9924c737909f2ccb25b951b6eb6871c475577666590f9b4d5e175baf9698e849_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9924c737909f2ccb25b951b6eb6871c475577666590f9b4d5e175baf9698e849_NeikiAnalytics.exe
Size

260KB
MD5

42b6c4a04d920cc0461ec47ed8fb87f0
SHA1

9f623487e8abdbf3fb6cea91c30a7cd25bedc83a
SHA256

9924c737909f2ccb25b951b6eb6871c475577666590f9b4d5e175baf9698e849
SHA512

cac59b9de5d1337f3ed5d1e21dce857ae81460b6fa2dde38e0710f233a911635433ab1ae6a11e0df433dcb40876f9c12d364e640ee2bee3798a111e62111c4bb
SSDEEP

6144:dV8dsU5IFRNjGS3tdP99c3QYzpF4c83RZUmR/mp:dV8d/kX3tdPI78jJlS

Score

1^/10

Malware Config

Signatures

Files

9924c737909f2ccb25b951b6eb6871c475577666590f9b4d5e175baf9698e849_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

d386e3fbf87464c8aaaf6da5a584e8a4

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

16/05/2024, 13:07

Not After

17/05/2025, 13:07

Subject

SERIALNUMBER=556821-8225,CN=Coffee Stain Studios AB,O=Coffee Stain Studios AB,STREET=Hertig Johans Gata 6,L=Skövde,ST=Västra Götaland,C=SE,1.2.840.113549.1.9.1=#0c14637373697440636f66666565737461696e2e7365,1.3.6.1.4.1.311.60.2.1.3=#13025345,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:24:2e:3d:3c:ef:1f:59:a3:b6:57:12:05:d5:eb:f9:84:97:cc:39:62:9f:c0:83:76:c9:29:e5:b2:8b:6a:d7
Signer

Actual PE Digest

fb:24:2e:3d:3c:ef:1f:59:a3:b6:57:12:05:d5:eb:f9:84:97:cc:39:62:9f:c0:83:76:c9:29:e5:b2:8b:6a:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FactoryServer-MediaUtils-Win64-Shipping.pdb

Imports

factoryserver-imagewritequeue-win64-shipping

?RunTask@FImageWriteTask@@UEAA_NXZ
?OnAbandoned@FImageWriteTask@@UEAAXXZ

factoryserver-core-win64-shipping

?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?GameTime@FApp@@0NA
?DeltaTime@FApp@@0NA
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0EA@UFMemory@@@@QEAAX_J0_KI@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
?Empty@FString@@QEAAXXZ
?AppendChars@FString@@QEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?ToString@FTimespan@@QEBA?AVFString@@XZ
?ToString@FTimespan@@QEBA?AVFString@@PEB_W@Z
?GetTypeHash@@YAIAEBUFTimespan@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?IsInGameThread@@YA_NXZ
?IsInSlateThread@@YA_NXZ
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GThreadPool@@3PEAVFQueuedThreadPool@@EA
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?Sleep@FWindowsPlatformProcess@@SAXM@Z
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?GetEmpty@FText@@SAAEBV1@XZ
?ToString@FText@@QEBAAEBVFString@@XZ
?UtcNow@FDateTime@@SA?AU1@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?Recycle@FGraphEvent@@CAXPEAV1@@Z
?IsForkedMultithreadInstance@FForkProcessHelper@@SA_NXZ
?CreateForkableThread@FForkProcessHelper@@SAPEAVFRunnableThread@@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?Create@FRunnableThread@@SAPEAV1@PEAVFRunnable@@PEB_WIW4EThreadPriority@@_KW4EThreadCreateFlags@@@Z
?GetNext@FAsyncThreadIndex@@SAHXZ
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@W4ELoadModuleFlags@@@Z
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?GetModulePtr_Internal@FModuleManager@@CAPEAVIModuleInterface@@VFName@@@Z
?SecondsPerCycle@FGenericPlatformTime@@1NA
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A

factoryserver-coreuobject-win64-shipping

?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?Z_Construct_UScriptStruct_FTimespan@@YAPEAVUScriptStruct@@XZ

factoryserver-media-win64-shipping

?EnumToString@MediaTextureSampleFormat@@YAPEB_WW4EMediaTextureSampleFormat@@@Z

kernel32

InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead

vcruntime140

memset
__C_specific_handler
__std_type_info_destroy_list
memmove
_purecall
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit
_initialize_narrow_environment
_crt_atexit

