586fe97564a4fdba1d06a89cda3472b1e4d4694a9d08a67047cafdaeeaa3b26d_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

586fe97564a4fdba1d06a89cda3472b1e4d4694a9d08a67047cafdaeeaa3b26d_NeikiAnalytics.exe
Size

348KB
MD5

572eecc7a68cb2688c2d7e0884ee17a0
SHA1

f2f2367f4c6ba061d1db06812e61d7f585236a6b
SHA256

586fe97564a4fdba1d06a89cda3472b1e4d4694a9d08a67047cafdaeeaa3b26d
SHA512

17ac3c15c859f693fa7ffdc80e92a7a627a555099d4e81d57e5775f08e0c4fac63b6780647a5e5e8c8f25bb2581956f8bcd75469c4e635169a6373e8f0cbd02c
SSDEEP

6144:G3qKcRy80GEPw+T/z9DFI7srZ+QR9T2dNqMRZUmR/x9:GF6VEPlTwIrZFAxJlD

Score

1^/10

Malware Config

Signatures

Files

586fe97564a4fdba1d06a89cda3472b1e4d4694a9d08a67047cafdaeeaa3b26d_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

72537c6069921a9c9e529f341f5875e9

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

16/05/2024, 13:07

Not After

17/05/2025, 13:07

Subject

SERIALNUMBER=556821-8225,CN=Coffee Stain Studios AB,O=Coffee Stain Studios AB,STREET=Hertig Johans Gata 6,L=Skövde,ST=Västra Götaland,C=SE,1.2.840.113549.1.9.1=#0c14637373697440636f66666565737461696e2e7365,1.3.6.1.4.1.311.60.2.1.3=#13025345,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:93:c3:eb:30:d8:a7:5a:d0:02:db:20:0b:d9:e9:ff:e3:d1:f9:69:f3:59:32:88:9f:ef:66:4e:4f:b3:46:61
Signer

Actual PE Digest

a6:93:c3:eb:30:d8:a7:5a:d0:02:db:20:0b:d9:e9:ff:e3:d1:f9:69:f3:59:32:88:9f:ef:66:4e:4f:b3:46:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FactoryServer-MediaUtils.pdb

