9b9049b3a7a8c5b77066db997d6589e583df9eb8ab2d44edf66428596820e566

Sharing

Copy URL

Twitter E-mail

General

Target

9b9049b3a7a8c5b77066db997d6589e583df9eb8ab2d44edf66428596820e566
Size

2.2MB
MD5

ef8b63058d44a3607af44bcb9b65ec1a
SHA1

015e00b3df02ad084336af75155b6635678f9e94
SHA256

9b9049b3a7a8c5b77066db997d6589e583df9eb8ab2d44edf66428596820e566
SHA512

23d42f0b26479166f27dcff75b35cc1ae1ce0b59d5f569a3059420569975987b71962881249d4028de256da424ad3dbd426929ae0941d38da77804ec1ef74ad3
SSDEEP

49152:qAjhrF/adpAw7L8wkl65x4JFF+0o/RWSsnjCeKll9Zyhq4BTIb5wrD6T+p2WAL7y:ZjhMdpAw7L8wkl65x4JFF+0o/RnsnjCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b9049b3a7a8c5b77066db997d6589e583df9eb8ab2d44edf66428596820e566

Files

9b9049b3a7a8c5b77066db997d6589e583df9eb8ab2d44edf66428596820e566
.dll windows x86

2d8333c3cc962893c9062805c8b9a8c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hdecode

