Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
252c4e281cce573818bf03d03cc532d411b4f8030a6902b997fc5b83c71bb3fa_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
252c4e281cce573818bf03d03cc532d411b4f8030a6902b997fc5b83c71bb3fa_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
252c4e281cce573818bf03d03cc532d411b4f8030a6902b997fc5b83c71bb3fa_NeikiAnalytics.exe
Size
155KB
MD5
fb4519673ef9e837e18673a23e9ed400
SHA1
53f0123dc97234518c7b5209232f876dd9dd7391
SHA256
252c4e281cce573818bf03d03cc532d411b4f8030a6902b997fc5b83c71bb3fa
SHA512
1aba6b0863beac4995cbaf31f429e0e9fcc8f2d63cfd268226a96ea64e95062fd9e10f096a864eca43bdac6f80963b73eec1624af3dfdc41f170a88643363a67
SSDEEP
3072:DNwA1fOxn4QH68Drg5zhg07Fij9O9caMFHt1BWg9RkkBzJDT:r4lB4r7FiZRZUmR/JX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-AppleImageUtils.pdb
?StaticClass@FEnumProperty@@SAPEAVFFieldClass@@XZ
?GetPrivateStaticClass@UInterface@@CAPEAVUClass@@XZ
??0UInterface@@QEAA@AEAVFVTableHelper@@@Z
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Z_Construct_UClass_UInterface@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PostLoad@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?BeginDestroy@UObject@@UEAAXXZ
?FinishDestroy@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsAsset@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?IsSafeForRootSet@UObject@@UEBA_NXZ
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?PreNetReceive@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreDestroyFromReplication@UObject@@UEAAXXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?StaticClass@FBoolProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FFloatProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FIntProperty@@SAPEAVFFieldClass@@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?IsValid@FWeakObjectPtr@@QEBA_NXZ
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@_N@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?FindFunctionChecked@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?FindFunction@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
??0UObject@@QEAA@AEAVFVTableHelper@@@Z
??0UObject@@QEAA@AEBVFObjectInitializer@@@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?GetInterfaceAddress@UObjectBaseUtility@@QEAAPEAXPEAVUClass@@@Z
?GetFullName@UObjectBaseUtility@@QEBA?AVFString@@PEBVUObject@@W4EObjectFullNameFlags@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
??1UObjectBase@@UEAA@XZ
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
??0FStaticConstructObjectParameters@@QEAA@PEBVUClass@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?AssertIfInConstructor@FObjectInitializer@@SAXPEAVUObject@@PEB_W@Z
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?StaticConstructObject_Internal@@YAPEAVUObject@@AEBUFStaticConstructObjectParameters@@@Z
?NeedsLoadForClient@UObject@@UEBA_NXZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?IsModuleLoaded@FModuleManager@@QEBA_NVFName@@@Z
?GetModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?ThreadStackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHI@Z
?StackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHPEAX@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?ToString@FName@@QEBA?AVFString@@XZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
??4FString@@QEAAAEAV0@PEB_W@Z
??0FString@@QEAA@PEB_W@Z
??0FString@@QEAA@PEBD@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?Free@FMemory@@SAXPEAX@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
??1FTickableGameObject@@UEAA@XZ
?Z_Construct_UClass_UTexture_NoRegister@@YAPEAVUClass@@XZ
??0FTickableGameObject@@QEAA@XZ
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
memmove
memset
memcpy
_purecall
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
__CxxFrameHandler4
_crt_at_quick_exit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
terminate
_initterm_e
_initterm
_seh_filter_dll
_cexit
??$StaticClass@VUAppleImageInterface@@@@YAPEAVUClass@@XZ