Imports

factoryserver-imagewritequeue

?OnAbandoned@FImageWriteTask@@UEAAXXZ
?RunTask@FImageWriteTask@@UEAA_NXZ

factoryserver-core

?IsForkedMultithreadInstance@FForkProcessHelper@@SA_NXZ
?StatPtr_STAT_TaskGraph_OtherTasks@@3U?$FThreadSafeStaticStat@UFStat_STAT_TaskGraph_OtherTasks@@@@A
?GameTime@FApp@@0NA
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?OutputBeginDynamicEventWithId@FCpuProfilerTrace@@SAXVFName@@PEB_WPEBDI@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0EA@UFMemory@@@@QEAAX_J0_KI@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
?Empty@FString@@QEAAXXZ
?AppendChars@FString@@QEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?ToString@FTimespan@@QEBA?AVFString@@XZ
?ToString@FTimespan@@QEBA?AVFString@@PEB_W@Z
?GetTypeHash@@YAIAEBUFTimespan@@@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?IsInGameThread@@YA_NXZ
?IsInSlateThread@@YA_NXZ
?StackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHPEAX@Z
?ThreadStackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHI@Z
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?Sleep@FWindowsPlatformProcess@@SAXM@Z
?DoTestCriticalStall@@YAXXZ
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?MemoryTrace_GetActiveTag@@YAHXZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
??0FMemScope@@QEAA@AEBVFName@@_N@Z
??1FMemScope@@QEAA@XZ
?Construct@FLowLevelMemTracker@@SAAEAV1@XZ
?OnLowLevelAlloc@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBX_KW4ELLMTag@@W4ELLMAllocType@@_N@Z
?OnLowLevelFree@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBXW4ELLMAllocType@@_N@Z
?GetActiveTagData@FLowLevelMemTracker@@QEAAPEBVFTagData@LLMPrivate@UE@@W4ELLMTracker@@W4ELLMTagSet@@@Z
?Init@FLLMScope@@IEAAXVFName@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Init@FLLMScope@@IEAAXW4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?Add@FStatsTrace@@SAXAEBVFName@@_J@Z
?Set@FStatsTrace@@SAXAEBVFName@@_J@Z
?Set@FStatsTrace@@SAXAEBVFName@@N@Z
?Get@FThreadStatsPool@@SAAEAU1@XZ
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Flush@FThreadStats@@QEAAX_N0@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?SaveStack@FMetadataTrace@@SAIXZ
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?MemoryTrace_MarkAllocAsHeap@@YAX_KIW4EMemoryTraceHeapAllocationFlags@@@Z
?MemoryTrace_UnmarkAllocAsHeap@@YAX_KI@Z
?MemoryTrace_Alloc@@YAX_K0II@Z
?MemoryTrace_Free@@YAX_KI@Z
?GetEmpty@FText@@SAAEBV1@XZ
?ToString@FText@@QEBAAEBVFString@@XZ
?UtcNow@FDateTime@@SA?AU1@XZ
?GenerateTaskId@TaskTrace@@YA_KXZ
?Launched@TaskTrace@@YAX_KPEB_W_NW4Type@ENamedThreads@@0@Z
?Scheduled@TaskTrace@@YAX_K@Z
?SubsequentAdded@TaskTrace@@YAX_K0@Z
?Completed@TaskTrace@@YAX_K@Z
?Destroyed@TaskTrace@@YAX_K@Z
??0FTaskTimingEventScope@TaskTrace@@QEAA@_K@Z
??1FTaskTimingEventScope@TaskTrace@@QEAA@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?Recycle@FGraphEvent@@CAXPEAV1@@Z
?DeltaTime@FApp@@0NA
?CreateForkableThread@FForkProcessHelper@@SAPEAVFRunnableThread@@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?Create@FRunnableThread@@SAPEAV1@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?GetNext@FAsyncThreadIndex@@SAHXZ
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@W4ELoadModuleFlags@@@Z
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?GetModulePtr_Internal@FModuleManager@@CAPEAVIModuleInterface@@VFName@@@Z
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?GCycleStatsShouldEmitNamedEvents@@3HA
?GShouldEmitVerboseNamedEvents@@3_NA
?SecondsPerCycle@FGenericPlatformTime@@1NA
?GTestCriticalStalls@@3HA
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A
?TrackerInstance@FLowLevelMemTracker@@0PEAV1@EA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?TlsSlot@FThreadStats@@0IA
?bPrimaryEnable@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bIsRawStatsActive@FThreadStats@@0_NA
?GThreadPool@@3PEAVFQueuedThreadPool@@EA

factoryserver-coreuobject

?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?Z_Construct_UScriptStruct_FTimespan@@YAPEAVUScriptStruct@@XZ
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z

factoryserver-media

?EnumToString@MediaTextureSampleFormat@@YAPEB_WW4EMediaTextureSampleFormat@@@Z

kernel32

InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsGetValue
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead

vcruntime140

memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
memmove
_purecall
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit
_initialize_narrow_environment
_crt_at_quick_exit
_crt_atexit

