84728b48146559476d8310b4dd1d8d75_JaffaCakes118
- SHA256 4dbb413893d89a2ab0ad20db7e8ba364bcccc02fbd3ee9ac6f66b5f3e0b1f7aa
Overview
overview
7Static
static
3DVR4000qud...un.exe
windows7-x64
1DVR4000qud...un.exe
windows10-2004-x64
1DVR4000qud...up.exe
windows7-x64
7DVR4000qud...up.exe
windows10-2004-x64
7DVR4000qud...nt.chm
windows7-x64
1DVR4000qud...nt.chm
windows10-2004-x64
1DVR4000qud...em.dll
windows7-x64
1DVR4000qud...em.dll
windows10-2004-x64
1DVR4000qud...ll.exe
windows7-x64
1DVR4000qud...ll.exe
windows10-2004-x64
1DVR4000qud...re.sys
windows7-x64
1DVR4000qud...re.sys
windows10-2004-x64
1DVR4000qud...nt.chm
windows7-x64
1DVR4000qud...nt.chm
windows10-2004-x64
1DVR4000qud...nt.doc
windows7-x64
4DVR4000qud...nt.doc
windows10-2004-x64
1DVR4000qud...er.chm
windows7-x64
1DVR4000qud...er.chm
windows10-2004-x64
1DVR4000qud...er.doc
windows7-x64
4DVR4000qud...er.doc
windows10-2004-x64
1DVR4000qud...er.chm
windows7-x64
1DVR4000qud...er.chm
windows10-2004-x64
1DVR4000qud...er.doc
windows7-x64
4DVR4000qud...er.doc
windows10-2004-x64
1DVR4000qud...EB.doc
windows7-x64
4DVR4000qud...EB.doc
windows10-2004-x64
1DVR4000qud...eb.chm
windows7-x64
1DVR4000qud...eb.chm
windows10-2004-x64
1DVR4000qud...up.exe
windows7-x64
7DVR4000qud...up.exe
windows10-2004-x64
7DVR4000qud...ck.dll
windows7-x64
1DVR4000qud...ck.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DVR4000qud/Autorun.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DVR4000qud/Autorun.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
DVR4000qud/Client/DVR4000-Client-Setup.exe
Resource
win7-20240419-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
DVR4000qud/Client/DVR4000-Client-Setup.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
DVR4000qud/Client/doc/Simplified/Client.chm
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
DVR4000qud/Client/doc/Simplified/Client.chm
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
DVR4000qud/Client/oem.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
DVR4000qud/Client/oem.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
DVR4000qud/Driver/DrvInstall.exe
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
DVR4000qud/Driver/DrvInstall.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
DVR4000qud/Driver/hvCapture.sys
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
DVR4000qud/Driver/hvCapture.sys
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
DVR4000qud/Help/Simplified/Client.chm
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
DVR4000qud/Help/Simplified/Client.chm
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
DVR4000qud/Help/Simplified/Client.doc
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral16
Sample
DVR4000qud/Help/Simplified/Client.doc
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
DVR4000qud/Help/Simplified/Player.chm
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
DVR4000qud/Help/Simplified/Player.chm
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
DVR4000qud/Help/Simplified/Player.doc
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral20
Sample
DVR4000qud/Help/Simplified/Player.doc
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
DVR4000qud/Help/Simplified/Server.chm
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
DVR4000qud/Help/Simplified/Server.chm
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
DVR4000qud/Help/Simplified/Server.doc
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
DVR4000qud/Help/Simplified/Server.doc
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