?GetLastSnapshotPath@CPlayStream@HDECODE@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?StartClips@CPlayStream@HDECODE@@QAE_NABUClipParam@2@@Z
?StopClips@CPlayStream@HDECODE@@QAEXXZ
?IsClips@CPlayStream@HDECODE@@QBE_NXZ
?GetLastVideoFilePath@CPlayStream@HDECODE@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?OpenSound@CPlayStream@HDECODE@@QAE_N_N@Z
?CloseSound@CPlayStream@HDECODE@@QAEXXZ
?IsOpenSound@CPlayStream@HDECODE@@QBE_NXZ
?SetVolume@CPlayStream@HDECODE@@QAE_NG@Z
?GetVolume@CPlayStream@HDECODE@@QBEGXZ
?SetRegion@CPlayStream@HDECODE@@QAE_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DrawGraph@CPlayStream@HDECODE@@QAE_NIAAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ModGraph@CPlayStream@HDECODE@@QAE_NIHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?GetGraphNum@CPlayStream@HDECODE@@QAEHI@Z
?SetDecodeFrameType@CPlayStream@HDECODE@@QAE_NH@Z
?SetDisplayLostFrames@CPlayStream@HDECODE@@QAE_NHHH@Z
?SetDecodeThreadNum@CPlayStream@HDECODE@@QAE_NI@Z
?SetThrowErrStreamFlag@CPlayStream@HDECODE@@QAEX_N@Z
?SetPlayHandle@CPlayStream@HDECODE@@QAE_NPAUHWND__@@@Z
?GetCurPlayTime@CPlayStream@HDECODE@@QBE_JXZ
?DelPlayStreamBase@CPlayStream@HDECODE@@QAEXXZ
?FishEyeEnable@CPlayStream@HDECODE@@QAEHXZ
?FishEyeDisable@CPlayStream@HDECODE@@QAEHXZ
?FishEyeDelPort@CPlayStream@HDECODE@@QAEHI@Z
?FishEyeSetWnd@CPlayStream@HDECODE@@QAEHIPAX@Z
?FishEyeSetDecodeType@CPlayStream@HDECODE@@QAEH_N@Z
?FishEyeSetParam@CPlayStream@HDECODE@@QAEHW4FishEyeCorrectType@2@W4FishEyePlaceType@2@PAXH@Z
?FishEyeSetParamOnly@CPlayStream@HDECODE@@QAE_NIUFishEyeFecParam@2@@Z
?FishEyeDrag@CPlayStream@HDECODE@@QAE_NHABUFISHEYEPTZPoint@2@0I@Z
?FishEyeCaptureBySubPort@CPlayStream@HDECODE@@QAE_NIPBD@Z
?FishEyeSetCurrentPTZPort@CPlayStream@HDECODE@@QAE_NI@Z
?FishEyeGetCurrentPTZPort@CPlayStream@HDECODE@@QAE_NAAUFISHEYEPTZPoint@2@AAI@Z
?FishEyeSetPTZOutLineShowMode@CPlayStream@HDECODE@@QAE_NW4FishEyeTagFECShowMode@2@@Z
?FishEyeGetViewParam@CPlayStream@HDECODE@@QAE_NIW4FishEyeHRViewParamType@2@PAM@Z
?FishEyeSetViewParam@CPlayStream@HDECODE@@QAE_NIW4FishEyeHRViewParamType@2@M@Z
?FishEyeGetSpecialViewParam@CPlayStream@HDECODE@@QAE_NIW4FishEyeSpecialViewType@2@W4FishEyeHRViewParamType@2@PAM@Z
?FishEyeSet3DModelParam@CPlayStream@HDECODE@@QAE_NIW4FishEys3DModelParam@2@M@Z
?FishEyeSetCorrectEffect@CPlayStream@HDECODE@@QAE_NIW4FishEyeCorrectEffect@2@M@Z
?FishEyeSetDisplayRegion@CPlayStream@HDECODE@@QAE_NIIKPAUtagRECT@@PAUHWND__@@H@Z
?FishEyePTZ2WindowEx@CPlayStream@HDECODE@@QAEHIIUFishEyetagPTZParam@2@00AAM1@Z
