Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
999ff0ff79e2c2846549266607f436ccb8cb66682ee393252e4890c508e839d0_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
999ff0ff79e2c2846549266607f436ccb8cb66682ee393252e4890c508e839d0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
999ff0ff79e2c2846549266607f436ccb8cb66682ee393252e4890c508e839d0_NeikiAnalytics.exe
Size
227KB
MD5
8bdfc922c01982f05e46c744d557c510
SHA1
7af333b0ff631143a76051e00beb72cce3412226
SHA256
999ff0ff79e2c2846549266607f436ccb8cb66682ee393252e4890c508e839d0
SHA512
bdc6ef0d6dfaf244122020024ae324914c682c0f12ccdd0990b6694897466589253976853504d8108a430309884629fcb9e4e7ea964f6c0b06c60171398a6933
SSDEEP
3072:ZWetgCgokeoaiiGxLLPT2VJw63dSTYg7Mzrfrk+HEDKO+HCVtO9caMFHt1BWg9RQ:ZW5CgoVRiv4Q+kd+HiRZUmR/UF
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-MeshUtilitiesCommon.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?OutputEventType@FCpuProfilerTrace@@SAIPEBD0I@Z
?OutputBeginEvent@FCpuProfilerTrace@@SAXI@Z
?OutputBeginDynamicEventWithId@FCpuProfilerTrace@@SAXVFName@@PEB_WPEBDI@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?OnInvalidSetNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?AppendChars@FString@@QEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?AppendfImpl@FString@@CAXAEAV1@PEB_WZZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?PrettyTime@FGenericPlatformTime@@SA?AVFString@@N@Z
?GetSecondsPerCycle64@FGenericPlatformTime@@SANXZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?DoTestCriticalStall@@YAXXZ
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?MemoryTrace_GetActiveTag@@YAHXZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
??0FMemScope@@QEAA@AEBVFName@@_N@Z
??1FMemScope@@QEAA@XZ
?Construct@FLowLevelMemTracker@@SAAEAV1@XZ
?OnLowLevelAlloc@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBX_KW4ELLMTag@@W4ELLMAllocType@@_N@Z
?OnLowLevelFree@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBXW4ELLMAllocType@@_N@Z
?GetActiveTagData@FLowLevelMemTracker@@QEAAPEBVFTagData@LLMPrivate@UE@@W4ELLMTracker@@W4ELLMTagSet@@@Z
?Init@FLLMScope@@IEAAXVFName@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Init@FLLMScope@@IEAAXW4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?OutputBookmarkInternal@FMiscTrace@@CAXPEBXGPEAE@Z
?Get@FThreadStatsPool@@SAAEAU1@XZ
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Flush@FThreadStats@@QEAAX_N0@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?SaveStack@FMetadataTrace@@SAIXZ
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?MemoryTrace_MarkAllocAsHeap@@YAX_KIW4EMemoryTraceHeapAllocationFlags@@@Z
?MemoryTrace_UnmarkAllocAsHeap@@YAX_KI@Z
?MemoryTrace_Alloc@@YAX_K0II@Z
?MemoryTrace_Free@@YAX_KI@Z
?GenerateTaskId@TaskTrace@@YA_KXZ
?Launched@TaskTrace@@YAX_KPEB_W_NW4Type@ENamedThreads@@0@Z
?Scheduled@TaskTrace@@YAX_K@Z
?SubsequentAdded@TaskTrace@@YAX_K0@Z
?Completed@TaskTrace@@YAX_K@Z
?Destroyed@TaskTrace@@YAX_K@Z
??0FTaskTimingEventScope@TaskTrace@@QEAA@_K@Z
??1FTaskTimingEventScope@TaskTrace@@QEAA@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?Recycle@FGraphEvent@@CAXPEAV1@@Z
?ShouldUseThreadingForPerformance@FApp@@SA_NXZ
?IsForkedMultithreadInstance@FForkProcessHelper@@SA_NXZ
?CreateForkableThread@FForkProcessHelper@@SAPEAVFRunnableThread@@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
??0FMD5@@QEAA@XZ
??1FMD5@@QEAA@XZ
?Update@FMD5@@QEAAXPEBE_K@Z
?Final@FMD5@@QEAAXPEAE@Z
?LexToString@@YA?AVFString@@AEBUFMD5Hash@@@Z
?Create@FRunnableThread@@SAPEAV1@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?GetNext@FAsyncThreadIndex@@SAHXZ