DVR4000qud/Help/Simplified/WEB.doc
Resource
win7-20240215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral26
Sample
DVR4000qud/Help/Simplified/WEB.doc
Resource
win10v2004-20240426-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral27
Sample
DVR4000qud/Help/Simplified/Web.chm
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
DVR4000qud/Help/Simplified/Web.chm
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
DVR4000qud/Server/DVR4000-Server-Setup.exe
Resource
win7-20240220-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
DVR4000qud/Server/DVR4000-Server-Setup.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral31
Sample
DVR4000qud/Server/back.dll
Resource
win7-20240419-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
DVR4000qud/Server/back.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 84728b48146559476d8310b4dd1d8d75_JaffaCakes118
- Size 17.6MB
- Sample240530-rnb5gace53
- SHA256 4dbb413893d89a2ab0ad20db7e8ba364bcccc02fbd3ee9ac6f66b5f3e0b1f7aa
- MD5 84728b48146559476d8310b4dd1d8d75
- SHA1 118f348a85cb373ab1eb70dc7402e2af7891ec2d
- SHA512 dd27a12919a2bc07bada0058cfe8bb272e9947eecdff64f5e7766b2deae5d8c7413d0f9722ea523848459b6f2717c61216fe0a2437ab0fb73fe925906c8e8955
- SSDEEP 393216:pito1fEwnRNtiXRto1HzGRLRkGSKHuRdIEg4K9zYWV9kqMX6to1osdg+ezcUszr:0to1fNRNtiXRto1S5VxmOy9xX6to1Zd7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/DVR4000qud/Autorun.exe unpack001/DVR4000qud/Client/DVR4000-Client-Setup.exe unpack001/DVR4000qud/Driver/DrvInstall.exe unpack001/DVR4000qud/Driver/hvCapture.sys unpack001/DVR4000qud/Server/DVR4000-Server-Setup.exe unpack001/DVR4000qud/Tools/160G Maxtor DiskPatch/Maxtor160GMend.exe unpack001/DVR4000qud/Tools/HV4000 WMP Filters/hvfSource.ax
File Explorer
-
84728b48146559476d8310b4dd1d8d75_JaffaCakes118.zip 17.6MB
-
DVR4000qud/Autorun.exe.exe 2.1MB
-
DVR4000qud/Autorun.inf45B
-
DVR4000qud/Client/DVR4000-Client-Setup.exe.exe 1.4MB
-
DVR4000qud/Client/doc/Simplified/Client.chm.chm 353KB
-
DVR4000qud/Client/oem.dll2KB
-
DVR4000qud/Driver/DrvInstall.exe.exe 303KB
-
DVR4000qud/Driver/DrvInstall.ini1KB
-
DVR4000qud/Driver/hvCapture.inf2KB
-
DVR4000qud/Driver/hvCapture.sys.sys 40KB
-
DVR4000qud/Help/Simplified/Client.chm.chm 353KB
-
DVR4000qud/Help/Simplified/Client.doc.doc 591KB
-
DVR4000qud/Help/Simplified/Player.chm.chm 287KB
-
DVR4000qud/Help/Simplified/Player.doc.doc 344KB
-
DVR4000qud/Help/Simplified/Server.chm.chm 1.0MB
-
DVR4000qud/Help/Simplified/Server.doc.doc 2.1MB
-
DVR4000qud/Help/Simplified/WEB.doc.doc 832KB
-
DVR4000qud/Help/Simplified/Web.chm.chm 317KB
-
DVR4000qud/Server/DVR4000-Server-Setup.exe.exe 8.4MB
-
DVR4000qud/Server/back.dll225KB
-
DVR4000qud/Server/doc/Simplified/Client.chm.chm 353KB
-
DVR4000qud/Server/doc/Simplified/Player.chm.chm 287KB
-
DVR4000qud/Server/doc/Simplified/Server.chm.chm 1.0MB
-
DVR4000qud/Server/doc/Simplified/Web.chm.chm 317KB
-
DVR4000qud/Server/flash.dll21KB
-
DVR4000qud/Server/oem.dll2KB
-
DVR4000qud/Tools/160G Maxtor DiskPatch/160g.reg294B
-
DVR4000qud/Tools/160G Maxtor DiskPatch/Maxtor160GMend.exe.exe 64KB
-
DVR4000qud/Tools/HV4000 WMP Filters/InstallFilter.bat23B
-
DVR4000qud/Tools/HV4000 WMP Filters/UninstallFilter.bat26B
-
DVR4000qud/Tools/HV4000 WMP Filters/hvfSource.ax.dll 440KB
-
DVR4000qud/˵.url111B
-
readme.url.url 328B
-
下载王www.xzking.com.url.url 302B
DVR4000qud/Autorun.exe
- IMPHASH f85145a1d69f676a5679167b7cd7eb5e
- SHA256 070693526aafc1fd9be1cd60f92a1f9429d0af41c07ed7f19493e2e93d4a9e17
- MD5 e4cc37a313630251e5274eb045b56079
- SHA1 08dcf76ce3bba596d53d5b3b6dad671377c84234