?FishEyeScan@CPlayStream@HDECODE@@QAEHIMAAM0W4FishEyePlaceType@2@@Z
?FishEyeGetParam@CPlayStream@HDECODE@@QAEHIAAUFishEyeFecParam@2@@Z
?StartPlayHandle@CPlayStream@HDECODE@@QBE_NPAUHWND__@@@Z
?SetRotate@CPlayStream@HDECODE@@QAEHHH@Z
?SetIVSDataCallBack@CPlayStream@HDECODE@@QAEHPBD_N@Z
??0CPlayLocalFile@HDECODE@@QAE@PAVCLocalFilePlayStateCallBack@1@@Z
??1CPlayLocalFile@HDECODE@@QAE@XZ
?GetLastError@CPlayLocalFile@HDECODE@@QAEHXZ
?StartPlayLocalFile@CPlayLocalFile@HDECODE@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAUHWND__@@V34@ULOGINFO@2@@Z
?StopPlay@CPlayLocalFile@HDECODE@@QAEXXZ
?IsPlay@CPlayLocalFile@HDECODE@@QBE_NXZ
?GetDecoderCompany@CPlayLocalFile@HDECODE@@QBE?AW4Type@DecoderCompany@2@XZ
?Pause@CPlayLocalFile@HDECODE@@QAE_N_N@Z
?IsPause@CPlayLocalFile@HDECODE@@QBE_NXZ
?Frame@CPlayLocalFile@HDECODE@@QAE_NXZ
?QuitSyncGroup@CPlayStream@HDECODE@@QAE_NXZ
?IsFrame@CPlayLocalFile@HDECODE@@QBE_NXZ
?Snapshot@CPlayStream@HDECODE@@QAE_NABUSnapshotParam@2@@Z
?Fast@CPlayLocalFile@HDECODE@@QAE_NXZ
?Slow@CPlayLocalFile@HDECODE@@QAE_NXZ
?GetPlaySpeed@CPlayLocalFile@HDECODE@@QBEHXZ
?Normal@CPlayLocalFile@HDECODE@@QAE_NXZ
?RefreshPlay@CPlayLocalFile@HDECODE@@QAE_NXZ
?SetPlayPos@CPlayLocalFile@HDECODE@@QAE_NH@Z
?GetPlayPos@CPlayLocalFile@HDECODE@@QBEHXZ
?Snapshot@CPlayLocalFile@HDECODE@@QAE_NABUSnapshotParam@2@@Z
?SnapshotByCBFunc@CPlayLocalFile@HDECODE@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4SnapshotType@2@@Z
?GetLastSnapshotPath@CPlayLocalFile@HDECODE@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetBegTime@CPlayLocalFile@HDECODE@@QBE_JXZ
?GetEndTime@CPlayLocalFile@HDECODE@@QBE_JXZ
?GetRecordTime@CPlayLocalFile@HDECODE@@QBEIXZ
?GetPlayedTime@CPlayLocalFile@HDECODE@@QBEIXZ
?GetFileTime@CPlayLocalFile@HDECODE@@QBE_JXZ
?GetOSDTime@CPlayLocalFile@HDECODE@@QBE_JXZ
?GetCurPlaySysTime@CPlayLocalFile@HDECODE@@QBE_JXZ
?ThrowBFrame@CPlayLocalFile@HDECODE@@QAE_NI@Z
?SetRegion@CPlayLocalFile@HDECODE@@QAE_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DrawGraph@CPlayLocalFile@HDECODE@@QAE_NIAAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ModGraph@CPlayLocalFile@HDECODE@@QAE_NIHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?RegisterDrawFun@CPlayLocalFile@HDECODE@@QAE_N_NI0PAUHWND__@@@Z
?SetDisplayRegion@CPlayLocalFile@HDECODE@@QAE_NMMMM@Z
?SetDisplayRegionEx@CPlayLocalFile@HDECODE@@QAE_NHMMMMPAUHWND__@@H@Z
?EnterDigitalZoom@CPlayLocalFile@HDECODE@@QAE_NPAUHWND__@@_N@Z
?LeaveDigtalZoom@CPlayLocalFile@HDECODE@@QAE_NXZ
?OpenSound@CPlayLocalFile@HDECODE@@QAE_N_N@Z
