0030704bf49741ebae4a257c53ed9135

Sharing

Copy URL Twitter E-mail

General

Target

0030704bf49741ebae4a257c53ed9135
Size

5.5MB
MD5

0030704bf49741ebae4a257c53ed9135
SHA1

f66a675129aba6eb9e72ac052cf83ab774250b6c
SHA256

962e4fda4f146a5c925a3b7bc9953e7739d5398ab55d5d4ff7890d6b409c7089
SHA512

38423fc1115152d43a02584bfd34b2533cc2877833078bc4033801c077f4e2863310d730abb8b9584390385f4bfb2c8c333eda724ef33e86432b57e68ad3319a
SSDEEP

98304:X2eIVUuVQeN9H7eF6N0UTCho0nrgiknOW7N/Oe7GcawLB0OKmn0bCggP1sQbt:X/IVU89H7eF5UT4o0E1OW7lH7GaLSVC5

Score

3^/10

Malware Config

Signatures

Unsigned PE 23 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe
unpack001/x32/eSm1_DS.dll
unpack001/x32/eSm1_DS.ds
unpack001/x32/eSm1_IGFX.dll
unpack001/x32/eSm1_IIME.dll
unpack001/x32/eSm1_ILANG.dll
unpack001/x32/eSm1_ILOM.dll
unpack001/x32/eSm1_IO.dll
unpack001/x32/eSm1_IPPR.dll
unpack001/x32/eSm1_ISMON.exe
unpack001/x32/eSm1_IUI.dll
unpack001/x32/eSm1_IWM.exe
unpack001/x64/eSm1_DS.dll
unpack001/x64/eSm1_DS.ds
unpack001/x64/eSm1_IGFX.dll
unpack001/x64/eSm1_IIME.dll
unpack001/x64/eSm1_ILANG.dll
unpack001/x64/eSm1_ILOM.dll
unpack001/x64/eSm1_IO.dll
unpack001/x64/eSm1_IPPR.dll
unpack001/x64/eSm1_ISMON.exe
unpack001/x64/eSm1_IUI.dll
unpack001/x64/eSm1_IWM.exe

Files

0030704bf49741ebae4a257c53ed9135
.rar
DPInst32.exe
.exe windows:6 windows x86 arch:x86

3ab7cc62e4963955ad408cd420cd8ef1

Code Sign

61:04:ca:69:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/06/2007, 22:03

Not After

05/06/2012, 22:13

Subject

CN=Microsoft Time-Stamp Service,OU=nCipher DSE ESN:A5B0-CDE0-DC94,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:01:c6:c1:00:00:00:00:00:07
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 20:39

Not After

22/01/2010, 20:49

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15/09/2005, 21:55

Not After

15/03/2016, 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e
Signer

Actual PE Digest

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetEntriesInAclW
DeleteService
StartServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceStatus
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetFileAttributesW
DeleteFileW
ReleaseMutex
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
CreateMutexW
FreeConsole
SetConsoleMode
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FreeLibrary
FillConsoleOutputCharacterW
ReadConsoleOutputW
GetConsoleMode
GetStdHandle
GetProcAddress
LoadLibraryW
WriteConsoleW
IsValidLocale
lstrlenW
lstrcmpW
CompareStringW
GetTempFileNameW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
SetFileAttributesW
FormatMessageW
RaiseException
GetFileSize
CreateFileMappingW
MapViewOfFile
WriteConsoleOutputW
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
CreateFileW
WriteFile
CreateThread
WaitForMultipleObjectsEx
InterlockedCompareExchange
WaitForSingleObjectEx
SetEvent
CreateEventW
GetExitCodeProcess
DeviceIoControl
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
RemoveDirectoryW
GetCurrentDirectoryW
GetShortPathNameW
GetFullPathNameW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
MoveFileExW
SearchPathW
GetSystemDefaultUILanguage
LoadLibraryExW
CreateFileA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleCP
GetLocaleInfoA
Sleep
LoadLibraryExA
ReadFile
LCMapStringW
LCMapStringA
GetThreadLocale
SetThreadLocale
GetUserDefaultUILanguage
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
GetModuleFileNameW
SetCurrentDirectoryW
WaitForSingleObject
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
WideCharToMultiByte
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetCommandLineW
LocalAlloc
GlobalFree
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetLastError
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceLanguagesW
LocalReAlloc
EnterCriticalSection