api-ms-win-crt-heap-l1-1-0

free
malloc

Exports

Exports

??$StaticEnum@W4EMediaPlayerOptionBooleanOverride@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFMediaPlayerOptions@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFMediaPlayerTrackOptions@@@@YAPEAVUScriptStruct@@XZ
??0FMediaAudioResampler@@QEAA@XZ
??0FMediaPlayerFacade@@QEAA@U?$TWeakObjectPtr@VUMediaPlayer@@UFWeakObjectPtr@@@@@Z
??0FMediaRecorder@@QEAA@XZ
??0FMediaSampleCache@@QEAA@XZ
??0FMediaSamples@@QEAA@IIIII@Z
??1FMediaPlayerFacade@@UEAA@XZ
??_FFMediaSamples@@QEAAXXZ
?AddAudioSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@VFMediaAudioSampleSink@@$00@@@Z
?AddCaptionSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaOverlaySample@@@@$00@@@Z
?AddMetadataSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaBinarySample@@@@$00@@@Z
?AddSubtitleSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaOverlaySample@@@@$00@@@Z
?AddVideoSampleSink@FMediaPlayerFacade@@QEAAXAEBV?$TSharedRef@V?$TMediaSampleSink@VIMediaTextureSample@@@@$00@@@Z
?BlockOnFetch@FMediaPlayerFacade@@IEBA_NXZ
?CanPause@FMediaPlayerFacade@@QEBA_NXZ
?CanPlayUrl@FMediaPlayerFacade@@QEAA_NAEBVFString@@PEBVIMediaOptions@@@Z
?CanReceiveAudioSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveCaptionSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveMetadataSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveSubtitleSamples@FMediaSamples@@UEBA_NI@Z
?CanReceiveVideoSamples@FMediaSamples@@UEBA_NI@Z
?CanResume@FMediaPlayerFacade@@QEBA_NXZ
?CanScrub@FMediaPlayerFacade@@QEBA_NXZ
?CanSeek@FMediaPlayerFacade@@QEBA_NXZ
?ClearInput@FMediaAudioResampler@@IEAAXXZ
?Close@FMediaPlayerFacade@@QEAAXXZ
?ContinueOpen@FMediaPlayerFacade@@AEAA_NV?$TSharedPtr@VIControl@IMediaPlayerLifecycleManagerDelegate@@$00@@AEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@PEAVIMediaPlayerFactory@@V?$TSharedPtr@VIMediaPlayer@@$00@@_N_K@Z
?DestroyPlayer@FMediaPlayerFacade@@AEAAXXZ
?Empty@FMediaSampleCache@@QEAAXXZ
?EnumerateAudioCaptureDevices@MediaCaptureSupport@@YAXAEAV?$TArray@UFMediaCaptureDeviceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?EnumerateVideoCaptureDevices@MediaCaptureSupport@@YAXAEAV?$TArray@UFMediaCaptureDeviceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?EventToString@MediaUtils@@YA?AVFString@@W4EMediaEvent@@@Z
?FetchAudio@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?FetchAudio@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?FetchBestVideoSampleForTimeRange@FMediaSamples@@UEAA?AW4EFetchBestSampleResult@IMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@_N@Z
?FetchCaption@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchCaption@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchMetadata@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaBinarySample@@$00@@@Z
?FetchMetadata@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaBinarySample@@$00@@@Z
?FetchSubtitle@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchSubtitle@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaOverlaySample@@$00@@@Z
?FetchVideo@FMediaSamples@@UEAA_NV?$TRange@UFTimespan@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@@Z