api-ms-win-crt-heap-l1-1-0

free
malloc

Exports

Exports

??$StaticEnum@W4EMediaPlayerOptionBooleanOverride@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFMediaPlayerOptions@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFMediaPlayerTrackOptions@@@@YAPEAVUScriptStruct@@XZ
??0FMediaAudioResampler@@QEAA@XZ
??0FMediaPlayerFacade@@QEAA@U?$TWeakObjectPtr@VUMediaPlayer@@UFWeakObjectPtr@@@@@Z
??0FMediaRecorder@@QEAA@XZ
??0FMediaSampleCache@@QEAA@XZ
??0FMediaSamples@@QEAA@IIIII@Z
??1FMediaPlayerFacade@@UEAA@XZ
??_FFMediaSamples@@QEAAXXZ
?AddAudioSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@VFMediaAudioSampleSink@@$00@@@Z
?AddCaptionSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaOverlaySample@@@@$00@@@Z
?AddMetadataSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaBinarySample@@@@$00@@@Z
?AddSubtitleSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaOverlaySample@@@@$00@@@Z
?AddVideoSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaTextureSample@@@@$00@@@Z
?BlockOnFetch@FMediaPlayerFacade@@IEBA_NXZ
?CanPause@FMediaPlayerFacade@@QEBA_NXZ
?CanPlayUrl@FMediaPlayerFacade@@QEAA_NAEBVFString@@PEBVIMediaOptions@@@Z
?CanReceiveAudioSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveCaptionSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveMetadataSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveSubtitleSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveVideoSamples@FMediaSamples@@UEBA_NI@Z
?CanResume@FMediaPlayerFacade@@QEBA_NXZ
?CanScrub@FMediaPlayerFacade@@QEBA_NXZ
?CanSeek@FMediaPlayerFacade@@QEBA_NXZ
?ClearInput@FMediaAudioResampler@@IEAAXXZ
?Close@FMediaPlayerFacade@@QEAAXXZ
?ContinueOpen@FMediaPlayerFacade@@AEAA_NV?$TSharedPtr@VIControl@IMediaPlayerLifecycleManagerDelegate@@$00@@AEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@PEAVIMediaPlayerFactory@@V?$TSharedPtr@VIMediaPlayer@@$00@@_N_K@Z
?DestroyPlayer@FMediaPlayerFacade@@AEAAXXZ
?Empty@FMediaSampleCache@@QEAAXXZ
?EnumerateAudioCaptureDevices@MediaCaptureSupport@@YAXAEAV?$TArray@UFMediaCaptureDeviceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?EnumerateVideoCaptureDevices@MediaCaptureSupport@@YAXAEAV?$TArray@UFMediaCaptureDeviceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?EventToString@MediaUtils@@YA?AVFString@@W4EMediaEvent@@@Z
?FetchAudio@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?FetchAudio@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?FetchBestVideoSampleForTimeRange@FMediaSamples@@UEAA?AW4EFetchBestSampleResult@IMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@_N@Z
?FetchCaption@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchCaption@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchMetadata@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaBinarySample@@$00@@@Z
?FetchMetadata@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaBinarySample@@$00@@@Z
?FetchSubtitle@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchSubtitle@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchVideo@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@@Z
?FetchVideo@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@@Z
?Flush@FMediaAudioResampler@@QEAAXXZ
?Flush@FMediaPlayerFacade@@IEAAX_N0@Z
?FlushSamples@FMediaSamples@@UEAAXXZ