- SHA512 1b8aa9edc020415ed992c100141a94e15ccf3c277162413aca1b6a714fbb99a085580183d07df629a2f78d9ca21271ea741a95eaf9c329ee2849456e6da55e28
- SSDEEP 24576:mLCoB6R0VLnf6nuTdzBvIuvpBPwcLZCJe:HYcIL6uTN+uvpBPwcl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord540
ord561
ord825
ord800
ord3626
ord3663
ord641
ord795
ord2414
ord2514
ord2621
ord1134
ord860
ord2725
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5714
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord6055
ord1776
ord5290
ord3402
ord3721
ord3573
ord1146
ord1168
ord567
ord2302
ord3571
ord5953
ord6215
ord535
ord2818
ord2919
ord5683
ord858
ord537
ord1641
ord4160
ord2863
ord2379
ord755
ord470
ord4476
ord2575
ord4396
ord3574
ord609
ord556
ord809
ord4275
ord6197
ord6377
ord4284
ord3089
ord2864
ord2754
ord5875
ord3874
ord2859
ord640
ord1640
ord323
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord5261
ord4673
ord1576
msvcrt
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_setmbcp
__CxxFrameHandler
sprintf
__dllonexit
_onexit
_exit
__p__commode
kernel32
GetStartupInfoA
GetModuleHandleA
FindFirstFileA
FindClose
GetSystemDefaultLangID
GetModuleFileNameA
user32
GetCapture
PostMessageA
GetParent
GetSysColor
GetCursorPos
ReleaseCapture
ClientToScreen
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
FillRect
GetSystemMenu
AppendMenuA
SendMessageA
LoadBitmapA
EnableWindow
WindowFromPoint
SetWindowTextA
LoadImageA
LoadIconA
InvalidateRect
gdi32
CreateCompatibleDC
BitBlt
DeleteDC
CreatePatternBrush
GetObjectA
ExtTextOutA
GetTextMetricsA
SelectObject
GetStockObject
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
Name
.text
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, productName=Unmarked objects (old),
count=8, id=19, version=8034,
count=1, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=197, id=1, productName=Unmarked objects,
count=5, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
DVR4000qud/Autorun.inf
- SHA256 59d7a810f30978f7ccbfa7a8ad46ea8b528829185af2eb9526ee86c824fe3db3
- MD5 01d60a5d6bbd811e2ed08c646a9dc415
- SHA1 d55e65213194853e7429100c766e58aa9e1e8ea6
- SHA512 8a7a656bfb8b67521f2c55d244d6912c55413e8330dd16ece0f590b4340df3df151c60b2d2bc0151362ef927526116cfd80550a477f1b69116d5192cae9e8842
- MD5 SHA1 SHA512
DVR4000qud/Client/DVR4000-Client-Setup.exe
- IMPHASH 2f6203366bc5aa9ff8b6cf7753ead32d
- SHA256 71b7bcc43def69079781ad9b5ee495f64cc6e99595283d3e42cef2ac6803991c
- MD5 ce16a2e1e6f4b86834fc1b2b737490a6
- SHA1 a003f627e5bcfd0b21534dd1d471d828de76ab33
- SHA512 e7fae233cc83ff85e2f6e5f36e7b7e26f5c38566604f59e832cc400a25335d9a9729538bab1cde632e5e431bd58e82951f8fd19a4241317d212b10fdbb6d5e84
- SSDEEP 24576:04vDh0+JQF32yCeFWryU93Ey7OwgpxLJQtGM/osjPteMxLKXyoaY+3JzuCI:hvV0mveF4yUVE8apQosjPtHu8YoPI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18891
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CreateDirectoryA
lstrlenA
RemoveDirectoryA
CreateFileA
CloseHandle
GetFileSize
ReadFile
WriteFile
SetFilePointer
GetLastError
GetModuleFileNameA
ResumeThread
SetThreadPriority
CreateThread
WaitForSingleObject
CreateProcessA
GetTempPathA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
SetEnvironmentVariableA
VirtualAlloc
FlushFileBuffers
DeleteFileA
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
user32
SendMessageA
OffsetRect
PostMessageA
MessageBoxA
LoadIconA
GetSystemMetrics
LoadImageA
GetParent
GetDesktopWindow
GetWindowRect
GetDlgItem
SetWindowPos
GetWindowLongA
CreateDialogParamA
wsprintfA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
ole32
CoUninitialize
CoInitialize
comctl32
