Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3636eb1c9d0fb5d6b8b6081bc8db113bc624af86c39c8972072ad8a93ad8be31_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3636eb1c9d0fb5d6b8b6081bc8db113bc624af86c39c8972072ad8a93ad8be31_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
3636eb1c9d0fb5d6b8b6081bc8db113bc624af86c39c8972072ad8a93ad8be31_NeikiAnalytics.exe
Size
166KB
MD5
5bfd1ea7bd6701336efd1fef058d7eb0
SHA1
768bffa9075ebe1a7038a43eb4483b1087aa5215
SHA256
3636eb1c9d0fb5d6b8b6081bc8db113bc624af86c39c8972072ad8a93ad8be31
SHA512
2b75fdedbc65ffc3c57440072b7108421f6fae6515955bebaeef0eb9d55dfdf8f45334c77f750c7a2b221c9a2cfbaebae987cf52e21736416d6ec22523c62826
SSDEEP
3072:DDuzv8quTyATcKxhzRjTzJyMOAFbTBtKdb7as4hjeESNIuIQNVudmvO9caMFHt1y:uzv8xfxDdeESNIuIQNVudCRZUmR/R3E
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-NISShaders.pdb
?GetStructMetadata@FViewUniformShaderParameters@@SAPEBVFShaderParametersMetadata@@XZ
?GDynamicRHI@@3PEAVFDynamicRHI@@EA
?GRHICommandList@@3VFRHICommandListExecutor@@A
?GRHIGlobals@@3UFRHIGlobals@@A
?Infos@FGenericDataDrivenShaderPlatformInfo@@0PAV1@A
?LANGUAGE_D3D@@3VFName@@B
?RHICommandsChannel@@3AEAVFChannel@Trace@UE@@EA
?SetComputePipelineState@@YAXAEAVFRHIComputeCommandList@@PEAVFRHIComputeShader@@@Z
?Execute@?$FRHICommandSetShaderUnbinds@VFRHIComputeShader@@@@QEAAXAEAVFRHICommandListBase@@@Z
?Execute@FRHICommandSetStaticUniformBuffers@@QEAAXAEAVFRHICommandListBase@@@Z
?Execute@FRHICommandDispatchComputeShader@@QEAAXAEAVFRHICommandListBase@@@Z
?RHIGetDefaultResourceState@@YA?AW4ERHIAccess@@W4ETextureCreateFlags@@_N@Z
?Destroy@FRHIResource@@AEBAXXZ
?LegacyShaderPlatformToShaderFormat@@YA?AVFName@@W4EShaderPlatform@@@Z
?IsRHIDeviceNVIDIA@@YA_NXZ
?IsRHIDeviceIntel@@YA_NXZ
?IsRHIDeviceAMD@@YA_NXZ
?Get@IPluginManager@@SAAEAV1@XZ
?GetSecondaryViewRectSize@FViewInfo@@QEBA?AU?$TIntPoint@H@Math@UE@@XZ
?GetTonemapperOutputDeviceParameters@@YA?AVFTonemapperOutputDeviceParameters@@AEBVFSceneViewFamily@@@Z
?bIsRawStatsActive@FThreadStats@@0_NA
??0FMemScope@@QEAA@AEBVFName@@_N@Z
?Singleton@IConsoleManager@@0PEAU1@EA
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
?bPrimaryDisableForever@FThreadStats@@0_NA
?bPrimaryEnable@FThreadStats@@0_NA
?TlsSlot@FThreadStats@@0IA
?GShouldEmitVerboseNamedEvents@@3_NA
?GCycleStatsShouldEmitNamedEvents@@3HA
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?CombineInternal@FPaths@@KA?AVFString@@PEBV?$TStringView@_W@@H@Z
?GetExtension@FPaths@@SA?AVFString@@AEBV2@_N@Z
?AccessDesktopShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessMobileShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessGeneralShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?SetupSingleton@IConsoleManager@@CAXXZ
?AllocateNewChunk@FMemStackBase@@AEAAXH@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?Flush@FThreadStats@@QEAAX_N0@Z
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Get@FThreadStatsPool@@SAAEAU1@XZ
?Destruct@FLLMScope@@IEAAXXZ
?Init@FLLMScope@@IEAAXW4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Init@FLLMScope@@IEAAXVFName@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?Free@FMemory@@SAXPEAX@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?OutputEventType@FCpuProfilerTrace@@SAIPEB_WPEBDI@Z
?OutputBeginEvent@FCpuProfilerTrace@@SAXI@Z
?OutputBeginDynamicEventWithId@FCpuProfilerTrace@@SAXVFName@@PEB_WPEBDI@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?Initialize@FTypeLayoutDesc@@SAXAEAU1@@Z
?DefaultWriteMemoryImageField@Freeze@@YAXAEAVFMemoryImageWriter@@PEBX1AEBUFTypeLayoutDesc@@2@Z
?DefaultWriteMemoryImage@Freeze@@YAXAEAVFMemoryImageWriter@@PEBXAEBUFTypeLayoutDesc@@2@Z
?DefaultUnfrozenCopy@Freeze@@YAIAEBVFMemoryUnfreezeContent@@PEBXAEBUFTypeLayoutDesc@@PEAX@Z
?DefaultAppendHash@Freeze@@YAIAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@AEAVFSHA1@@@Z
?DefaultGetTargetAlignment@Freeze@@YAIAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@@Z