gdi32

SetLayout
DeleteDC
GetObjectW
CreateCompatibleBitmap
CreateBitmap
SelectObject
StartPage
EndPage
StartDocW
EndDoc
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreateCompatibleDC

user32

AllowSetForegroundWindow
DefWindowProcW
PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetIconInfo
DrawIconEx
CreateIconIndirect
LoadIconW
LoadBitmapW
DrawTextExW
LoadImageW
GetSystemMetrics
GetSysColor
DestroyWindow
GetWindowLongW
SendDlgItemMessageW
InvalidateRect
SystemParametersInfoW
GetDC
ReleaseDC
SetWindowLongW
SetWindowTextW
GetParent
PostMessageW
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
DestroyIcon
DialogBoxParamW
SetDlgItemTextW
CharLowerW
GetDlgItem
SendMessageW
MessageBoxW
RegisterClassExW
CreateWindowExW
ShowWindow
UnregisterClassA
EndDialog

ntdll

RtlNtStatusToDosError
NtOpenThreadToken
NtQueryInformationToken
NtOpenProcessToken
RtlUnwind
NtClose

shell32

SHGetFolderPathW
ShellExecuteExW
ord59
CommandLineToArgvW

setupapi

SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupGetLineCountW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
pSetupSetGlobalFlags
pSetupGetGlobalFlags
SetupGetFieldCount
SetupGetIntField
SetupOpenAppendInfFileW
SetupDiSetClassInstallParamsW
SetupDiGetClassDevsW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
CM_Enumerate_Classes
CM_Get_DevNode_Status
SetupDiCreateDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
SetupGetTargetPathW
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCopyOEMInfW
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Setup_DevNode
SetupDiEnumDeviceInfo
CMP_WaitNoPendingInstallEvents
CM_Query_And_Remove_SubTreeW

wintrust

WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle

ole32

CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SysFreeString

comctl32

CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetW
ImageList_Create

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCertificateContext
CertFreeCTLContext
CertGetCTLContextProperty
CryptQueryObject

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 470KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DPInst64.exe
.exe windows:6 windows x64 arch:x64

3eacb9638877275335da4b58e52824f8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:d4:07:bc:4f:fb:4e:dc:7a:ed:8f:39:15:f3:e9:40
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/11/2010, 00:00

Not After

07/11/2011, 23:59

Subject

CN=ELAN Microelectronics Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=NB Input Devices Center,O=ELAN Microelectronics Corporation,L=Taipei Hsien,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6
Signer

Actual PE Digest

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
IsTextUnicode
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclW
DeleteService
CloseServiceHandle
ControlService
StartServiceW
OpenServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenSCManagerW
QueryServiceStatus
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
CheckTokenMembership

kernel32

CreateMutexW
ReleaseMutex
SetFilePointer
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryW
GetProcAddress
GetStdHandle
GetConsoleMode
SetConsoleMode
ReadConsoleOutputW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
FreeConsole
FreeLibrary
WriteConsoleOutputW
WriteConsoleW
IsValidLocale
VirtualProtect
Sleep
GetFileAttributesW
DeleteFileW
FormatMessageW
RaiseException
CopyFileW
SetFileAttributesW
GetTempFileNameW
FindClose
FindNextFileW
CompareStringW
lstrcmpW
FindFirstFileW
lstrlenW
UnmapViewOfFile
GetConsoleScreenBufferInfo
CreateFileMappingW
LCMapStringW
WaitForMultipleObjectsEx
WaitForSingleObjectEx
SetEndOfFile
CreateEventW
SetEvent
LocalReAlloc
DeviceIoControl
VerifyVersionInfoW
VerSetConditionMask
GetSystemDirectoryW
GetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetShortPathNameW
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetFullPathNameW
SetLastError
GetLocaleInfoW
LoadLibraryExW
GetSystemDefaultUILanguage
SearchPathW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
GetFileSize
CreateThread
SetThreadLocale
GetThreadLocale
WriteFile
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetCurrentProcess
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
SetCurrentDirectoryW
GetUserDefaultUILanguage
EnumResourceLanguagesW
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
LocalFree
GlobalFree
LocalAlloc
GetLastError
GetCommandLineW
CloseHandle
MapViewOfFile