?FetchVideo@FMediaSamples@@UEAA_NV?$TRange@VFMediaTimeStamp@@@@AEAV?$TSharedPtr@VIMediaTextureSample@@$00@@@Z
?Flush@FMediaAudioResampler@@QEAAXXZ
?Flush@FMediaPlayerFacade@@IEAAX_N0@Z
?FlushSamples@FMediaSamples@@UEAAXXZ
?Generate@FMediaAudioResampler@@QEAAIPEAMAEAVFMediaTimeStamp@@IMUFTimespan@@AEAV?$TMediaSampleSource@VIMediaAudioSample@@@@AEAI@Z
?GetAdjustedBlockOnRange@FMediaPlayerFacade@@AEBA?AV?$TRange@VFMediaTimeStamp@@@@XZ
?GetAudioSample@FMediaSampleCache@@QEAA?AV?$TSharedPtr@VIMediaAudioSample@@$00@@UFTimespan@@@Z
?GetAudioTrackChannels@FMediaPlayerFacade@@QEBAIHH@Z
?GetAudioTrackFormat@FMediaPlayerFacade@@IEBA_NHHAEAUFMediaAudioTrackFormat@@@Z
?GetAudioTrackSampleRate@FMediaPlayerFacade@@QEBAIHH@Z
?GetAudioTrackType@FMediaPlayerFacade@@QEBA?AVFString@@HH@Z
?GetCachedAudioSampleRanges@FMediaSampleCache@@QEBAXAEAV?$TRangeSet@UFTimespan@@@@@Z
?GetCachedVideoSampleRanges@FMediaSampleCache@@QEBAXAEAV?$TRangeSet@UFTimespan@@@@@Z
?GetCurrentPlaybackTimeRange@FMediaPlayerFacade@@AEBA_NAEAV?$TRange@VFMediaTimeStamp@@@@MUFTimespan@@_N@Z
?GetDisplayTimeStamp@FMediaPlayerFacade@@QEBA?AVFMediaTimeStamp@@XZ
?GetDuration@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetGuid@FMediaPlayerFacade@@QEAAAEBUFGuid@@XZ
?GetInfo@FMediaPlayerFacade@@QEBA?AVFString@@XZ
?GetLastAudioRenderedSampleTime@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetMediaInfo@FMediaPlayerFacade@@QEBA?AVFVariant@@VFName@@@Z
?GetMediaMetadata@FMediaPlayerFacade@@QEBA?AV?$TSharedPtr@V?$TMap@VFString@@V?$TArray@V?$TUniquePtr@VIMediaMetadataItem@@U?$TDefaultDelete@VIMediaMetadataItem@@@@@@V?$TSizedDefaultAllocator@$0CA@@@@@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V?$TArray@V?$TUniquePtr@VIMediaMetadataItem@@U?$TDefaultDelete@VIMediaMetadataItem@@@@@@V?$TSizedDefaultAllocator@$0CA@@@@@$0A@@@@@$00@@XZ
?GetMediaName@FMediaPlayerFacade@@QEBA?AVFText@@XZ
?GetNumTrackFormats@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@H@Z
?GetNumTracks@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@@Z
?GetOverlaySamples@FMediaSampleCache@@QEAAXUFTimespan@@AEAV?$TArray@V?$TSharedPtr@VIMediaOverlaySample@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPlayerFactoryForUrl@FMediaPlayerFacade@@IEBAPEAVIMediaPlayerFactory@@AEBVFString@@PEBVIMediaOptions@@@Z
?GetPlayerName@FMediaPlayerFacade@@QEBA?AVFName@@XZ
?GetRate@FMediaPlayerFacade@@QEBAMXZ
?GetSelectedTrack@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@@Z
?GetStats@FMediaPlayerFacade@@QEBA?AVFString@@XZ
?GetSupportedRates@FMediaPlayerFacade@@QEBA?AV?$TRangeSet@M@@_N@Z
?GetTime@FMediaPlayerFacade@@QEBA?AUFTimespan@@XZ
?GetTimeStamp@FMediaPlayerFacade@@QEBA?AVFMediaTimeStamp@@XZ
?GetTimeStampInternal@FMediaPlayerFacade@@IEBA?AVFMediaTimeStamp@@_N@Z
?GetTimecode@FAppMediaTimeSource@@UEAA?AUFTimespan@@XZ
?GetTrackDisplayName@FMediaPlayerFacade@@QEBA?AVFText@@W4EMediaTrackType@@H@Z
?GetTrackFormat@FMediaPlayerFacade@@QEBAHW4EMediaTrackType@@H@Z
?GetTrackLanguage@FMediaPlayerFacade@@QEBA?AVFString@@W4EMediaTrackType@@H@Z
?GetUnpausedRate@FMediaPlayerFacade@@IEBAMXZ
?GetVideoSample@FMediaSampleCache@@QEAA?AV?$TSharedPtr@VIMediaTextureSample@@$00@@UFTimespan@@_N@Z
?GetVideoTrackAspectRatio@FMediaPlayerFacade@@QEBAMHH@Z
