Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7cb192239d71edd6162f88b07e6b8f84ddcc93444f379b4076ea495ee648a088_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7cb192239d71edd6162f88b07e6b8f84ddcc93444f379b4076ea495ee648a088_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
7cb192239d71edd6162f88b07e6b8f84ddcc93444f379b4076ea495ee648a088_NeikiAnalytics.exe
Size
219KB
MD5
2061e9280771230be3aa251684f41140
SHA1
192131ecf5b54b741cd66a3557428126e48a55eb
SHA256
7cb192239d71edd6162f88b07e6b8f84ddcc93444f379b4076ea495ee648a088
SHA512
97c948830c36d51e0e627660a059ded49633bc91567db4a4d83b48d955eb82af8d9fd9d6346602ed05f4bd2d38057293a53e9e875b43c747075d7d799b950f14
SSDEEP
3072:G+xXJ5hR9dNCfH1EOOjsprBUTrwai5vh830+EqyNIZdrnO9caMFHt1BWg9RkkBzP:9LR9KHM5nk+FyN2RZUmR/Pn
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-Messaging-Win64-Shipping.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Log@FOutputDevice@@QEAAXPEB_W@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?MemCrc_DEPRECATED@FCrc@@SAIPEBXHI@Z
?AppendChars@FString@@QEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?GetTypeHash@@YAIUFNameEntryId@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?Command@FParse@@SA_NPEAPEB_WPEB_W_N@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?Sleep@FWindowsPlatformProcess@@SAXM@Z
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?CityHash64@@YA_KPEBDI@Z
?AppendString@FGuid@@QEBAXAEAVFString@@W4EGuidFormats@@@Z
?NewGuid@FGuid@@SA?AU1@XZ
?UtcNow@FDateTime@@SA?AU1@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?CreateGraphEvent@FGraphEvent@@SA?AV?$TRefCountPtr@VFGraphEvent@@@@XZ
?DispatchSubsequents@FGraphEvent@@QEAAXAEAV?$TArray@PEAVFBaseGraphTask@@V?$TSizedDefaultAllocator@$0CA@@@@@W4Type@ENamedThreads@@_N@Z
?Recycle@FGraphEvent@@CAXPEAV1@@Z
??0FSelfRegisteringExec@@QEAA@XZ
??1FSelfRegisteringExec@@UEAA@XZ
?GetCoreTicker@FTSTicker@@SAAEAV1@XZ
?AddTicker@FTSTicker@@QEAA?AV?$TWeakPtr@UFElement@FTSTicker@@$00@@AEBV?$TDelegate@$$A6A_NM@ZUFDefaultDelegateUserPolicy@@@@M@Z
?RemoveTicker@FTSTicker@@SAXV?$TWeakPtr@UFElement@FTSTicker@@$00@@@Z
?Create@FRunnableThread@@SAPEAV1@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?GetBool@FConfigCacheIni@@QEAA_NPEB_W0AEA_NAEBVFString@@@Z
?Exec@FExec@@UEAA_NPEAVUWorld@@PEB_WAEAVFOutputDevice@@@Z
?GConfig@@3PEAVFConfigCacheIni@@EA
?GEngineIni@@3VFString@@A
?SecondsPerCycle@FGenericPlatformTime@@1NA
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A
?TrySetPath@FTopLevelAssetPath@@QEAA_NVFName@@0@Z
?ToString@FTopLevelAssetPath@@QEBA?AVFString@@XZ
??4FWeakObjectPtr@@QEAAXPEBVUObject@@@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?IsValid@FWeakObjectPtr@@QEBA_N_N0@Z
?GetPrivateStaticClass@UStruct@@CAPEAVUClass@@XZ
?GetStructPathName@UStruct@@QEBA?AUFTopLevelAssetPath@@XZ
?TryConvertShortTypeNameToPathName@UClass@@SA?AUFTopLevelAssetPath@@PEAV1@AEBVFString@@W4Type@ELogVerbosity@@PEB_W@Z
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
memmove
__C_specific_handler
memset
__std_type_info_destroy_list
memcpy
_purecall
__CxxFrameHandler4
_seh_filter_dll
_configure_narrow_argv
_initterm
_cexit
_crt_atexit
_initialize_narrow_environment
_register_onexit_function
_initterm_e
_initialize_onexit_table
_execute_onexit_table
malloc
free
?Intercept@IMessageBus@@UEAAXAEBV?$TSharedRef@VIMessageInterceptor@@$00@@AEBVFName@@@Z
?ModularFeatureName@INetworkMessagingExtension@@2VFName@@A
?PATHNAME_All@IMessageBus@@2UFTopLevelAssetPath@@B
?Subscribe@IMessageBus@@UEAA?AV?$TSharedPtr@VIMessageSubscription@@$00@@AEBV?$TSharedRef@VIMessageReceiver@@$00@@AEBVFName@@AEBV?$TRange@W4EMessageScope@@@@@Z
?Unintercept@IMessageBus@@UEAAXAEBV?$TSharedRef@VIMessageInterceptor@@$00@@AEBVFName@@@Z
?Unsubscribe@IMessageBus@@UEAAXAEBV?$TSharedRef@VIMessageReceiver@@$00@@AEBVFName@@@Z
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