?Generate@FMediaAudioResampler@@QEAAIPEAMAEAVFMediaTimeStamp@@IMUFTimespan@@AEAV?$TMediaSampleSource@VIMediaAudioSample@@@@AEAI@Z
?GetAdjustedBlockOnRange@FMediaPlayerFacade@@AEBA?AV?$TRange@VFMediaTimeStamp@@@@XZ
?GetAudioSample@FMediaSampleCache@@QEAA?AV?$TSharedPtr@VIMediaAudioSample@@$00@@UFTimespan@@@Z
?GetAudioTrackChannels@FMediaPlayerFacade@@QEBAIHH@Z
?GetAudioTrackFormat@FMediaPlayerFacade@@IEBA_NHHAEAUFMediaAudioTrackFormat@@@Z
?GetAudioTrackSampleRate@FMediaPlayerFacade@@QEBAIHH@Z
?GetAudioTrackType@FMediaPlayerFacade@@QEBA?AVFString@@HH@Z
?GetCachedAudioSampleRanges@FMediaSampleCache@@QEBAXAEAV?$TRangeSet@UFTimespan@@@@@Z
?GetCachedVideoSampleRanges@FMediaSampleCache@@QEBAXAEAV?$TRangeSet@UFTimespan@@@@@Z
?GetCurrentPlaybackTimeRange@FMediaPlayerFacade@@AEBA_NAEAV?$TRange@VFMediaTimeStamp@@@@MUFTimespan@@_N@Z
?GetDisplayTimeStamp@FMediaPlayerFacade@@QEBA?AVFMediaTimeStamp@@XZ
?GetDuration@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetGuid@FMediaPlayerFacade@@QEAAAEBUFGuid@@XZ
?GetInfo@FMediaPlayerFacade@@QEBA?AVFString@@XZ
?GetLastAudioRenderedSampleTime@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetMediaInfo@FMediaPlayerFacade@@QEBA?AVFVariant@@VFName@@@Z
?GetMediaMetadata@FMediaPlayerFacade@@QEBA?AV?$TSharedPtr@V?$TMap@VFString@@V?$TArray@V?$TUniquePtr@VIMediaMetadataItem@@U?$TDefaultDelete@VIMediaMetadataItem@@@@@@V?$TSizedDefaultAllocator@$0CA@@@@@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V?$TArray@V?$TUniquePtr@VIMediaMetadataItem@@U?$TDefaultDelete@VIMediaMetadataItem@@@@@@V?$TSizedDefaultAllocator@$0CA@@@@@$0A@@@@@$00@@XZ
?GetMediaName@FMediaPlayerFacade@@QEBA?AVFText@@XZ
?GetNumTrackFormats@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@H@Z
?GetNumTracks@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@@Z
?GetOverlaySamples@FMediaSampleCache@@QEAAXUFTimespan@@AEAV?$TArray@V?$TSharedPtr@VIMediaOverlaySample@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPlayerFactoryForUrl@FMediaPlayerFacade@@IEBAPEAVIMediaPlayerFactory@@AEBVFString@@PEBVIMediaOptions@@@Z
?GetPlayerName@FMediaPlayerFacade@@QEBA?AVFName@@XZ
?GetRate@FMediaPlayerFacade@@QEBAMXZ
?GetSelectedTrack@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@@Z
?GetStats@FMediaPlayerFacade@@QEBA?AVFString@@XZ
?GetSupportedRates@FMediaPlayerFacade@@QEBA?AV?$TRangeSet@M@@_N@Z
?GetTime@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetTimeStamp@FMediaPlayerFacade@@QEBA?AVFMediaTimeStamp@@XZ
?GetTimeStampInternal@FMediaPlayerFacade@@IEBA?AVFMediaTimeStamp@@_N@Z
?GetTimecode@FAppMediaTimeSource@@UEAA?AUFTimespan@@XZ
?GetTrackDisplayName@FMediaPlayerFacade@@QEBA?AVFText@@W4EMediaTrackType@@H@Z
?GetTrackFormat@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@H@Z
?GetTrackLanguage@FMediaPlayerFacade@@QEBA?AVFString@@W4EMediaTrackType@@H@Z
?GetUnpausedRate@FMediaPlayerFacade@@IEBAMXZ
?GetVideoSample@FMediaSampleCache@@QEAA?AV?$TSharedPtr@VIMediaTextureSample@@$00@@UFTimespan@@_N@Z
?GetVideoTrackAspectRatio@FMediaPlayerFacade@@QEBAMHH@Z
?GetVideoTrackDimensions@FMediaPlayerFacade@@QEBA?AU?$TIntPoint@H@Math@UE@@HH@Z
?GetVideoTrackFormat@FMediaPlayerFacade@@IEBA_NHHAEAUFMediaVideoTrackFormat@@@Z
?GetVideoTrackFrameRate@FMediaPlayerFacade@@QEBAMHH@Z
?GetVideoTrackFrameRates@FMediaPlayerFacade@@QEBA?AV?$TRange@M@@HH@Z