?DefaultToString@Freeze@@YAXPEBXAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@AEAUFMemoryToStringContext@@@Z
??0FString@@QEAA@PEB_W@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?IsCurrentTag@FTaskTagScope@@SA_NW4ETaskTag@@@Z
?IsInRenderingThread@@YA_NXZ
?IsInParallelRenderingThread@@YA_NXZ
?IsInRHIThread@@YA_NXZ
??1FMemScope@@QEAA@XZ
?AddCopyTexturePass@@YAXAEAVFRDGBuilder@@PEAVFRDGTexture@@1AEBUFRHICopyTextureInfo@@@Z
?OverridePassFlags@FRDGBuilder@@CA?AW4ERDGPassFlags@@PEB_WW42@@Z
?ClearUnusedGraphResourcesImpl@@YAXAEBVFShaderParameterBindings@@PEBVFShaderParametersMetadata@@PEAXV?$initializer_list@PEAVFRDGResource@@@std@@@Z
?InitResource@FRenderResource@@UEAAXAEAVFRHICommandListBase@@@Z
?ReleaseResource@FRenderResource@@UEAAXXZ
??0FRenderResource@@QEAA@XZ
??1FRenderResource@@UEAA@XZ
?GetCommandList@FRenderResource@@KAAEAVFRHICommandListBase@@XZ
?BeginInitResource@@YAXPEAVFRenderResource@@@Z
??0FShaderParametersMetadata@@QEAA@W4EUseCase@0@W4EUniformBufferBindingFlags@@PEB_W222PEBDHIAEBV?$TArray@VFMember@FShaderParametersMetadata@@V?$TSizedDefaultAllocator@$0CA@@@@@_NPEAUFRHIUniformBufferLayoutInitializer@@I@Z
??1FShaderParametersMetadata@@UEAA@XZ
?Get@FRDGAllocator@@SAAEAV1@XZ
?OnInvalidRDGAllocatorNum@Private@RenderCore@UE@@YAXH_K@Z
?AddShaderSourceDirectoryMapping@@YAXAEBVFString@@0@Z
?CreateShaderOrCrash@FShaderMapResource@@AEAAPEAVFRHIShader@@H@Z
?BindForLegacyShaderParameters@FShaderParameterBindings@@QEAAXPEBVFShader@@HAEBVFShaderParameterMap@@AEBVFShaderParametersMetadata@@_N@Z
??0FShader@@QEAA@XZ
??1FShader@@QEAA@XZ
??0FShaderType@@QEAA@W4EShaderTypeForDynamicCast@0@AEAUFTypeLayoutDesc@@PEB_W22IHP6APEAVFShader@@XZP6APEAV3@AEBUFShaderCompiledShaderInitializerType@@@ZP6A_NAEBUFShaderPermutationParameters@@@ZP6A?AW4ERayTracingPayloadType@@H@ZIPEBVFShaderParametersMetadata@@@Z
??1FShaderType@@UEAA@XZ
?GetInstances@FShaderTypeRegistration@@SAAEAV?$TArray@PEBVFShaderTypeRegistration@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetShader@FGlobalShaderMap@@QEBA?AV?$TShaderRefBase@VFShader@@VFShaderMapPointerTable@@@@PEAVFShaderType@@H@Z
?StaticGetTypeLayout@FGlobalShader@@SAAEAUFTypeLayoutDesc@@XZ
??0FGlobalShader@@QEAA@AEBUFShaderCompiledShaderInitializerType@@@Z
?QuantizeSceneBufferSize@@YAXAEBU?$TIntPoint@H@Math@UE@@AEAU123@@Z
?GetStaticUniformBuffers@FRDGParameterStruct@@QEBA?AVFUniformBufferStaticBindings@@XZ
?ValidateShaderParameters@@YAXAEBV?$TShaderRefBase@VFShader@@VFShaderMapPointerTable@@@@PEBVFShaderParametersMetadata@@PEBX@Z
?SetShaderParameters@@YAXAEAVFRHIComputeCommandList@@PEAVFRHIComputeShader@@AEBVFShaderParameterBindings@@PEBVFShaderParametersMetadata@@PEBX@Z
??0FRDGEventName@@QEAA@PEB_WZZ
?GetTCHAR@FRDGEventName@@QEBAPEB_WXZ
??0FRDGPass@@QEAA@$$QEAVFRDGEventName@@VFRDGParameterStruct@@W4ERDGPassFlags@@@Z
?ValidateAddPass@FRDGUserValidation@@QEAAXPEBXPEBVFShaderParametersMetadata@@AEBVFRDGEventName@@W4ERDGPassFlags@@@Z
?CreateTexture@FRDGBuilder@@QEAAPEAVFRDGTexture@@AEBUFRDGTextureDesc@@PEB_WW4ERDGTextureFlags@@@Z
?CreateUAV@FRDGBuilder@@QEAAPEAVFRDGTextureUAV@@AEBVFRDGTextureUAVDesc@@W4ERDGUnorderedAccessViewFlags@@@Z
?ClobberPassOutputs@FRDGBuilder@@AEAAXPEBVFRDGPass@@@Z
?FlushAccessModeQueue@FRDGBuilder@@AEAAXXZ
?SetupParameterPass@FRDGBuilder@@AEAAPEAVFRDGPass@@PEAV2@@Z
QueryPerformanceCounter
TlsGetValue
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
memmove
memset
memcpy
_purecall
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
__CxxFrameHandler4
_cexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
terminate
_initterm_e
_crt_at_quick_exit
_seh_filter_dll
_initterm
?AddSharpenOrUpscalePass@@YA?AUFScreenPassTexture@@AEAVFRDGBuilder@@AEBVFViewInfo@@AEBUFInputs@ISpatialUpscaler@@@Z
?GetNISMinRequiredFeatureLevel@@YA?AW4Type@ERHIFeatureLevel@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