InitCommonControlsEx
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=14, version=7299,
count=63, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=9, id=19, version=8034,
count=100, id=1, productName=Unmarked objects,
count=1, id=11, version=8966,
count=20, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
DVR4000qud/Client/doc/Simplified/Client.chm
- SHA256 754eaa92301abe87c215f039a6c10039c848766343e87d2fb984655894c11904
- MD5 9f98275c60e339557a22b5be4a609d8f
- SHA1 c7e0974fc5046afd28d85de88fcb72c393103388
- SHA512 969d566dcf4ca9f76d5e7080eea265df9c04e6fc5e406b69519d84311d9abde84dbadedcba1acee05a2cd25220e4a6b7766a64e833d5395ad4b4fa6348fe9cef
- SSDEEP 6144:iBbTGM46TM2e8zKXshJdKKQHJFOsJOz3BNwXuCEnlI:ebTrMeEshJdQpxuRNweCEu
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Client/oem.dll
- SHA256 49f9373d7e9b9a997fe33405379e4f1f529de4f3e1d64545f46f0af1a257f13d
- MD5 1f98944e669e8a88ddd2def6dffca99c
- SHA1 d52aaafd2c7fb584315054b69fc3d13475a849aa
- SHA512 1b4448cc64306a9d71cd0d784c17091b6500795dc4a3bcca12f870ea4eb2b139a6cb47e2b3b0d0da7da2089a9ab525ecfdbc80349855150d2b69c1c05ee3a71e
- MD5 SHA1 SHA512
DVR4000qud/Driver/DrvInstall.exe
- SHA256 767aae4accf7fce8b374e963f280e6debf0ee75fc03abcf8110ad065b8fcd659
- MD5 ff84509116255fd3cbee12c61b6aa27c
- SHA1 8cdbb65e0af39021a21daaab0da8dad3c38dfce1
- SHA512 2befcc552d49207e591e04543334834e87c95e5b014b641a64df2990f06247838311dea70df2e95d0bc03fadf0d50f663737b7a247b0f00a7024c832edd57a91
- SSDEEP 6144:sMJYE1cNwPLvoqg0R2VhPefm0ToyJTlb7oiSdHPDz4ptd/HQg:sMJYE1c2obY7TJTlvoiuvDz47d/HQg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
286KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=171, id=1, productName=Unmarked objects,
count=13, id=25, version=9210,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
DVR4000qud/Driver/DrvInstall.ini
- SHA256 d9dc844431b57c227c1d8b5a162f442e98bd1efbd8a73e8e5f93fe0fe23b0a06
- MD5 348c72ec936b8c8f82590893e3e62915
- SHA1 4a73a4345e6acce7960fd8a2147b932636787d38
- SHA512 b6e1f27708b95fd09745bb393f2e7477b6df056530227db375e937dbd1934a0830bf2660e4a085b79a61c3f13c0cc9f0fad12436e02a1bcf407a46f5632b0632
- MD5 SHA1 SHA512
DVR4000qud/Driver/hvCapture.inf
- SHA256 91fd67873ff307dbe3162793a8379a859ef9d5ee1e873ee9be6851c376da42a4
- MD5 cadee2a2ada2331c45569117a77cdca8
- SHA1 2f30aecc2f4ddf60f1cc0b2181958afb0bbf4ceb
- SHA512 8ae740c9cf9df3dacff1a47987d5a301640b297c72fda52da0a8877977d6f8ed796d8fcba2f60b89b3a542822b6e215de163acfd2393cf61975e59a826e96f06
- MD5 SHA1 SHA512
DVR4000qud/Driver/hvCapture.sys
- IMPHASH 03d5e46d45d62b76ae95b95cb07e7898
- SHA256 038cf61d21beaa2f08661f035226e4c8b2b453bb8a245fb81ea71b9c61bf09cf
- MD5 6b8c293c061e5b76c2a0a1ce2fc96468
- SHA1 7776965b39c6679aeeec9afaf82ef26899a27a4b
- SHA512 1493250340548ea098161648de01268dd6580cd0f429b44659daace70276356f6add2baede0b2f5f1602884d239229636898fc11d9600b2dc23663674d0df717
- SSDEEP 768:9PS3vNB1uGmURVxlrbi7nPCzknJt3sZu0pcNUfHOdsp:1S/NXuGmURVzrbiGzueFp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
35668
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
A:\hwDVR\i386\hvCapture.pdb
ntoskrnl.exe
IoFreeMdl
MmUnmapLockedPages
MmMapLockedPages
MmBuildMdlForNonPagedPool
IoAllocateMdl
MmUnmapIoSpace
MmFreeContiguousMemory
IoDisconnectInterrupt
RtlQueryRegistryValues
WRITE_REGISTER_ULONG
MmGetPhysicalAddress
MmAllocateContiguousMemorySpecifyCache
READ_REGISTER_ULONG
WRITE_REGISTER_UCHAR
InterlockedExchange
KeInsertQueueDpc
IofCallDriver
KeSetEvent
ObReferenceObjectByHandle
KeInitializeDpc
MmAllocateContiguousMemory
InterlockedIncrement
