete@UFImagePixelData@@@@@@@Z
?Push@FImagePixelPipe@@QEAAX$$QEAV?$TUniquePtr@UFImagePixelData@@U?$TDefaultDelete@UFImagePixelData@@@@@@@Z
?ResolvePixelData@UImageWriteBlueprintLibrary@@SA_NPEAVUTexture@@AEBV?$TFunction@$$A6AX$$QEAV?$TUniquePtr@UFImagePixelData@@U?$TDefaultDelete@UFImagePixelData@@@@@@@Z@@@Z
?RunTask@FImageWriteTask@@UEAA_NXZ
?StaticStruct@FImageWriteOptions@@SAPEAVUScriptStruct@@XZ
?Z_Construct_UClass_UImageWriteBlueprintLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UImageWriteBlueprintLibrary_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UDelegateFunction_ImageWriteQueue_OnImageWriteComplete__DelegateSignature@@YAPEAVUFunction@@XZ
?Z_Construct_UEnum_ImageWriteQueue_EDesiredImageFormat@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FImageWriteOptions@@YAPEAVUScriptStruct@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