?GetVideoTrackDimensions@FMediaPlayerFacade@@QEBA?AU?$TIntPoint@H@Math@UE@@HH@Z
?GetVideoTrackFormat@FMediaPlayerFacade@@IEBA_NHHAEAUFMediaVideoTrackFormat@@@Z
?GetVideoTrackFrameRate@FMediaPlayerFacade@@QEBAMHH@Z
?GetVideoTrackFrameRates@FMediaPlayerFacade@@QEBA?AV?$TRange@M@@HH@Z
?GetVideoTrackType@FMediaPlayerFacade@@QEBA?AVFString@@HH@Z
?GetViewField@FMediaPlayerFacade@@QEBA_NAEAM0@Z
?GetViewOrientation@FMediaPlayerFacade@@QEBA_NAEAU?$TQuat@N@Math@UE@@@Z
?HasError@FMediaPlayerFacade@@QEBA_NXZ
?HaveAudioPlayback@FMediaPlayerFacade@@IEBA_NXZ
?HaveVideoPlayback@FMediaPlayerFacade@@IEBA_NXZ
?Initialize@FMediaAudioResampler@@QEAAXII@Z
?IsBuffering@FMediaPlayerFacade@@QEBA_NXZ
?IsClosed@FMediaPlayerFacade@@QEBA_NXZ
?IsConnecting@FMediaPlayerFacade@@QEBA_NXZ
?IsLooping@FMediaPlayerFacade@@QEBA_NXZ
?IsPaused@FMediaPlayerFacade@@QEBA_NXZ
?IsPlaying@FMediaPlayerFacade@@QEBA_NXZ
?IsPreparing@FMediaPlayerFacade@@QEBA_NXZ
?IsReady@FMediaPlayerFacade@@QEBA_NXZ
?IsVideoSampleStillGood@FMediaPlayerFacade@@AEBA_NAEBV?$TRange@VFMediaTimeStamp@@@@0_N@Z
?MonitorAudioEnablement@FMediaPlayerFacade@@AEAAXXZ
?NotifyLifetimeManagerDelegate_PlayerClosed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerCreateFailed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerCreated@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerDestroyed@FMediaPlayerFacade@@AEAA_NXZ
?NotifyLifetimeManagerDelegate_PlayerOpen@FMediaPlayerFacade@@AEAA_NAEAV?$TSharedPtr@VIControl@IMediaPlayerLifecycleManagerDelegate@@$00@@AEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@PEAVIMediaPlayerFactory@@_NI_K@Z
?NotifyLifetimeManagerDelegate_PlayerResourcesReleased@FMediaPlayerFacade@@AEAA_NI@Z
?Open@FMediaPlayerFacade@@QEAA_NAEBVFString@@PEBVIMediaOptions@@PEBUFMediaPlayerOptions@@@Z
?PostSampleProcessingTimeHandling@FMediaPlayerFacade@@AEAAXUFTimespan@@@Z
?PreSampleProcessingTimeHandling@FMediaPlayerFacade@@AEAAXXZ
?ProcessAudioSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessAudioSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessCaptionSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessCaptionSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessEvent@FMediaPlayerFacade@@IEAAXW4EMediaEvent@@_N@Z
?ProcessMetadataSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessMetadataSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessSubtitleSamples@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessSubtitleSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?ProcessVideoSamples@FMediaPlayerFacade@@AEAA_NAEAVIMediaSamples@@AEBV?$TRange@VFMediaTimeStamp@@@@@Z
?ProcessVideoSamplesV1@FMediaPlayerFacade@@AEAAXAEAVIMediaSamples@@V?$TRange@UFTimespan@@@@@Z
?PurgeOutdatedCaptionSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedMetadataSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedSubtitleSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?PurgeOutdatedVideoSamples@FMediaSamples@@UEAAIAEBVFMediaTimeStamp@@_NUFTimespan@@@Z
?QueryCacheState@FMediaPlayerFacade@@QEBAXW4EMediaTrackType@@W4EMediaCacheState@@AEAV?$TRangeSet@UFTimespan@@@@@Z
?ReceiveMediaEvent@FMediaPlayerFacade@@MEAAXW4EMediaEvent@@@Z
?ResetTracks@FMediaPlayerFacade@@AEAAXXZ
?Seek@FMediaPlayerFacade@@QEAA_NAEBUFTimespan@@@Z