?GetVideoTrackType@FMediaPlayerFacade@@QEBA?AVFString@@HH@Z
?GetViewField@FMediaPlayerFacade@@QEBA_NAEAM0@Z
?GetViewOrientation@FMediaPlayerFacade@@QEBA_NAEAU?$TQuat@N@Math@UE@@@Z
?HasError@FMediaPlayerFacade@@QEBA_NXZ
?HaveAudioPlayback@FMediaPlayerFacade@@IEBA_NXZ
?HaveVideoPlayback@FMediaPlayerFacade@@IEBA_NXZ
?Initialize@FMediaAudioResampler@@QEAAXII@Z
?IsBuffering@FMediaPlayerFacade@@QEBA_NXZ
?IsClosed@FMediaPlayerFacade@@QEBA_NXZ
?IsConnecting@FMediaPlayerFacade@@QEBA_NXZ
?IsLooping@FMediaPlayerFacade@@QEBA_NXZ
?IsPaused@FMediaPlayerFacade@@QEBA_NXZ
?IsPlaying@FMediaPlayerFacade@@QEBA_NXZ
?IsPreparing@FMediaPlayerFacade@@QEBA_NXZ
?IsReady@FMediaPlayerFacade@@QEBA_NXZ
?IsVideoSampleStillGood@FMediaPlayerFacade@@AEBA_NAEBV?$TRange@VFMediaTimeStamp@@@@0_N@Z
?MonitorAudioEnablement@FMediaPlayerFacade@@AEAAXXZ
?NotifyLifetimeManagerDelegate_PlayerClosed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerCreateFailed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerCreated@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerDestroyed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerOpen@FMediaPlayerFacade@@AEAA_NAEAV?$TSharedPtr@VIControl@IMediaPlayerLifecycleManagerDelegate@@$00@@AEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@PEAVIMediaPlayerFactory@@_NI_K@Z
?NotifyLifetimeManagerDelegate_PlayerResourcesReleased@FMediaPlayerFacade@@AEAA_NI@Z
?OnPreSampleRender_RenderThread@FMediaDelegates@@2V?$TMulticastDelegate@$$A6AXPEBVUMediaTexture@@_NV?$TSharedPtr@VIMediaTextureSample@@$00@@@ZUFDefaultDelegateUserPolicy@@@@A
?OnSampleDiscarded_RenderThread@FMediaDelegates@@2V?$TMulticastDelegate@$$A6AXPEBVUMediaTexture@@V?$TSharedPtr@VIMediaTextureSample@@$00@@@ZUFDefaultDelegateUserPolicy@@@@A
?Open@FMediaPlayerFacade@@QEAA_NAEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@@Z
?PostSampleProcessingTimeHandling@FMediaPlayerFacade@@AEAAXUFTimespan@@@Z
?PreSampleProcessingTimeHandling@FMediaPlayerFacade@@AEAAXXZ
?ProcessAudioSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessAudioSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessCaptionSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessCaptionSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessEvent@FMediaPlayerFacade@@IEAAXW4EMediaEvent@@_N@Z
?ProcessMetadataSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessMetadataSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessSubtitleSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessSubtitleSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessVideoSamples@FMediaPlayerFacade@@AEAA_NAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessVideoSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?PurgeOutdatedCaptionSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedMetadataSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedSubtitleSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedVideoSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?QueryCacheState@FMediaPlayerFacade@@QEBAXW4EMediaTrackType@@W4EMediaCacheState@@AEAV?$TRangeSet@UFTimespan@@@@@Z
?ReceiveMediaEvent@FMediaPlayerFacade@@MEAAXW4EMediaEvent@@@Z
?ResetTracks@FMediaPlayerFacade@@AEAAXXZ
?Seek@FMediaPlayerFacade@@QEAA_NAEBUFTimespan@@@Z
?SelectDefaultTracks@FMediaPlayerFacade@@AEAAXXZ