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoGetDeviceProperty
IoCreateDevice
IofCompleteRequest
PoCallDriver
PoStartNextPowerIrp
IoSetDeviceInterfaceState
IoGetDmaAdapter
IoConnectInterrupt
MmMapIoSpace
IoDeleteDevice
RtlFreeUnicodeString
IoDetachDevice
ObfDereferenceObject
ExFreePool
KeClearEvent
ExAllocatePoolWithTag
hal
KfLowerIrql
KfRaiseIrql
HalGetBusData
WRITE_PORT_ULONG
READ_PORT_ULONG
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
128B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=68, id=1, productName=Unmarked objects,
count=7, id=25, version=9210,
count=1, id=69, version=9111,
count=12, id=29, version=9178,
count=1, id=61, version=9210,
DVR4000qud/Help/Simplified/Client.chm
- SHA256 754eaa92301abe87c215f039a6c10039c848766343e87d2fb984655894c11904
- MD5 9f98275c60e339557a22b5be4a609d8f
- SHA1 c7e0974fc5046afd28d85de88fcb72c393103388
- SHA512 969d566dcf4ca9f76d5e7080eea265df9c04e6fc5e406b69519d84311d9abde84dbadedcba1acee05a2cd25220e4a6b7766a64e833d5395ad4b4fa6348fe9cef
- SSDEEP 6144:iBbTGM46TM2e8zKXshJdKKQHJFOsJOz3BNwXuCEnlI:ebTrMeEshJdQpxuRNweCEu
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Client.doc
- SHA256 c7ac97b169d5c5fef79c1ae747a340ab4714a436b7888a35ae9c54f1a23d43e8
- MD5 ca078c68bbdf9969d9b6e96e7fde31f6
- SHA1 635676433d50b88b1b514930aca6c8e4c65fd111
- SHA512 5a266bfbdef9d6dba76c5540558d6b90600daadfb905e638b71ebacfac5d54720ad8169296367e7dab7d47126ea1ac40ad0247b1d342876c644b48e39b262d72
- SSDEEP 12288:Gm6bDExpNr2cV6FIKaw5RQXuPLNprKhSp5nmE:GmcAx6cyIKHRQgLNRGSPm
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Player.chm
- SHA256 65da75cca849fe8b94379397d4260981b77e779b4ebd09082e80ad8329a37d2f
- MD5 a1b82750b9724e146c0566e2d1ed8446
- SHA1 d81d7d0d44974bb79cb01cac0aca0c598eed1aa1
- SHA512 f2485df069bd2a9e1f546deb564a8490e72268ec6fd0e32b2adccedd0291d8df9fc191559f1857df276d8609604439e140ad5d19c1fe2c5ec6caa27531c98eae
- SSDEEP 6144:SljOarlf7wsxWyree8OK1XZrGpDZUsPlJJBKV4Ih/o5Su3Q:ILs9MRYJrGzUWJ9I9Su
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Player.doc
- SHA256 9f405abdd960b78464c741eaadfc430a077accefb3a0a542e6125a9c183bdabe
- MD5 dc33e9c7076596993327f8eb3e60d303
- SHA1 d2b223bac490908d8dac2c843b93f70ea13cccdd
- SHA512 b7baef5351c9ba5eada9a3b81aea4db39e310948e35825e16b84da42fd36429e19017e9ea0af7bce5f185462530252bd8e16a9d25f71cd9b56380f7099694dd0
- SSDEEP 6144:9XM8+YoSU+yRpReUwqAox8h8HHreo+oM3c9csu/Ehw428493l6oR7j:9XM8+YoSU+HUwqpCqHHreo+oM3c9cyh4
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Server.chm
- SHA256 1b485cd920e0a06640635be6d2e8d815eb1de2a1da724b329ab45426682a833e
- MD5 fac90db1b39f2bac5f49acb9dd1ec02d
- SHA1 4a74746848c29eed1699367158f5c8ee6094866c
- SHA512 80ed4fb6006acf587a5ad1e69d169c8e440c4a12976c0eb509b860ae7c45bc94397701275722f1d370fcd0f0542a87f00ed2aaff1249688c776ba8899f3a347a
- SSDEEP 24576:wIdB9FLD0h+iqeQ62Z6MvxDYVCikDmO7fL/8Fkg8oAc:wIdB9BDu+iiDpx8VCiQL/8Iod
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Server.doc
- SHA256 858368cebcbb539b941a2554bbed5b160216c84484f132a56537463342e375f4
- MD5 0d4c796c4d5421bcdeeaee7284cf7b0e
- SHA1 8b14873c5d8e7bbfdbea3fa549bab7bad9a29810
- SHA512 89b1b07c4c985fd0846bc0ac20aef67236201ed18768a2ee94e276e1e55d5f217e51e0a0d8a32a7a021ce37162b2d38e88175c62c23d40a7db2b7f7b76211908
- SSDEEP 49152:xAgwXgET3ImttBWWXW4IFiRQVXZLcmlKEpYZ6Tdx:k9WWXNYpaEE
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/WEB.doc
- SHA256 d5bc2f6487984eeb2e47da51d43c2efb6c00b1ab622929c37ff67f163801e5ad
- MD5 16fefc9a8ec86980d85ccaf3ec078e04
- SHA1 0453c85309ef94c448191aed1e3a1940f0f87d43