gdi32

CreateBitmap
CreateCompatibleBitmap
GetObjectW
DeleteDC
SetLayout
CreateCompatibleDC
EndPage
StartPage
EndDoc
StartDocW
GetTextMetricsW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject

user32

DestroyIcon
CreateIconIndirect
DrawIconEx
GetIconInfo
LoadIconW
LoadBitmapW
CharLowerW
UnregisterClassA
PostQuitMessage
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
AllowSetForegroundWindow
DialogBoxParamW
SetDlgItemTextW
EndDialog
MessageBoxW
GetDlgItem
SendMessageW
GetProcessWindowStation
GetUserObjectInformationW
LoadImageW
SetWindowTextW
PostMessageW
GetParent
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
SendDlgItemMessageW
InvalidateRect
GetSystemMetrics
GetSysColor
DestroyWindow
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
DrawTextExW

msvcrt

_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
_resetstkoflw
__C_specific_handler
memset
_wcsupr
_wcslwr
_errno
__CxxFrameHandler
fread
_initterm
fclose
fwprintf
_wfopen
realloc
??2@YAPEAX_K@Z
wcsstr
_wcsicmp
_wtol
_vscwprintf
free
malloc
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
memcpy
memmove
_CxxThrowException
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
_itoa
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
_wcsnicmp
_vsnwprintf
wcsncmp
bsearch
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
iswalpha
??_U@YAPEAX_K@Z
wcschr
wcspbrk
wcsrchr
iswdigit
feof
memcmp

ntdll

NtQueryInformationToken
RtlNtStatusToDosError
NtClose
NtOpenThreadToken
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtOpenProcessToken

shell32

ord59
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
pSetupSetGlobalFlags
SetupDefaultQueueCallbackW
pSetupGetGlobalFlags
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupGetFieldCount
SetupGetIntField
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupFindNextLine
SetupInstallServicesFromInfSectionW
SetupInstallFromInfSectionW
SetupPromptReboot
SetupDiGetDeviceInstanceIdW
SetupFindFirstLineW
SetupOpenAppendInfFileW
SetupGetLineCountW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupOpenInfFileW
SetupDiGetSelectedDriverW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupQueueCopyW
CMP_WaitNoPendingInstallEvents
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiGetDriverInfoDetailW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupInstallFilesFromInfSectionW
SetupDiCallClassInstaller
SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
CM_Enumerate_Classes
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Query_And_Remove_SubTreeW
CM_Setup_DevNode
CM_Get_Device_IDW
SetupCopyOEMInfW
SetupGetTargetPathW

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString
VariantChangeType

comctl32

PropertySheetW
CreatePropertySheetPageW
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCTLContext
CertFreeCertificateContext
CertGetCTLContextProperty
CryptQueryObject

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 510KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 470KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup.exe
.exe windows:5 windows x86 arch:x86

e890f05b11b0d64c6d0808f887c36b44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
OutputDebugStringW
WriteConsoleW
CreateFileW
UnlockFile
WriteFile
InitializeCriticalSectionAndSpinCount
FindResourceA
GetCurrentDirectoryA
CreateFileA
LockResource
CloseHandle
GetNativeSystemInfo
LoadResource
FindResourceW
WideCharToMultiByte
WinExec
CreateDirectoryA
MultiByteToWideChar
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageA
CopyFileA
GetLastError
SetLastError
OutputDebugStringA
DecodePointer
RaiseException
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpA
GlobalGetAtomNameA
FileTimeToSystemTime
CompareStringA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentProcessId
GetModuleFileNameA
FreeLibrary
GlobalFlags
GlobalAddAtomA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
SizeofResource
DuplicateHandle
GetCurrentProcess
lstrcmpiA
LoadLibraryA
GetVolumeInformationA
SetEvent
WaitForSingleObject
GetCurrentThreadId
SetThreadPriority
ResumeThread
EncodePointer
GetSystemDirectoryW
FreeResource
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalFindAtomA
GetVersionExA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
CompareStringW
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetACP
lstrcpyA
FindResourceExW
GetWindowsDirectoryA
VerSetConditionMask
VerifyVersionInfoA
GetTempPathA
GetTempFileNameA
GetTickCount
GetProfileIntA
SearchPathA
Sleep
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW

user32

CloseClipboard
OpenClipboard
SetParent
SetWindowRgn
SetClassLongA
EnumDisplayMonitors
SetLayeredWindowAttributes
GetKeyNameTextA
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
SetClipboardData
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
FillRect
ScreenToClient
EndPaint
BeginPaint
EmptyClipboard
DrawStateA
DrawEdge
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
PostThreadMessageA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
GetMenuStringA
GetSysColorBrush
LoadCursorA
SendMessageA
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
SetFocus
SetScrollPos
GetScrollPos
GetWindow
IsWindow
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
CheckDlgButton
SendDlgItemMessageA
GetDlgCtrlID
GetFocus
SetWindowTextA
SetWindowLongA
IsDialogMessageA
GetWindowRect
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameA
RealChildWindowFromPoint
DestroyIcon
CharUpperA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
GetWindowTextA
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
GetCapture
GetWindowTextLengthA

gdi32

GetTextFaceA
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExA
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreateFontIndirectA
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
GetObjectA
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteObject
GetDeviceCaps
CreateDCA
CopyMetaFileA

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

SystemFunction036
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHGetFileInfoA
ShellExecuteA
SHAppBarMessage
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA

shlwapi

PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA
PathRemoveFileSpecW
PathFindFileNameA
PathIsUNCA

uxtheme

GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme

ole32

RevokeDragDrop
RegisterDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoDisconnectObject
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
VariantInit
SysAllocString
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x32/do26.cat
x32/eSm1_DS.chm
.chm
x32/eSm1_DS.dll
.dll windows:5 windows x86 arch:x86

d0b0ab81bf0e4cd20070f6525db9fd67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_DS.ds
.dll windows:5 windows x86 arch:x86

e138f24da5298304eee94f025171a415

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringA
lstrcpyA
GetPrivateProfileStringA
GetPrivateProfileIntA
DeviceIoControl
GetProcessHeap
SetEndOfFile
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
RaiseException
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateEventA
CreateThread
GetFileSize
ReadFile
WriteFile
GetLocalTime
WaitForSingleObjectEx
GetProfileIntA
SetEvent
lstrcatA
GetVersionExA
GetProcAddress
GlobalAlloc
GlobalLock
lstrlenA
GlobalHandle
GlobalUnlock
GlobalFree
DeleteFileA
GetWindowsDirectoryA
FreeLibrary
OutputDebugStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetModuleFileNameA
CreateFileA
CloseHandle
LoadLibraryA
FindFirstFileA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
SetLastError
GetTickCount
TerminateThread
GetExitCodeThread
WaitForSingleObject
ExpandEnvironmentStringsA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
DeleteCriticalSection

user32

EndDialog
SetDlgItemTextA
SetWindowTextA
LoadStringA
ShowWindow
GetSysColorBrush
CreateWindowExA
SetWindowPos
GetClientRect
IsWindowEnabled
GetDlgCtrlID
GetSysColor
BringWindowToTop
KillTimer
PtInRect
IsDlgButtonChecked
LoadBitmapA
SetTimer
GetWindowRect
MapWindowPoints
MoveWindow
wvsprintfA
wsprintfA
MessageBoxA
RegisterHotKey
GetActiveWindow
UnregisterHotKey
InvalidateRect
DestroyWindow
CreateDialogParamA
UpdateWindow
IsDialogMessageA
DialogBoxParamA
PostMessageA
SendMessageA
LoadCursorA
SetCursor
BeginPaint
EndPaint
GetDC
ReleaseDC
GetDlgItemTextA
SetDlgItemInt
SetFocus
GetWindowLongA
SendDlgItemMessageA
GetDlgItemInt
GetDlgItem
EnableWindow

gdi32

CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
StretchDIBits
SetBkMode
TextOutA
CreateFontA
Polygon
CreateICA
GetDeviceCaps
MoveToEx
LineTo
GetTextExtentPoint32A
GetObjectA
CreateSolidBrush
CreatePen
BitBlt
DeleteDC
GetStockObject
SelectObject
Rectangle
DeleteObject
CreatePolygonRgn
PtInRegion