?SelectTrack@FMediaPlayerFacade@@QEAA_NW4EMediaTrackType@@H@Z
?SendSinkEvent@FMediaPlayerFacade@@AEAAXW4EMediaSampleSinkEvent@@AEBUFMediaSampleSinkEventData@@@Z
?SetAreEventsSafeForAnyThread@FMediaPlayerFacade@@QEAAX_N@Z
?SetBlockOnTime@FMediaPlayerFacade@@QEAAXAEBUFTimespan@@@Z
?SetBlockOnTimeRange@FMediaPlayerFacade@@QEAAXAEBV?$TRange@UFTimespan@@@@@Z
?SetCacheWindow@FMediaPlayerFacade@@QEAAXUFTimespan@@0@Z
?SetGuid@FMediaPlayerFacade@@QEAAXAEAUFGuid@@@Z
?SetInput@FMediaAudioResampler@@IEAA_NAEBV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?SetLastAudioRenderedSampleTime@FMediaPlayerFacade@@QEAAXUFTimespan@@@Z
?SetLooping@FMediaPlayerFacade@@QEAA_N_N@Z
?SetMediaOptions@FMediaPlayerFacade@@QEAAXPEBVIMediaOptions@@@Z
?SetNativeVolume@FMediaPlayerFacade@@QEAA_NM@Z
?SetRate@FMediaPlayerFacade@@QEAA_NM@Z
?SetTrackFormat@FMediaPlayerFacade@@QEAA_NW4EMediaTrackType@@HH@Z
?SetVideoTrackFrameRate@FMediaPlayerFacade@@QEAA_NHHM@Z
?SetViewField@FMediaPlayerFacade@@QEAA_NMM_N@Z
?SetViewOrientation@FMediaPlayerFacade@@QEAA_NAEBU?$TQuat@N@Math@UE@@_N@Z
?StartRecording@FMediaRecorder@@QEAAXAEBUFMediaRecorderData@1@@Z
?StateToString@MediaUtils@@YA?AVFString@@W4EMediaState@@@Z
?StaticStruct@FMediaPlayerOptions@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FMediaPlayerTrackOptions@@SAPEAVUScriptStruct@@XZ
?StopRecording@FMediaRecorder@@QEAAXXZ
?SupportsRate@FMediaPlayerFacade@@QEBA_NM_N@Z
?Tick@FMediaSampleCache@@QEAAXUFTimespan@@M0@Z
?TickFetch@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickInput@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickOutput@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickRecording@FMediaRecorder@@IEAAXXZ
?TickTickable@FMediaPlayerFacade@@UEAAXXZ
?TrackTypeToString@MediaUtils@@YA?AVFString@@W4EMediaTrackType@@@Z
?UpdateSeekStatus@FMediaPlayerFacade@@AEAAXPEBVFMediaTimeStamp@@@Z
?UpdateTrackSelectionWithPlayer@FMediaPlayerFacade@@AEAAXXZ
?WaitPendingTasks@FMediaRecorder@@QEAA_NAEBUFTimespan@@@Z
?Z_Construct_UEnum_MediaUtils_EMediaPlayerOptionBooleanOverride@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FMediaPlayerOptions@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FMediaPlayerTrackOptions@@YAPEAVUScriptStruct@@XZ
InitializeModule

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72537c6069921a9c9e529f341f5875e9

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

a6:93:c3:eb:30:d8:a7:5a:d0:02:db:20:0b:d9:e9:ff:e3:d1:f9:69:f3:59:32:88:9f:ef:66:4e:4f:b3:46:61Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

factoryserver-imagewritequeue

factoryserver-core

factoryserver-coreuobject

factoryserver-media

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 185KB - Virtual size: 184KB

.uedbg Size: 4KB - Virtual size: 3KB

.rdata Size: 73KB - Virtual size: 73KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 13KB - Virtual size: 13KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 1KB - Virtual size: 1KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

a6:93:c3:eb:30:d8:a7:5a:d0:02:db:20:0b:d9:e9:ff:e3:d1:f9:69:f3:59:32:88:9f:ef:66:4e:4f:b3:46:61
Signer

.text
Size: 185KB - Virtual size: 184KB

.uedbg
Size: 4KB - Virtual size: 3KB

.rdata
Size: 73KB - Virtual size: 73KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 1KB - Virtual size: 1KB