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?GCycleStatsShouldEmitNamedEvents@@3HA
?GShouldEmitVerboseNamedEvents@@3_NA
?SecondsPerCycle@FGenericPlatformTime@@1NA
?GTestCriticalStalls@@3HA
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A
?TrackerInstance@FLowLevelMemTracker@@0PEAV1@EA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?TlsSlot@FThreadStats@@0IA
?bPrimaryEnable@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bIsRawStatsActive@FThreadStats@@0_NA
?GThreadPool@@3PEAVFQueuedThreadPool@@EA
?ZeroVector@?$TVector2@M@Math@UE@@2U123@B
?StatPtr_STAT_TaskGraph_OtherTasks@@3U?$FThreadSafeStaticStat@UFStat_STAT_TaskGraph_OtherTasks@@@@A
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
TlsGetValue
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
memcpy
memmove
memcmp
_purecall
__std_type_info_destroy_list
memset
__C_specific_handler
__current_exception
__current_exception_context
__CxxFrameHandler4
powf
logf
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
_execute_onexit_table
terminate
_initterm_e
_initterm
_cexit
_register_onexit_function
_crt_atexit
_seh_filter_dll
_crt_at_quick_exit
free
malloc
??0FAllocator2D@@QEAA@W4EMode@0@IIW4ELightmapUVVersion@@@Z
??0FLayoutUV@@QEAA@AEAUIMeshView@0@@Z
??0FOverlappingCorners@@QEAA@AEBUIMeshView@FLayoutUV@@M@Z
??0FOverlappingCorners@@QEAA@AEBV?$TArray@U?$TVector@M@Math@UE@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TArray@IV?$TSizedDefaultAllocator@$0CA@@@@@M@Z
??4FAllocator2D@@QEAAAEAV0@AEBV0@@Z
?Add@FOverlappingCorners@@QEAAXHH@Z
?AddUsedSegment@FAllocator2D@@IEAAXAEAUFRun@1@II@Z
?Alloc@FAllocator2D@@QEAAXUFRect@1@@Z
?Alloc@FAllocator2D@@QEAAXUFRect@1@AEBV1@@Z
?Clear@FAllocator2D@@QEAAXXZ
?ClearBit@FAllocator2D@@QEAAXII@Z
?CommitPackedUVs@FLayoutUV@@QEAAXXZ
?CopyRuns@FAllocator2D@@QEAAXAEAV?$TArray@UFRun@FAllocator2D@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBV2@H@Z
?CreateUsedSegments@FAllocator2D@@QEAAXXZ
?Find@FAllocator2D@@QEAA_NAEAUFRect@1@@Z
?FindBestPacking@FLayoutUV@@QEAA_NI@Z
?FindBestPackingCount@FLayoutUV@@0V?$TAtomic@_K@@A
?FindBestPackingCycles@FLayoutUV@@0V?$TAtomic@_K@@A
?FindBestPackingEfficiency@FLayoutUV@@0V?$TAtomic@_K@@A
?FindBitByBit@FAllocator2D@@QEAA_NAEAUFRect@1@AEBV1@@Z
?FindCharts@FLayoutUV@@QEAAHAEBUFOverlappingCorners@@@Z
?FindWithSegments@FAllocator2D@@QEBA_NAEAUFRect@1@AEBV1@V?$TFunctionRef@$$A6A_NAEBUFRect@FAllocator2D@@@Z@@@Z
?FinishAdding@FOverlappingCorners@@QEAAXXZ
?FlipX@FAllocator2D@@QEAAXAEBUFRect@1@@Z
?FlipY@FAllocator2D@@QEAAXAEBUFRect@1@@Z
?GetAllocatedSize@FOverlappingCorners@@QEBAIXZ
?GetBit@FAllocator2D@@QEBA_KII@Z
?GetRasterMD5@FAllocator2D@@QEBA?AUFMD5Hash@@XZ
?GetUsedTexels@FAllocator2D@@QEBAIXZ
?Init@FOverlappingCorners@@QEAAXH@Z
?InitRuns@FAllocator2D@@IEAAXAEAV?$TArray@UFRun@FAllocator2D@@V?$TSizedDefaultAllocator@$0CA@@@@@II@Z
?InitSegments@FAllocator2D@@IEAAXXZ
?LogStats@FLayoutUV@@SAXXZ
?MergeRun@FAllocator2D@@QEAAXAEAUFRun@1@AEBU21@IIII@Z
?MergeSegments@FAllocator2D@@QEAAXAEBUFRect@1@AEBV1@@Z
?PublishStats@FAllocator2D@@QEAAXHH_NAEBUFRect@1@1AEBUFMD5Hash@@V?$TFunctionRef@$$A6A_NAEBUFRect@FAllocator2D@@@Z@@@Z
?ResetStats@FAllocator2D@@QEAAXXZ
?ResetStats@FLayoutUV@@SAXXZ
?SetBit@FAllocator2D@@QEAAXII@Z
?Test@FAllocator2D@@QEAA_NUFRect@1@@Z
?Test@FAllocator2D@@QEAA_NUFRect@1@AEBV1@@Z
?TestAllColumns@FAllocator2D@@IEBA_NAEBUFRect@1@AEBV1@AEAI@Z
?TestAllRows@FAllocator2D@@IEBA_NAEBUFRect@1@AEBV1@AEAI@Z
?TestOneRun@FAllocator2D@@IEBA_NAEBUFRun@1@0IIIAEAI@Z
?ToString@FAllocator2D@@QEBA?AVFString@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