Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
8798465ef1ca1238a261d034eeb3f5013bfcc7c78a0c98daec12bc1e5198c240_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8798465ef1ca1238a261d034eeb3f5013bfcc7c78a0c98daec12bc1e5198c240_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
8798465ef1ca1238a261d034eeb3f5013bfcc7c78a0c98daec12bc1e5198c240_NeikiAnalytics.exe
Size
175KB
MD5
e9b651974fac7413a4d3f686fecd2a50
SHA1
0b2d7508dfb318c578e0ecf34888f31b1241520a
SHA256
8798465ef1ca1238a261d034eeb3f5013bfcc7c78a0c98daec12bc1e5198c240
SHA512
a2fb3d5fa10017873b4df2530e3cce44b1fcdfda2b0a9e3bde18f0655c8d3ccc3560d1d13ea84f49242604d10f88190748ede7ed20f568ae7e02a687b8425b8a
SSDEEP
3072:gWg2CjyN51PUvawF2NA6KZYyeL0G7vW9UunQF1LiUEO9caMFHt1BWg9RkkBzBVKt:gsCmNvPUv1FdUH2vRZUmR/nKt
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-HTTPServer-Win64-Shipping.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?GetConvertedLength@Private@Core@UE@@YAHPEBW4UTF8CHAR@FGenericPlatformTypes@@PEB_WH@Z
?GetConvertedLength@Private@Core@UE@@YAHPEB_WPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?Convert@Private@Core@UE@@YAPEAW4UTF8CHAR@FGenericPlatformTypes@@PEAW445@HPEB_WH@Z
?Convert@Private@Core@UE@@YAPEA_WPEA_WHPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FString@@QEAA@PEB_W@Z
??0FString@@QEAA@HPEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?AssignRange@FString@@AEAAXPEB_WH@Z
?Empty@FString@@QEAAXXZ
?AppendChars@FString@@QEAAXPEB_WH@Z
?AppendChar@FString@@QEAAAEAV1@_W@Z
?RemoveAt@FString@@QEAAXHH_N@Z
?RemoveFromEnd@FString@@QEAA_NPEB_WHW4Type@ESearchCase@@@Z
?RightChop@FString@@QEGBA?AV1@H@Z
?Mid@FString@@QEGBA?AV1@HH@Z
?ToLower@FString@@QEHAA?AV1@XZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?StartsWith@FString@@QEBA_NPEB_WHW4Type@ESearchCase@@@Z
?EndsWith@FString@@QEBA_NPEB_WHW4Type@ESearchCase@@@Z
?TrimStartAndEndInline@FString@@QEAAXXZ
?TrimStartAndEnd@FString@@QEGBA?AV1@XZ
?TrimStartAndEnd@FString@@QEHAA?AV1@XZ
?ParseIntoArray@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?ParseIntoArrayWS@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?ParseIntoArrayLines@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@_N@Z
?ReplaceInline@FString@@QEAAHPEB_W0W4Type@ESearchCase@@@Z
?ReplaceCharWithEscapedCharInline@FString@@QEAAXPEBV?$TArray@_WV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AppendInt@FString@@QEAAXH@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?Value@FParse@@SA_NPEB_W0AEAI@Z
?Value@FParse@@SA_NPEB_W0AEAH@Z
?Value@FParse@@SA_NPEB_W0AEAVFString@@_NPEAPEB_W@Z
?Bool@FParse@@SA_NPEB_W0AEA_N@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?IsInGameThread@@YA_NXZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?GetCoreTicker@FTSTicker@@SAAEAV1@XZ
??0FTSTickerObjectBase@@QEAA@MAEAVFTSTicker@@@Z
??1FTSTickerObjectBase@@UEAA@XZ
?GetString@FConfigCacheIni@@QEAA_NPEB_W0AEAVFString@@AEBV2@@Z
?GetInt@FConfigCacheIni@@QEAA_NPEB_W0AEAHAEBVFString@@@Z
?GetFloat@FConfigCacheIni@@QEAA_NPEB_W0AEAMAEBVFString@@@Z
?GetBool@FConfigCacheIni@@QEAA_NPEB_W0AEA_NAEBVFString@@@Z
?GetArray@FConfigCacheIni@@QEAAHPEB_W0AEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBVFString@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?SerializeRecord@FOutputDevice@@UEAAXAEBVFLogRecord@UE@@@Z
?CRCTable_DEPRECATED@FCrc@@2PAIA
?GConfig@@3PEAVFConfigCacheIni@@EA
?GIsRequestingExit@@3_NA
?GEngineIni@@3VFString@@A
?UrlDecode@FGenericPlatformHttp@@SA?AVFString@@V?$TStringView@_W@@@Z
?CreateUniqueSocket@ISocketSubsystem@@QEAA?AV?$TUniquePtr@VFSocket@@VFSocketDeleter@@@@AEBVFName@@AEBVFString@@_N@Z
?GetSocketError@ISocketSubsystem@@QEAAPEB_WW4ESocketErrors@@@Z
?Get@ISocketSubsystem@@SAPEAV1@AEBVFName@@@Z
memcpy
memmove
memset
_purecall
__C_specific_handler
__std_type_info_destroy_list
__CxxFrameHandler4
_wtoi
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm
_configure_narrow_argv
_seh_filter_dll
_cexit
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
??0FHttpPath@@QEAA@VFString@@@Z
??0FHttpPath@@QEAA@XZ
?Create@FHttpServerResponse@@SA?AV?$TUniquePtr@UFHttpServerResponse@@U?$TDefaultDelete@UFHttpServerResponse@@@@@@$$QEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@VFString@@@Z
?Create@FHttpServerResponse@@SA?AV?$TUniquePtr@UFHttpServerResponse@@U?$TDefaultDelete@UFHttpServerResponse@@@@@@AEBV?$TArrayView@EH@@VFString@@@Z
?Create@FHttpServerResponse@@SA?AV?$TUniquePtr@UFHttpServerResponse@@U?$TDefaultDelete@UFHttpServerResponse@@@@@@AEBVFString@@V3@@Z
?Error@FHttpServerResponse@@SA?AV?$TUniquePtr@UFHttpServerResponse@@U?$TDefaultDelete@UFHttpServerResponse@@@@@@W4EHttpServerResponseCodes@@AEBVFString@@1@Z
?Get@FHttpServerModule@@SAAEAV1@XZ
?GetHttpRouter@FHttpServerModule@@QEAA?AV?$TSharedPtr@VIHttpRouter@@$00@@I_N@Z
?GetPath@FHttpPath@@QEBAAEBVFString@@XZ
?HasPendingListeners@FHttpServerModule@@QEBA_NXZ
?IsAvailable@FHttpServerModule@@SA_NXZ
?IsRoot@FHttpPath@@QEBA_NXZ
?IsValidPath@FHttpPath@@QEBA_NXZ
?MakeRelative@FHttpPath@@QEAAXAEBVFString@@@Z
?Ok@FHttpServerResponse@@SA?AV?$TUniquePtr@UFHttpServerResponse@@U?$TDefaultDelete@UFHttpServerResponse@@@@@@XZ
?ParsePathTokens@FHttpPath@@QEBAIAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?SetPath@FHttpPath@@QEAAXVFString@@@Z
?StartAllListeners@FHttpServerModule@@QEAAXXZ
?StopAllListeners@FHttpServerModule@@QEAAXXZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