?CloseSound@CPlayLocalFile@HDECODE@@QAEXXZ
?IsOpenSound@CPlayLocalFile@HDECODE@@QBE_NXZ
?SetVolume@CPlayLocalFile@HDECODE@@QAE_NG@Z
?GetVolume@CPlayLocalFile@HDECODE@@QBEGXZ
?GetGraphNum@CPlayLocalFile@HDECODE@@QAEHI@Z
?SetPlayedTimeEx@CPlayLocalFile@HDECODE@@QAE_NI@Z
?FramePrepareSetPosPlay@CPlayLocalFile@HDECODE@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ULOGINFO@2@@Z
?FrameStartSetPosPlay@CPlayLocalFile@HDECODE@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KPAUHWND__@@@Z
?StartSetPosPlay@CPlayLocalFile@HDECODE@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IPAUHWND__@@ULOGINFO@2@@Z
?OpenRenderPrivateData@CPlayLocalFile@HDECODE@@QAE_NH_N@Z
?RenderPrivateData@CPlayLocalFile@HDECODE@@QAE_NH_N@Z
?RenderPrivateDataEx@CPlayLocalFile@HDECODE@@QAE_NHH_N@Z
?SetColorParam@CPlayLocalFile@HDECODE@@QAEHAAUCOLOR_PARAM@2@@Z
?SetVideoEnhance@CPlayLocalFile@HDECODE@@QAE_NH_N@Z
?SetEnhanceParamConfig@CPlayLocalFile@HDECODE@@QAE_NAAUVIE_MODULE_PARAM@2@@Z
?SetEnhanceRegion@CPlayLocalFile@HDECODE@@QAE_NJAAUtagRECT@@@Z
?GetPictureSize@CPlayLocalFile@HDECODE@@QAE_NAAI0@Z
?SetRotate@CPlayLocalFile@HDECODE@@QAEHHH@Z
??0SRTRANSFERPARAM@HDECODE@@QAE@XZ
??0ClipParam@HDECODE@@QAE@ABU01@@Z
??0COLOR_PARAM@HDECODE@@QAE@XZ
??0FISHEYEPTZPoint@HDECODE@@QAE@XZ
?HDecodeInit@HDECODE@@YA_NW4version@@@Z
?HDecodeUninit@HDECODE@@YAXXZ
?HDecodeRestart@HDECODE@@YA_NHW4version@@AA_N@Z
?AddToSyncGroup@CPlayStream@HDECODE@@QAE_NH@Z
?SetEnhanceParamConfig@CPlayStream@HDECODE@@QAE_NAAUVIE_MODULE_PARAM@2@@Z
?SetVideoEnhance@CPlayStream@HDECODE@@QAE_NH_N@Z
?SetColorParam@CPlayStream@HDECODE@@QAEHAAUCOLOR_PARAM@2@@Z
?GetSupplementaryTimeZone@CPlayStream@HDECODE@@QAEHPAH@Z
?SetSupplementaryTimeZone@CPlayStream@HDECODE@@QAEHH@Z
?GetFrameRate@CPlayLocalFile@HDECODE@@QAE_NAAI@Z
?IsInSyncGroup@CPlayStream@HDECODE@@QAE_NXZ
?RenderPrivateDataEx@CPlayStream@HDECODE@@QAE_NHH_N@Z
?RenderPrivateData@CPlayStream@HDECODE@@QAE_NH_N@Z
?CloseRenderPrivateData@CPlayStream@HDECODE@@QAE_NH@Z
?OpenRenderPrivateData@CPlayStream@HDECODE@@QAE_NH@Z
?CloseSmartAnalyze@CPlayStream@HDECODE@@QAE_NXZ
?OpenSmartAnalyze@CPlayStream@HDECODE@@QAE_NXZ
?CloseIVS@CPlayStream@HDECODE@@QAE_NXZ
?OpenIVS@CPlayStream@HDECODE@@QAE_NXZ
?ClosePOS@CPlayStream@HDECODE@@QAE_NXZ
?OpenPOS@CPlayStream@HDECODE@@QAE_NXZ
?LeaveDigtalZoom@CPlayStream@HDECODE@@QAE_NXZ
?EnterDigitalZoom@CPlayStream@HDECODE@@QAE_NPAUHWND__@@_N@Z
?SetDisplayRegionEx@CPlayStream@HDECODE@@QAE_NHMMMMPAUHWND__@@H@Z
?SetDisplayRegion@CPlayStream@HDECODE@@QAE_NMMMMPAUHWND__@@@Z