- SHA512 627a94cb709b90bd1b6837bf20a95d7fe321bc732fe709ff931a1eefa6a719f1af1db10bd7f516aeaccbb4bf69328102e5ec3d83926e4d0002d9e6cbab42d097
- SSDEEP 24576:1pwykKY5a0ObQaDkw8om3pppppppppppSyS:rwykKY5a0ObQaDX1upppppppppppSyS
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Help/Simplified/Web.chm
- SHA256 73e5fc0ae3a4321a9d814671db75ad3502e8f19349326c26a15685aa7c8ebc6e
- MD5 4c6a0951c845bcbeaf4f346f1e905ae8
- SHA1 f781893a96e3b35715361f28e1146aa1591e19c0
- SHA512 088ecd321c53c85df216959cca3b159eb9221006712ee10458dffd08a9a138a63f08ac59f2ac10669e59cef4f7c1c48e6e4967a3c4f8ee119f4673a62719a262
- SSDEEP 6144:TsLpMmqvHV8y6tIUkBRxDjfs+Wgx2C+ztHzNuLO3DGmYhgtjTnJmQfgpmdYW5:oDS8/gBzjfhx2C6NIoGjh6nJFfgYdYW5
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/DVR4000-Server-Setup.exe
- IMPHASH 2f6203366bc5aa9ff8b6cf7753ead32d
- SHA256 5a7be97b308b22f7472d1cb8afa8c264848a9dadd5d1d63ba46d6891548aa16a
- MD5 9827031a80570a7e8a088e3ac868a895
- SHA1 3e6d589901b48b240e4e7232f36be082a5a99d6f
- SHA512 74054523542f683c48ea9a05e001a98530f58f2cc40ef8cf48befecb5ca9ae36c0170722844850010f2a939a00666cb0559b65f751059c77b9210bd37e2639a4
- SSDEEP 196608:o7lP3bTVOWSXuP96gxwQvmziIgRbHho7qc6H7DsS01:y1ZOWSXuPEgyQiiIgVq5M7oSo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18891
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CreateDirectoryA
lstrlenA
RemoveDirectoryA
CreateFileA
CloseHandle
GetFileSize
ReadFile
WriteFile
SetFilePointer
GetLastError
GetModuleFileNameA
ResumeThread
SetThreadPriority
CreateThread
WaitForSingleObject
CreateProcessA
GetTempPathA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
SetEnvironmentVariableA
VirtualAlloc
FlushFileBuffers
DeleteFileA
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
user32
SendMessageA
OffsetRect
PostMessageA
MessageBoxA
LoadIconA
GetSystemMetrics
LoadImageA
GetParent
GetDesktopWindow
GetWindowRect
GetDlgItem
SetWindowPos
GetWindowLongA
CreateDialogParamA
wsprintfA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
ole32
CoUninitialize
CoInitialize
comctl32
InitCommonControlsEx
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=14, version=7299,
count=63, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=9, id=19, version=8034,
count=100, id=1, productName=Unmarked objects,
count=1, id=11, version=8966,
count=20, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
DVR4000qud/Server/back.dll
- SHA256 83674c3f035ff909d72f85abc7ba579f0a36483967a50f464fb7f0c82e3b55cd
- MD5 f5cf208cd3fc785833b5115273e0cfa0
- SHA1 84b673548aee6ade79afa607b52e4d3724f2ebe8
- SHA512 24b134fcca5c9fc68675c4ab9449ced7d70f95a26e828e11c3f90a09e5fef971a82646d52cd7e6ba68ba07ce2fdbf9bc52fd56ac750cf862c336be1897b9eff4
- SSDEEP 384:wHR4fpIyw5F2PUnTWOluW2tU7NqCSZigP8iQxqfjMACsLGnVnBinbCSt1MO7yx41:2RBosVJ4cWNzaCbTyJvRuxAu
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/doc/Simplified/Client.chm
- SHA256 754eaa92301abe87c215f039a6c10039c848766343e87d2fb984655894c11904
- MD5 9f98275c60e339557a22b5be4a609d8f
- SHA1 c7e0974fc5046afd28d85de88fcb72c393103388
- SHA512 969d566dcf4ca9f76d5e7080eea265df9c04e6fc5e406b69519d84311d9abde84dbadedcba1acee05a2cd25220e4a6b7766a64e833d5395ad4b4fa6348fe9cef
- SSDEEP 6144:iBbTGM46TM2e8zKXshJdKKQHJFOsJOz3BNwXuCEnlI:ebTrMeEshJdQpxuRNweCEu
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/doc/Simplified/Player.chm
- SHA256 65da75cca849fe8b94379397d4260981b77e779b4ebd09082e80ad8329a37d2f
- MD5 a1b82750b9724e146c0566e2d1ed8446
- SHA1 d81d7d0d44974bb79cb01cac0aca0c598eed1aa1
- SHA512 f2485df069bd2a9e1f546deb564a8490e72268ec6fd0e32b2adccedd0291d8df9fc191559f1857df276d8609604439e140ad5d19c1fe2c5ec6caa27531c98eae