??$StaticClass@VUAppleImageUtilsBaseAsyncTaskBlueprintProxy@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4EAppleTextureType@@@@YAPEAVUEnum@@XZ
??$StaticEnum@W4ETextureRotationDirection@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFAppleImageUtilsImageConversionResult@@@@YAPEAVUScriptStruct@@XZ
??0FAppleImageUtilsConversionTaskBase@@IEAA@XZ
??0FAppleImageUtilsConversionTaskBase@@QEAA@AEBV0@@Z
??0IAppleImageInterface@@QEAA@AEBV0@@Z
??0IAppleImageInterface@@QEAA@XZ
??0IAppleImageUtilsConversionTask@@QEAA@$$QEAV0@@Z
??0IAppleImageUtilsConversionTask@@QEAA@AEBV0@@Z
??0IAppleImageUtilsConversionTask@@QEAA@XZ
??0IAppleImageUtilsPlugin@@QEAA@$$QEAV0@@Z
??0IAppleImageUtilsPlugin@@QEAA@AEBV0@@Z
??0IAppleImageUtilsPlugin@@QEAA@XZ
??0UAppleImageInterface@@QEAA@AEAVFVTableHelper@@@Z
??0UAppleImageInterface@@QEAA@AEBVFObjectInitializer@@@Z
??0UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAA@AEAVFVTableHelper@@@Z
??0UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAA@AEBVFObjectInitializer@@@Z
??1FAppleImageUtilsConversionTaskBase@@MEAA@XZ
??1IAppleImageInterface@@MEAA@XZ
??1IAppleImageUtilsPlugin@@UEAA@XZ
??1UAppleImageInterface@@UEAA@XZ
??1UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@UEAA@XZ
??2UAppleImageInterface@@SAPEAX_KPEAW4EInternal@@@Z
??2UAppleImageInterface@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UAppleImageInterface@@SAXPEAX@Z
??4IAppleImageInterface@@QEAAAEAV0@AEBV0@@Z
??4IAppleImageUtilsConversionTask@@QEAAAEAV0@$$QEAV0@@Z
??4IAppleImageUtilsConversionTask@@QEAAAEAV0@AEBV0@@Z
??4IAppleImageUtilsPlugin@@QEAAAEAV0@$$QEAV0@@Z
??4IAppleImageUtilsPlugin@@QEAAAEAV0@AEBV0@@Z
??_7FAppleImageUtilsConversionTaskBase@@6B@
??_7IAppleImageInterface@@6B@
??_7IAppleImageUtilsConversionTask@@6B@
??_7IAppleImageUtilsPlugin@@6B@
??_7UAppleImageInterface@@6B@
??_FUAppleImageInterface@@QEAAXXZ
??_FUAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAAXXZ
?FAppleImageConversionDelegate_DelegateWrapper@@YAXAEBV?$TMulticastScriptDelegate@UFNotThreadSafeDelegateMode@@@@AEBUFAppleImageUtilsImageConversionResult@@@Z
?Get@IAppleImageUtilsPlugin@@SAAEAV1@XZ
?GetConvertedImageSize@FAppleImageUtilsConversionTaskBase@@UEBA?AU?$TIntPoint@H@Math@UE@@XZ
?GetElapsedTime@FAppleImageUtilsConversionTaskBase@@UEBAMXZ
?GetErrorReason@FAppleImageUtilsConversionTaskBase@@UEBA?AVFString@@XZ
?GetPrivateStaticClass@UAppleImageInterface@@CAPEAVUClass@@XZ
?GetPrivateStaticClass@UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@CAPEAVUClass@@XZ
?HadError@FAppleImageUtilsConversionTaskBase@@UEBA_NXZ
?IsAvailable@IAppleImageUtilsPlugin@@SA_NXZ
?IsDone@FAppleImageUtilsConversionTaskBase@@UEBA_NXZ
?Load@IAppleImageUtilsPlugin@@SAAEAV1@XZ
?StaticClass@UAppleImageInterface@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UAppleImageInterface@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UAppleImageInterface@@2W4EClassFlags@@B
?StaticPackage@UAppleImageInterface@@SAPEB_WXZ
?StaticRegisterNativesUAppleImageInterface@UAppleImageInterface@@CAXXZ
?StaticStruct@FAppleImageUtilsImageConversionResult@@SAPEAVUScriptStruct@@XZ
?Z_Construct_UClass_UAppleImageInterface@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageInterface_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageUtilsBaseAsyncTaskBlueprintProxy_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UDelegateFunction_AppleImageUtils_AppleImageConversionDelegate__DelegateSignature@@YAPEAVUFunction@@XZ
?Z_Construct_UEnum_AppleImageUtils_EAppleTextureType@@YAPEAVUEnum@@XZ
?Z_Construct_UEnum_AppleImageUtils_ETextureRotationDirection@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FAppleImageUtilsImageConversionResult@@YAPEAVUScriptStruct@@XZ
?__DefaultConstructor@UAppleImageInterface@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UAppleImageInterface@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?_getUObject@IAppleImageInterface@@UEBAPEAVUObject@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