Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
924c0edcfbb341a9e34a7da6bd744878c57cd9c74db843373d41f99aaae0698c_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
924c0edcfbb341a9e34a7da6bd744878c57cd9c74db843373d41f99aaae0698c_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
924c0edcfbb341a9e34a7da6bd744878c57cd9c74db843373d41f99aaae0698c_NeikiAnalytics.exe
Size
116KB
MD5
5e44e938664bd31e76ad3222704ed850
SHA1
aa726b0881e61715ecbbb782326db145de5addc1
SHA256
924c0edcfbb341a9e34a7da6bd744878c57cd9c74db843373d41f99aaae0698c
SHA512
101c7785b6b0325c25fc1fa50919c4987db968cb276bc2e4eea5b662c6461fc6e04d3c48c90044ff9fe8e08446eff3393e407b13964653c8a88cba6ed7095f24
SSDEEP
3072:stREQ4PgA79cqWO9caMFHt1BWg9RkkBzC2:s3A7eRZUmR/C2
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-ConsoleVariablesEditorRuntime-Win64-Shipping.pdb
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UObject_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UEnum_CoreUObject_ESearchCase@@YAPEAVUEnum@@XZ
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?StaticClass@FStrProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?StaticClass@FBoolProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FByteProperty@@SAPEAVFFieldClass@@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
??0UObject@@QEAA@AEAVFVTableHelper@@@Z
??0UObject@@QEAA@AEBVFObjectInitializer@@@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
??1UObjectBase@@UEAA@XZ
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?Z_Construct_UEnum_SlateCore_ECheckBoxState@@YAPEAVUEnum@@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?AppendChars@FString@@QEAAXPEB_WH@Z
??0FString@@QEAA@PEB_W@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?Free@FMemory@@SAXPEAX@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetGlobalLogSingleton@@YAPEAVFOutputDeviceRedirector@@XZ
?TrimStartAndEnd@FString@@QEGBA?AV1@XZ
?GEngine@@3PEAVUEngine@@EA
?GetWorldFromContextObject@UEngine@@QEBAPEAVUWorld@@PEBVUObject@@W4EGetWorldErrorMode@@@Z
?Z_Construct_UClass_UMovieSceneConsoleVariableTrackInterface_NoRegister@@YAPEAVUClass@@XZ
memcpy
memmove
__C_specific_handler
__std_type_info_destroy_list
_purecall
memset
__CxxFrameHandler4
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm_e
_crt_atexit
_cexit
_seh_filter_dll
_initterm
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
??$StaticClass@VUConsoleVariablesAsset@@@@YAPEAVUClass@@XZ
??$StaticStruct@UFConsoleVariablesEditorAssetSaveData@@@@YAPEAVUScriptStruct@@XZ
??0UConsoleVariablesAsset@@QEAA@AEAVFVTableHelper@@@Z
??0UConsoleVariablesAsset@@QEAA@AEBVFObjectInitializer@@@Z
??1UConsoleVariablesAsset@@UEAA@XZ
??2UConsoleVariablesAsset@@SAPEAX_KPEAW4EInternal@@@Z
??2UConsoleVariablesAsset@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UConsoleVariablesAsset@@SAXPEAX@Z
??_7UConsoleVariablesAsset@@6BIMovieSceneConsoleVariableTrackInterface@@@
??_7UConsoleVariablesAsset@@6BUObject@@@
??_FUConsoleVariablesAsset@@QEAAXXZ
?AddOrSetConsoleObjectSavedData@UConsoleVariablesAsset@@QEAAXAEBUFConsoleVariablesEditorAssetSaveData@@@Z
?CopyFrom@UConsoleVariablesAsset@@QEAAXPEBV1@@Z
?ExecuteSavedCommands@UConsoleVariablesAsset@@QEBAXPEAVUObject@@_N@Z
?FindSavedDataByCommandString@UConsoleVariablesAsset@@QEBA_NVFString@@AEAUFConsoleVariablesEditorAssetSaveData@@W4Type@ESearchCase@@@Z
?GetConsoleVariablesForTrack@UConsoleVariablesAsset@@EEAAX_NAEAV?$TArray@U?$TTuple@VFString@@V1@@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPrivateStaticClass@UConsoleVariablesAsset@@CAPEAVUClass@@XZ
?GetSavedCommands@UConsoleVariablesAsset@@QEBAAEBV?$TArray@UFConsoleVariablesEditorAssetSaveData@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetSavedCommandsAsCommaSeparatedString@UConsoleVariablesAsset@@QEBA?AVFString@@_N@Z
?GetSavedCommandsAsStringArray@UConsoleVariablesAsset@@QEBA?AV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@_N@Z
?GetSavedCommandsCount@UConsoleVariablesAsset@@QEBAHXZ
?GetVariableCollectionDescription@UConsoleVariablesAsset@@QEBA?AVFString@@XZ
?IsConsoleVariableEnabled@UConsoleVariablesAsset@@EEAA_NAEBVFString@@@Z
?RemoveConsoleVariable@UConsoleVariablesAsset@@QEAA_NVFString@@@Z
?ReplaceSavedCommands@UConsoleVariablesAsset@@QEAAXAEBV?$TArray@UFConsoleVariablesEditorAssetSaveData@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?SetVariableCollectionDescription@UConsoleVariablesAsset@@QEAAXAEBVFString@@@Z
?StaticClass@UConsoleVariablesAsset@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UConsoleVariablesAsset@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UConsoleVariablesAsset@@2W4EClassFlags@@B
?StaticPackage@UConsoleVariablesAsset@@SAPEB_WXZ
?StaticRegisterNativesUConsoleVariablesAsset@UConsoleVariablesAsset@@CAXXZ
?StaticStruct@FConsoleVariablesEditorAssetSaveData@@SAPEAVUScriptStruct@@XZ
?Z_Construct_UClass_UConsoleVariablesAsset@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UConsoleVariablesAsset_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UScriptStruct_FConsoleVariablesEditorAssetSaveData@@YAPEAVUScriptStruct@@XZ
?__DefaultConstructor@UConsoleVariablesAsset@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UConsoleVariablesAsset@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?_getUObject@UConsoleVariablesAsset@@UEBAPEAVUObject@@XZ
?execAddOrSetConsoleObjectSavedData@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execCopyFrom@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execExecuteSavedCommands@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execFindSavedDataByCommandString@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetSavedCommands@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetSavedCommandsAsCommaSeparatedString@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetSavedCommandsAsStringArray@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetSavedCommandsCount@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetVariableCollectionDescription@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execRemoveConsoleVariable@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execReplaceSavedCommands@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execSetVariableCollectionDescription@UConsoleVariablesAsset@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