- SSDEEP 6144:SljOarlf7wsxWyree8OK1XZrGpDZUsPlJJBKV4Ih/o5Su3Q:ILs9MRYJrGzUWJ9I9Su
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/doc/Simplified/Server.chm
- SHA256 1b485cd920e0a06640635be6d2e8d815eb1de2a1da724b329ab45426682a833e
- MD5 fac90db1b39f2bac5f49acb9dd1ec02d
- SHA1 4a74746848c29eed1699367158f5c8ee6094866c
- SHA512 80ed4fb6006acf587a5ad1e69d169c8e440c4a12976c0eb509b860ae7c45bc94397701275722f1d370fcd0f0542a87f00ed2aaff1249688c776ba8899f3a347a
- SSDEEP 24576:wIdB9FLD0h+iqeQ62Z6MvxDYVCikDmO7fL/8Fkg8oAc:wIdB9BDu+iiDpx8VCiQL/8Iod
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/doc/Simplified/Web.chm
- SHA256 73e5fc0ae3a4321a9d814671db75ad3502e8f19349326c26a15685aa7c8ebc6e
- MD5 4c6a0951c845bcbeaf4f346f1e905ae8
- SHA1 f781893a96e3b35715361f28e1146aa1591e19c0
- SHA512 088ecd321c53c85df216959cca3b159eb9221006712ee10458dffd08a9a138a63f08ac59f2ac10669e59cef4f7c1c48e6e4967a3c4f8ee119f4673a62719a262
- SSDEEP 6144:TsLpMmqvHV8y6tIUkBRxDjfs+Wgx2C+ztHzNuLO3DGmYhgtjTnJmQfgpmdYW5:oDS8/gBzjfhx2C6NIoGjh6nJFfgYdYW5
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/flash.dll
- SHA256 b0e945b35b47ce7272b675d0dedfdfaaf8d2f4620fe3de8ffafd993e8a77a60e
- MD5 3f8d570dea91ed54108c4273153665e7
- SHA1 c1ae61037499691c6d968e76a246c71ddf7f42ce
- SHA512 2948156f697b3a91715caf218c65a0e74b7b51dea354314a0b9d2cea52cf59cd8a3a3c1249d601e5409ab5d4e6dc6ef84fca9063675155a438fdfafcda6ed6a7
- SSDEEP 384:hcrBOSuvNp62XUH3GgjzNfQbFYruQdNKbRTsB0wJy6Vf9AS/s04a4S4S4+:hctj2W2XUX5j5fOWDdNMTE0wI6Vf6S/z
- MD5 SHA1 SHA512 SSDEEP
DVR4000qud/Server/oem.dll
- SHA256 48d8e8d628676fb01821454f5544dcd24424e953b23781d4a2289743ae28362c
- MD5 bdc05244777f91b7b98ed53f1d8a4966
- SHA1 577e279be48c63949afa5b78bdb08f9cf1e4e340
- SHA512 afba97e2c86fa80306f0cbe45bea1dfd2457858b007403e7c960a8c844fdd202bd3a01988009b474c3b0b61b9487973345dda7ab876ce6e780e2ea19958515af
- MD5 SHA1 SHA512
DVR4000qud/Tools/160G Maxtor DiskPatch/160g.reg
- SHA256 97e7305ee347ebdda587092440459bacb4880039656a32db9cce9531eafe0786
- MD5 9553e2dee7fb5e8bb3cb9cb0f72726b7
- SHA1 e2505c776a4e3b2fc743c3a6ac654de88ab36b67
- SHA512 58bf849894d463571550534df8eb61c326c34cd271f4b42e2bd5bf0cecc8648fdb0b76aa5d1c351b2f1534176c71b48a808e4d2eab1ece2da29689a9b2d0364d
- MD5 SHA1 SHA512
DVR4000qud/Tools/160G Maxtor DiskPatch/Maxtor160GMend.exe
- IMPHASH 4d6767ed62bafba240cab511dc785c10
- SHA256 5e1cf9d6361f73ce75dbb7b565649122b4eac648dc1aaabe3e298836debf8a13
- MD5 643a7a405faf26544c501e6f95fe4a8b
- SHA1 6f2edab7b7bbdc2b11722f1ed9595756bcbd59d1
- SHA512 2bc40327e888ff0851ee4682bde69168d1d2d9b30b711782de2974762a71c1715cf202e0fcff0fcccef26d16fde51a20d921c1c21f15c316ce8ac86a5c1c2a80
- SSDEEP 1536:jwGhvHgargqYYwv+yHeBWb0dZRcI6j1C:jwGhvAazyQW4dZRcIS1C
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13565
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetProcAddress
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
LoadLibraryA
GetCurrentProcess
GetVersionExA
FindResourceA
LoadResource
IsBadWritePtr
LockResource
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
user32
DialogBoxParamA
MessageBoxA
ExitWindowsEx
LoadStringA
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
SetDlgItemTextA
SetWindowTextA
EndDialog
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=15, id=14, version=7299,
count=34, id=10, version=8047,
count=12, id=11, version=8047,
count=7, id=25, version=9210,
count=69, id=1, productName=Unmarked objects,
count=3, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
DVR4000qud/Tools/HV4000 WMP Filters/InstallFilter.bat