?SelectDefaultTracks@FMediaPlayerFacade@@AEAAXXZ
?SelectTrack@FMediaPlayerFacade@@QEAA_NW4EMediaTrackType@@H@Z
?SendSinkEvent@FMediaPlayerFacade@@AEAAXW4EMediaSampleSinkEvent@@AEBUFMediaSampleSinkEventData@@@Z
?SetAreEventsSafeForAnyThread@FMediaPlayerFacade@@QEAAX_N@Z
?SetBlockOnTime@FMediaPlayerFacade@@QEAAXAEBUFTimespan@@@Z
?SetBlockOnTimeRange@FMediaPlayerFacade@@QEAAXAEBV?$TRange@UFTimespan@@@@@Z
?SetCacheWindow@FMediaPlayerFacade@@QEAAXUFTimespan@@0@Z
?SetGuid@FMediaPlayerFacade@@QEAAXAEAUFGuid@@@Z
?SetInput@FMediaAudioResampler@@IEAA_NAEBV?$TSharedPtr@VIMediaAudioSample@@$00@@@Z
?SetLastAudioRenderedSampleTime@FMediaPlayerFacade@@QEAAXUFTimespan@@@Z
?SetLooping@FMediaPlayerFacade@@QEAA_N_N@Z
?SetMediaOptions@FMediaPlayerFacade@@QEAAXPEBVIMediaOptions@@@Z
?SetNativeVolume@FMediaPlayerFacade@@QEAA_NM@Z
?SetRate@FMediaPlayerFacade@@QEAA_NM@Z
?SetTrackFormat@FMediaPlayerFacade@@QEAA_NW4EMediaTrackType@@HH@Z
?SetVideoTrackFrameRate@FMediaPlayerFacade@@QEAA_NHHM@Z
?SetViewField@FMediaPlayerFacade@@QEAA_NMM_N@Z
?SetViewOrientation@FMediaPlayerFacade@@QEAA_NAEBU?$TQuat@N@Math@UE@@_N@Z
?StartRecording@FMediaRecorder@@QEAAXAEBUFMediaRecorderData@1@@Z
?StateToString@MediaUtils@@YA?AVFString@@W4EMediaState@@@Z
?StaticStruct@FMediaPlayerOptions@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FMediaPlayerTrackOptions@@SAPEAVUScriptStruct@@XZ
?StopRecording@FMediaRecorder@@QEAAXXZ
?SupportsRate@FMediaPlayerFacade@@QEBA_NM_N@Z
?Tick@FMediaSampleCache@@QEAAXUFTimespan@@M0@Z
?TickFetch@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickInput@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickOutput@FMediaPlayerFacade@@UEAAXUFTimespan@@0@Z
?TickRecording@FMediaRecorder@@IEAAXXZ
?TickTickable@FMediaPlayerFacade@@UEAAXXZ
?TrackTypeToString@MediaUtils@@YA?AVFString@@W4EMediaTrackType@@@Z
?UpdateSeekStatus@FMediaPlayerFacade@@AEAAXPEBVFMediaTimeStamp@@@Z
?UpdateTrackSelectionWithPlayer@FMediaPlayerFacade@@AEAAXXZ
?WaitPendingTasks@FMediaRecorder@@QEAA_NAEBUFTimespan@@@Z
?Z_Construct_UEnum_MediaUtils_EMediaPlayerOptionBooleanOverride@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FMediaPlayerOptions@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FMediaPlayerTrackOptions@@YAPEAVUScriptStruct@@XZ
InitializeModule

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d386e3fbf87464c8aaaf6da5a584e8a4

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

fb:24:2e:3d:3c:ef:1f:59:a3:b6:57:12:05:d5:eb:f9:84:97:cc:39:62:9f:c0:83:76:c9:29:e5:b2:8b:6a:d7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

factoryserver-imagewritequeue-win64-shipping

factoryserver-core-win64-shipping

factoryserver-coreuobject-win64-shipping

factoryserver-media-win64-shipping

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 126KB - Virtual size: 125KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 1KB - Virtual size: 1KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

59:dd:d2:bf:a6:72:e1:01:5a:f0:0f:f1
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

fb:24:2e:3d:3c:ef:1f:59:a3:b6:57:12:05:d5:eb:f9:84:97:cc:39:62:9f:c0:83:76:c9:29:e5:b2:8b:6a:d7
Signer

.text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 1KB - Virtual size: 1KB