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetSpecialFolderPathA

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetIcon
InitCommonControlsEx

msimg32

TransparentBlt

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DS_Entry

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x32/eSm1_DS.inf
x32/eSm1_GDIM.inf
x32/eSm1_GDIM.ini
x32/eSm1_GDIMcfg.xml
.xml
x32/eSm1_IGFX.dll
.dll windows:5 windows x86 arch:x86

57a5176867810f6359d3c1369c06a869

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

EngGetCurrentCodePage
EngDeletePalette
EngDeleteSurface
EngAssociateSurface
EngCreateDeviceSurface
EngCreatePalette
EngUnicodeToMultiByteN
EngMultiByteToUnicodeN
XFORMOBJ_bApplyXform
FONTOBJ_pvTrueTypeFontFile
EngWideCharToMultiByte
FONTOBJ_pxoGetXform
PATHOBJ_vGetBounds
FONTOBJ_cGetGlyphs
PATHOBJ_bEnum
PATHOBJ_vEnumStart
XFORMOBJ_iGetXform
STROBJ_bEnumPositionsOnly
STROBJ_bEnum
STROBJ_vEnumStart
CLIPOBJ_cEnumStart
CLIPOBJ_bEnum
BRUSHOBJ_pvAllocRbrush
BRUSHOBJ_pvGetRbrush
EngEraseSurface
FONTOBJ_pifi
XLATEOBJ_cGetPalette

kernel32

ReadFile
GetFileSize
CreateFileA
LeaveCriticalSection
SetEvent
EnterCriticalSection
InitializeCriticalSection
CreateEventW
DeleteCriticalSection
WaitForMultipleObjects
ResetEvent
SetLastError
GlobalAlloc
GlobalFree
GetSystemWindowsDirectoryW
UnlockFileEx
SetEndOfFile
WriteFile
LockFileEx
Sleep
DeleteFileW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetTempPathW
GetSystemDefaultLangID
TlsSetValue
PeekNamedPipe
CreatePipe
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
SetCurrentDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
WideCharToMultiByte
TlsFree
TlsAlloc
TlsGetValue
FlushFileBuffers
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
CopyFileW
GetLastError
CloseHandle
SetFilePointer
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetModuleHandleA
RtlUnwind
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle

winspool.drv

WritePrinter
GetPrinterDriverW
GetPrinterW
GetJobW
OpenPrinterW
SetPrinterDataW
GetPrinterDataW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegQueryValueExA
RegCloseKey

Exports

Exports

DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_IIME.dll
.dll windows:5 windows x86 arch:x86

6c9581369a5cadd1092279d5e6199d5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msimg32

TransparentBlt
AlphaBlend

kernel32

GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
HeapSize
WriteConsoleW
FindResourceW
SetFilePointerEx
DeleteFileA
GetTempPathA
GetTempFileNameA
WaitForSingleObject
ResetEvent
WaitForMultipleObjects
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
EnterCriticalSection
SetEvent
LeaveCriticalSection
LoadLibraryA
GetProcAddress
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
FreeLibrary
TlsGetValue
SetLastError
SetFilePointer
ReadFile
GetFileSize
DisableThreadLibraryCalls
GetVersionExA
GlobalMemoryStatus
TlsSetValue
WriteFile
MulDiv
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
CreateFileA
GetLastError
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CloseHandle
TlsFree
TlsAlloc
CreateFileMappingW
CreateFileW
GetModuleHandleA
ResumeThread
SignalObjectAndWait
GetExitCodeThread
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetLocaleInfoA
WideCharToMultiByte
ExitThread
CreateThread
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlUnwind
VirtualQuery
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount

user32

IsRectEmpty
InflateRect
EqualRect
OffsetRect
SetRectEmpty
UnionRect
SubtractRect
IntersectRect