?RegisterDrawFun@CPlayStream@HDECODE@@QAE_N_NI0PAUHWND__@@@Z
?HDecodeGetDecodeProgressPid@HDECODE@@YAXAAH0@Z
?GetFrameRate@CPlayStream@HDECODE@@QBE_NAAI@Z
?GetPictureSize@CPlayStream@HDECODE@@QBE_NAAI0@Z
?RefreshPlay@CPlayStream@HDECODE@@QBE_NXZ
?SetDisplayBuf@CPlayStream@HDECODE@@QAE_NI@Z
?ThrowBFrame@CPlayStream@HDECODE@@QAE_NI@Z
?GetRemainBuffer@CPlayStream@HDECODE@@QAE_KXZ
?ClearBuf@CPlayStream@HDECODE@@QAEXXZ
?GetOSDTime@CPlayStream@HDECODE@@QBE_JXZ
?ReversePlay@CPlayStream@HDECODE@@QAE_N_N@Z
?Normal@CPlayStream@HDECODE@@QAE_N_N@Z
?IsFrame@CPlayStream@HDECODE@@QBE_NXZ
?Frame@CPlayStream@HDECODE@@QAE_NXZ
?GetPlaySpeed@CPlayStream@HDECODE@@QBEHXZ
?SetSpeedTo@CPlayStream@HDECODE@@QAEHHHH@Z
?SetStreamStartTime@CPlayStream@HDECODE@@QAEH_J@Z
?IsPause@CPlayStream@HDECODE@@QBE_NXZ
?Pause@CPlayStream@HDECODE@@QAE_N_N@Z
?IsEqualToStreamHead@CPlayStream@HDECODE@@QAE_NPBEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Stop@CPlayStream@HDECODE@@QAEXXZ
?RefusedInput@CPlayStream@HDECODE@@QAEX_N@Z
?InputStreamData@CPlayStream@HDECODE@@QAE?AW4InputStreamResult@12@PBEI@Z
?SetSmallEagleEyeRotate@CPlayStream@HDECODE@@QAEHAAUSRTRANSFERPARAM@2@@Z
?SetSmallEagleEyeMode@CPlayStream@HDECODE@@QAE_NH@Z
?StartPlayStream@CPlayStream@HDECODE@@QAE_NABUPlayStreamParam@2@@Z
?SetAdditionDataCallBack@CPlayStream@HDECODE@@QAE_NHP6GXPAUADDITION_INFO@2@PAX@Z1@Z
?SetDisplayCallBackYUV@CPlayStream@HDECODE@@QAE_NP6GXPAUDISPLAY_INFO_YUV@2@@ZHPAX@Z
?SetDecDataCallBack@CPlayStream@HDECODE@@QAE_NP6GXPBDHPAUFRAME_INFO@2@PAX@Z2@Z
?GetLastError@CPlayStream@HDECODE@@QAEHXZ
??1CPlayStream@HDECODE@@QAE@XZ
??0CPlayStream@HDECODE@@QAE@PAVCPlayStateCallBack@1@_N@Z
??1PlayStreamParam@HDECODE@@QAE@XZ
??0PlayStreamParam@HDECODE@@QAE@XZ
?SetLinkRemark@CPreviewClip@HDECODE@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?GetClipedSize@CPreviewClip@HDECODE@@QBE_JXZ
?InputData@CPreviewClip@HDECODE@@QAE_NHPBEI@Z
?GetLastClipVideoFilePath@CPreviewClip@HDECODE@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IsClip@CPreviewClip@HDECODE@@QBE_NXZ
?StopClip@CPreviewClip@HDECODE@@QAE_NXZ
?StartClip@CPreviewClip@HDECODE@@QAE_NABUClipParam@2@@Z
?GetLastError@CPreviewClip@HDECODE@@QAEHXZ
??1CPreviewClip@HDECODE@@QAE@XZ
??0CPreviewClip@HDECODE@@QAE@PAVCPlayStateCallBack@1@@Z
??0CPlayStateCallBack@HDECODE@@QAE@XZ
??0CLocalFilePlayStateCallBack@HDECODE@@QAE@XZ
??1ClipParam@HDECODE@@QAE@XZ
??0ClipParam@HDECODE@@QAE@XZ
??1SnapshotParam@HDECODE@@QAE@XZ
??0SnapshotParam@HDECODE@@QAE@XZ
?FrameBack@CPlayLocalFile@HDECODE@@QAE_NXZ