- SHA256 ba4e4004a2e18d9357e7466986cd38ced4c63bbf8c3f40d44f075253e777719a
- MD5 0c4c594a330e3c5818fb7eb34e9a57e0
- SHA1 094a4bcbaa282eebdc12e2cb301e5526e3b75fd0
- SHA512 df897e4eeb454c67ff97c2450ae387c81f5ee956da92f27f6bd18e58b2395117341e0f5fe816d78ad796c113fb247849efc3d4a96b0159df551990b03bfe78d7
- MD5 SHA1 SHA512
DVR4000qud/Tools/HV4000 WMP Filters/UninstallFilter.bat
- SHA256 bff61f19aed11f12f1792f821aad5ce2b80ce66da5d94d92bf6c39b9333096d7
- MD5 a6cafa606121cfc9b95e099b5aa645f6
- SHA1 1093148140a639710cd52ecd2f5ae1d9d24ea337
- SHA512 803cebee5c8a572d3bfc7fcfd9ae244361a75bf1bcfed9b4abea3f40dc9dd1ff71e9c13ca56fc514b6680242b5b605cf0fbf8d078557ef7ad86f4b01995d66f1
- MD5 SHA1 SHA512
DVR4000qud/Tools/HV4000 WMP Filters/hvfSource.ax
- IMPHASH 71315efe12b5a93a17672180f3ca0e09
- SHA256 dec17b4b83a25c08b09552e37105cc7add4605761a40014dbf7309f53193f10c
- MD5 5e24b62816a3f05b29b092a5483932b8
- SHA1 19f3a4f6ba8ae0a431637b419be64facc4e2b9bc
- SHA512 a1030204a502fab37f5e84ad862a12a882dc1bbe1ab4259ba8cb239e5e1096f9a577319a189ee2c55d57508b3ce4c25f15dff1ab1741aa29113147fce0fa89c2
- SSDEEP 12288:cRQN5Uf8nH8kuGU21moUooeW22E0IYum2m1bX1tWTkemL/DBc5:FM8nH8kuGU21mtbX17emLFc5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33611
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
SetFilePointer
GetLastError
CreateFileA
ReadFile
CloseHandle
GetFileSize
MultiByteToWideChar
GetModuleFileNameA
GetVersionExA
DisableThreadLibraryCalls
WaitForSingleObject
InterlockedExchange
Sleep
InterlockedIncrement
InterlockedDecrement
CreateEventA
EnterCriticalSection
SetEvent
FreeLibrary
GetProcAddress
CreateThread
GetModuleHandleA
WideCharToMultiByte
LeaveCriticalSection
lstrcpyA
lstrcatA
lstrlenA
ResetEvent
user32
wsprintfA
advapi32
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
ole32
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
msvcrt
_wtoi
_ftol
wcslen
malloc
free
_initterm
_adjust_fdiv
strncmp
vsprintf
sscanf
_purecall
srand
rand
_except_handler3
wcscpy
wcsncpy
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
356KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
461KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rodata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, productName=Unmarked objects (old),
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=6, id=14, version=7299,
count=46, id=48, version=9044,
count=2, id=37, version=8755,
count=97, id=1, productName=Unmarked objects,
count=11, id=25, version=9210,
count=4, id=28, version=9178,
count=12, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
DVR4000qud/˵.url
- SHA256 601dc2749dd778da6caae50757007c5848436c4943c5e9e05e81d3ad5c89a21b
- MD5 57dce0346fe9213ab42359d8795e5ff4
- SHA1 ed3c2fe149f0fcee84211768631c00f9f6d09ed6
- SHA512 a1ed76ee3aba5152bc7283042545c596a0ef3d390f0326324ddad071b19db23ee4b9f5006f2a7cd16c57098d9b6000c91d6f9fd495de2b40ded657dc4bcaa817
- MD5 SHA1 SHA512
readme.url
- SHA256 36dcd2cc9ef2a279014b4f85915100f62d36bd0c2cf439638d4ce0e9c18cc2ff
- MD5 63ce37659e34f6542d31a4bc64ec19e5
- SHA1 31938110d10a8ebce18ce02d1ebaca0e344a797c
- SHA512 39dc956c870a2bd80786dd215b503e5f22a1259bb858ff37ae601cb11d425afd5304e6472512c99afcb98569f08990e1d03df5e3d392ec484b1a98dd3f7b86e2
- MD5 SHA1 SHA512
下载王www.xzking.com.url
- SHA256 5315aa654483ecb41f08131f411397c4c9629c0a01820c1dc1b5fba2ead4eb18
- MD5 f6069f943715d9a180c3d138647cff0f
- SHA1 d11eac1bcc2bd7ec49c3640063c5e378cd3c83fd
- SHA512 96985ea678c97cff36f6258e0bb08bc1bca10a7f9cc4c6f27941dfed668795caca5bfaacf7939d608f50a234ab2954f98f00a5b1ecdb260adb9851e8cc924b76
- MD5 SHA1 SHA512