hpr

HPR_FreeAdapterInfo
HPR_GetAdapterInfo
HPR_GetSystemLastError
?Lock@HPR_Mutex@@QAEHXZ
HPR_GetMemoryStatus
HPR_GetCPUPerformance
HPR_GetCPUNumber
HPR_GetTimeTick
HPR_Sleep
HPR_Thread_Wait
HPR_Thread_Create
??1HPR_Mutex@@QAE@XZ
??0HPR_Mutex@@QAE@XZ
HPR_OpenFile
HPR_CloseFile
HPR_WriteFile
HPR_RenameFile
HPR_GetLastError
HPR_Strncpy
HPR_ZeroMemory
??1hpr_sem@hpr@@UAE@XZ
??1hpr_recursive_mutex@hpr@@UAE@XZ
?Unlock@HPR_Mutex@@QAEHXZ
_HPR_GetNetWorkFlowDataEx@4
HPR_DeleteFile
HPR_CopyFile
HPR_OpenDir
HPR_CreateEvent
HPR_CloseEvent
HPR_WaitForSingleObject
HPR_ResetEvent
HPR_SetEvent
HPR_ThreadDetached_Create

htrace

ord4
ord16
ord15
ord14
ord10
ord8
ord2
ord3
ord7

base

?LocalToUTF8@Base@@YA_NPBDIPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?MakeFullPathDir@FileUtil@Base@@YAXPBD@Z
?str_fmt@StringUtil@Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDZZ
?DVRTime2TimeT@TimeUtil@Base@@YA_JABUNET_DVR_TIME@@@Z
?TimeT2DVRTime@TimeUtil@Base@@YA?AUNET_DVR_TIME@@_J@Z
?Instance@?$CSingleton@VCMessageLoopForCleanup@Base@@@Base@@SAAAVCMessageLoopForCleanup@2@XZ
?Instance@?$CSingleton@VCMessageLoopForNotify@Base@@@Base@@SAAAVCMessageLoopForNotify@2@XZ
?Start@CMessageLoopWorkThread@Base@@QAE_NXZ
?GetFileHandle@CWriteStreamOrLog@lpclog@@QAEPAXXZ
?GetIsExistHead@CWriteStreamOrLog@lpclog@@QAE_NXZ
?CloseMp4File@CWriteStreamOrLog@lpclog@@QAEHXZ
?WriteMp4File@CWriteStreamOrLog@lpclog@@QAEHHPAXHH@Z
?GetMp4FileName@CWriteStreamOrLog@lpclog@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?WriteExtraLogInfo@CWriteStreamOrLog@lpclog@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PBDZZ
?GetIsThread@CWriteStreamOrLog@lpclog@@SA_NXZ
?WriteStreamOrLogDelThread@CWriteStreamOrLog@lpclog@@SAXXZ
??1CWriteStreamOrLog@lpclog@@QAE@XZ
??0CWriteStreamOrLog@lpclog@@QAE@XZ
?InitLog@lpclog@@YAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?TimeT2LocalTimeStrISO@TimeUtil@Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
?SetLastError@Error@Base@@SAXABUErrorCode@12@@Z
??1ErrorCode@Error@Base@@QAE@XZ
??0ErrorCode@Error@Base@@QAE@HHH@Z
?MakeStringFormat@lpclog@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@0PBDZZ
?LPCFormatLog@lpclog@@YAXHPBD0ZZ
?GetRunThreadID@CMessageLoopWorkThread@Base@@UAEHXZ
?Quit@CMessageLoopWorkThread@Base@@UAEXXZ
?Run@CMessageLoopWorkThread@Base@@MAEXXZ
?Stop@CMessageLoopWorkThread@Base@@UAEXXZ
??0CNoncopyable@Base@@IAE@XZ
?SetSubSystemErrorCode@ErrorCode@Error@Base@@QAEXH@Z
??0ErrorCode@Error@Base@@QAE@ABU012@@Z
?GetLastError@Error@Base@@SA?AUErrorCode@12@XZ
??0CWeakReference@details@Base@@QAE@XZ
??1CWeakReference@details@Base@@QAE@XZ
?IsValid@CWeakReference@details@Base@@QBE_NXZ
??4CWeakReference@details@Base@@QAEAAV012@ABV012@@Z
??0CWeakReferenceOwner@details@Base@@QAE@XZ
??1CWeakReferenceOwner@details@Base@@QAE@XZ
?GetRef@CWeakReferenceOwner@details@Base@@QBE?AVCWeakReference@23@XZ
?Invalidate@CWeakReferenceOwner@details@Base@@QAEXXZ
??1CWeakPtrBase@details@Base@@QAE@XZ
??0CWeakPtrBase@details@Base@@IAE@ABVCWeakReference@12@@Z
??0CWeakPtrBase@details@Base@@QAE@ABV012@@Z
??0CCancelableTask@Base@@QAE@XZ
?PostTask@CMessageLoopBase@Base@@QAE_NPAVCTask@2@@Z
?HasRefs@CWeakReferenceOwner@details@Base@@QBE_NXZ
??0CTask@Base@@QAE@XZ
??1CTask@Base@@UAE@XZ
?TimeT2StrDatetime@TimeUtil@Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
??0CSingleBaseThreadNoAssert@Base@@IAE@XZ
??1CSingleBaseThreadNoAssert@Base@@IAE@XZ
?BeginThread@CSingleBaseThreadNoAssert@Base@@QAE_NH@Z
?EndThread@CSingleBaseThreadNoAssert@Base@@QAEXXZ
??4ErrorCode@Error@Base@@QAEAAU012@ABU012@@Z
??0CNonThreadSafe@Base@@QAE@XZ
??1CNonThreadSafe@Base@@QAE@XZ
?TimeT2StrShortDatetime@TimeUtil@Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
??0ErrorCode@Error@Base@@QAE@HHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1CNoncopyable@Base@@IAE@XZ
??0CMessageLoopWorkThread@Base@@QAE@XZ
??0ErrorCode@Error@Base@@QAE@XZ
??1CCancelableTask@Base@@UAE@XZ
??1CMessageLoopWorkThread@Base@@UAE@XZ

crashapi

ord1
ord6
ord2

libcurl

curl_easy_cleanup
curl_easy_perform
curl_easy_setopt
curl_easy_init
curl_global_init

kernel32

FormatMessageA
LocalFree
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
OpenEventA
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemInfo
GetExitCodeProcess
GetProcessTimes
HeapFree
HeapAlloc
GetProcessHeap
ReleaseSemaphore
WaitForMultipleObjectsEx
CreateSemaphoreA
WaitForSingleObjectEx
GetSystemTimeAsFileTime
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
MultiByteToWideChar
CreateDirectoryA
CreateFileA
GetDiskFreeSpaceExA
GetDriveTypeA
GetFileAttributesA
WriteFile
CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA
CreateFileMappingA
Sleep
OpenProcess
WideCharToMultiByte
K32GetProcessMemoryInfo
WaitForSingleObject
CreateThread

advapi32

RegOpenKeyW
RegCloseKey
RegQueryValueExW

msvcp140

??Bid@locale@std@@QAEIXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?is@?$ctype@D@std@@QBE_NFD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mtx_trylock
?_Xbad_function_call@std@@YAXXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?setf@ios_base@std@@QAEHH@Z
?setf@ios_base@std@@QAEHHH@Z
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
_Thrd_start
_Thrd_join
_Thrd_id
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Strcoll

ws2_32

ntohs

vcruntime140

memset
__std_exception_destroy
__std_exception_copy
memmove
memcpy
__CxxFrameHandler3
_purecall
strchr
memchr
memcmp
__std_terminate
__RTDynamicCast
__std_type_info_destroy_list
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_beginthreadex
strerror
_getpid
terminate

api-ms-win-crt-stdio-l1-1-0

_wfopen
__stdio_common_vsprintf_s
fwrite
__stdio_common_vsprintf
__stdio_common_vsscanf
fflush
fclose

api-ms-win-crt-string-l1-1-0

wcslen
isalpha
strncmp
strpbrk
strcmp
strlen
strncpy
strcpy_s
strncpy_s
strtok_s

api-ms-win-crt-heap-l1-1-0

malloc
realloc
_callnewh
free

api-ms-win-crt-time-l1-1-0

clock
_gmtime64
_localtime64_s
strftime
_time64

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

_putenv
getenv

api-ms-win-crt-filesystem-l1-1-0

_access

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

??0HPR_Guard@@QAE@PAVHPR_Mutex@@@Z
??0hpr_recursive_mutex@hpr@@QAE@ABV01@@Z
??0hpr_sem@hpr@@QAE@ABV01@@Z
??1HPR_Guard@@QAE@XZ
??4HPR_Guard@@QAEAAV0@ABV0@@Z
??4HPR_Mutex@@QAEAAV0@ABV0@@Z
??4HPR_Sema@@QAEAAV0@ABV0@@Z
??4hpr_mutex@hpr@@QAEAAV01@ABV01@@Z
??4hpr_recursive_mutex@hpr@@QAEAAV01@ABV01@@Z
??4hpr_sem@hpr@@QAEAAV01@ABV01@@Z
??4hpr_string@hpr@@QAEAAV01@$$QAV01@@Z
??4hpr_string@hpr@@QAEAAV01@ABV01@@Z
??_7hpr_recursive_mutex@hpr@@6B@
??_7hpr_sem@hpr@@6B@
?Release@HPR_Guard@@QAEXXZ
HP_AddToSyncGroup
HP_ChangeMode
HP_CloseRenderPrivateData
HP_CloseSound
HP_ControlPrivateSubData
HP_CreateInstance
HP_DecodeErrorCode
HP_DestroyInstance
HP_DownLoadFile
HP_DrawGraph
HP_EnterDigitalZoom
HP_Fast
HP_FishEyeDelPort
HP_FishEyeDisable
HP_FishEyeEnable
HP_FishEyeGetCurrentPTZPort
HP_FishEyeGetParam
HP_FishEyeGetSpecialViewParam
HP_FishEyeGetViewParam
HP_FishEyePTZ2WindowEx
HP_FishEyeScan
HP_FishEyeSet3DModelParam
HP_FishEyeSetCorrectEffect
HP_FishEyeSetCurrentPTZPort
HP_FishEyeSetDecodeType
HP_FishEyeSetDisplayRegion
HP_FishEyeSetPTZOutLineShowMode
HP_FishEyeSetParam
HP_FishEyeSetParamOnly
HP_FishEyeSetViewParam
HP_FishEyeSetWnd
HP_ForceIFrame
HP_Frame
HP_GetFrameRate
HP_GetGraphNum
HP_GetInstantBegTime
HP_GetInstantEndTime
HP_GetInstantPlayedTime
HP_GetLastClipVideoFilePath
HP_GetLastStorageVideoFilePath
HP_GetOSDTime
HP_GetOSDTimeEx
HP_GetPictureData
HP_GetPictureDataV20
HP_GetPictureSize
HP_GetPlaySpeed
HP_GetStreamHeadType
HP_GetStreamRate
HP_GetStreamTime
HP_GetSupplementaryTimeZone
HP_GetSystemFormat
HP_GetVideoFormat
HP_GetVolume
HP_InitEnv
HP_InitEnv_Ezviz
HP_InitEnv_V20
HP_IsClips
HP_IsDecode
HP_IsFrame
HP_IsInSyncGroup
HP_IsOpenSound
HP_IsPause
HP_IsReversePlay
HP_IsStorage
HP_LeaveDigtalZoom
HP_LogOutDevice
HP_LoginDevice
HP_ModGraph
HP_Normal
HP_OpenRenderPrivateData
HP_OpenSound
HP_Pause
HP_QuitSyncGroup
HP_RefreshPlay
HP_RegisterDrawFun
HP_RenderPrivateData
HP_ReversePlay
HP_SeekByTime
HP_SeekByTime_V20
HP_SetAdditionDataCallBack
HP_SetColorParam
HP_SetDecDataCallBack
HP_SetDecodeFrameType
HP_SetDecodeFrameType_V20
HP_SetDecodeGPU
HP_SetDecodeThreadNum
HP_SetDecoderBuffer
HP_SetDisplayCallBackYUV
HP_SetDisplayLostFrames
HP_SetDisplayRegion
HP_SetDisplayRegionEx
HP_SetEnhanceParamConfig
HP_SetExtractFrame
HP_SetGeneralConfig
HP_SetGlobalRtspTimeout
HP_SetIVSDataCallBack
HP_SetInstantBufferSize
HP_SetInstantEnable
HP_SetInstantPlayedTime
HP_SetMsgInfoCallBack
HP_SetNetWorkPerfor
HP_SetNetWorkPerfor_V20
HP_SetPictureDataCallBack
HP_SetRegion
HP_SetRotate
HP_SetSmallEagleEyeMode
HP_SetSmallEagleEyeRotate
HP_SetSpeed
HP_SetSpeed_V20
HP_SetStreamBufferSize
HP_SetStreamDataCallBack
HP_SetStreamLimitSpeed
HP_SetSupplementaryTimeZone
HP_SetTokenParams
HP_SetTokenParamsEzviz
HP_SetVideoEnhance
HP_SetVolume
HP_Slow
HP_Snapshot
HP_Snapshot_V20
HP_StartClips
HP_StartCloudPlayBack
HP_StartInstant
HP_StartPicture
HP_StartPlayBack
HP_StartPlayBackEx
HP_StartPlayBackEzviz
HP_StartPlayBackNCG
HP_StartPlayBackNPC
HP_StartPlayFile
HP_StartPlayHandle
HP_StartRealPlay
HP_StartRealPlayEzviz
HP_StartRealPlayMuticast
HP_StartRealPlayNCG
HP_StartRealPlayNPC
HP_StartStorage
HP_StartStream
HP_StartUnDecode
HP_StopClips
HP_StopCloudBack
HP_StopInstant
HP_StopPicture
HP_StopPlayBack
HP_StopPlayFile
HP_StopRealPlay
HP_StopStorage
HP_StopStream
HP_StopUnDecode
HP_ThrowBFrame
HP_UnInitEnv
HP_UnInitEnv_Ezviz
HP_UnRegisterDrawFun
_HP_ClosePOS@4
_HP_IsDecoder@4
_HP_OpenPOS@4

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d8333c3cc962893c9062805c8b9a8c1

Headers

DLL Characteristics

File Characteristics

Imports

hdecode

hpr

htrace

base

crashapi

libcurl

kernel32

advapi32

msvcp140

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 447KB - Virtual size: 447KB

.data Size: 14KB - Virtual size: 46KB

.idata Size: 32KB - Virtual size: 31KB

.gfids Size: 512B - Virtual size: 344B

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 81KB - Virtual size: 81KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 447KB - Virtual size: 447KB

.data
Size: 14KB - Virtual size: 46KB

.idata
Size: 32KB - Virtual size: 31KB

.gfids
Size: 512B - Virtual size: 344B

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 81KB - Virtual size: 81KB