gdi32

ExtCreatePen
CreatePen
PathToRegion
LineTo
GetGlyphOutlineW
GetGlyphOutlineA
GetWindowOrgEx
ScaleWindowExtEx
OffsetWindowOrgEx
PolyBezierTo
CreateFontIndirectA
RemoveFontResourceExA
AddFontResourceExA
CombineRgn
GetRegionData
OffsetRgn
CreateRectRgnIndirect
ExtCreateRegion
UnrealizeObject
GetStockObject
CreateSolidBrush
CreateDIBPatternBrushPt
SetBrushOrgEx
CreateDIBitmap
DeleteObject
CreateCompatibleDC
SetMapMode
GetCurrentObject
GetMiterLimit
DeleteDC
CreateDIBSection
SetTextAlign
SetStretchBltMode
SetBkColor
SetTextColor
SetBkMode
GetTextMetricsA
GetWindowExtEx
ExtTextOutW
ExtTextOutA
MaskBlt
StretchDIBits
BitBlt
Rectangle
SetPolyFillMode
FillPath
StrokeAndFillPath
PatBlt
SetViewportOrgEx
SelectObject
SetMiterLimit
SelectClipRgn
SetViewportExtEx
SetWindowOrgEx
SetWindowExtEx
LPtoDP
OffsetViewportOrgEx
GetViewportOrgEx
GetViewportExtEx
RestoreDC
SetMetaRgn
IntersectClipRect
SaveDC
GdiFlush
StrokePath
EndPath
PolylineTo
MoveToEx
BeginPath
CloseFigure
Polyline
SetROP2

winspool.drv

GetPrinterDataA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW

Exports

Exports

ImeExtAlloc
ImeExtFree
ImeExtJobDataWrite
ImeExtLogEvent
ImeExtTextureAlloc
ImeExtTextureFree
ImeRender
ImeRenderOverlay
ImxAlloc
ImxCacheFlush
ImxCmmDeinit
ImxCmmInit
ImxCmmProfileDestroy
ImxCmmProfileLoad
ImxCmmProfileQuery
ImxCmmWorldApplyColor
ImxCmmWorldApplyColorEx
ImxCmmWorldApplyImage
ImxCmmWorldApplyImageEx
ImxCmmWorldCreate
ImxCmmWorldCreateEx
ImxCmmWorldDestroy
ImxCmmWorldLoad
ImxCpuCapsGet
ImxErrDiffConfigure
ImxErrDiffCreate
ImxErrDiffDestroy
ImxErrDiffImage
ImxErrDiffLoadConfig
ImxFree
ImxHalftoneCreate
ImxHalftoneDestroy
ImxHalftoneLoad
ImxHalftoneTextureColor
ImxHalftoneTextureImage
ImxJBIGEncoderDeinit
ImxJBIGEncoderInit
ImxJBIGImageBandAdd
ImxJBIGImageBegin
ImxJBIGImageEnd
ImxJBIGImageFlush
ImxJobDataWrite
ImxLogEvent
ImxTextureAlloc
ImxTextureFree

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_ILANG.chm
.chm
x32/eSm1_ILANG.dll
.dll windows:5 windows x86 arch:x86

d0b0ab81bf0e4cd20070f6525db9fd67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_ILOM.dll
.dll windows:5 windows x86 arch:x86

615431d4e682779b2ecdf248d34d12f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

send
recv
ioctlsocket
htons
socket
connect
closesocket

kernel32

lstrcatW
lstrcpyW
DisableThreadLibraryCalls
InitializeCriticalSection
SetLastError
Sleep
SetEvent
WaitForSingleObject
ResetEvent
GetTickCount
CloseHandle
SetThreadPriority
CreateThread
CreateEventW
GetVersionExW
WriteFile
CreateFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GlobalFree
GlobalAlloc
WriteConsoleA
HeapSize
ReadFile
GetLocaleInfoA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
lstrcmpiW
HeapDestroy
GetStringTypeW
GetStringTypeA
GetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CreateFileA
LCMapStringA
MultiByteToWideChar
LCMapStringW

winspool.drv

SetJobW
GetPrinterW
EnumJobsW
SetPortW
OpenPrinterW
ClosePrinter

advapi32

RegCreateKeyW
RegSetValueExA
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathW

Exports

Exports

InitializePrintMonitor

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_IO.dll
.dll windows:5 windows x86 arch:x86

57776ad8907bcdee512cb211086c8b5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

esm1_iime

ord24
ord21
ord20
ord18
ord19
ord23
ord15
ord17
ord16
ord10
ord22
ord11

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetConsoleMode
GetLastError
RaiseException
ReadFile
SetFilePointer
GetFileSize
CreateFileA
DisableThreadLibraryCalls
GetConsoleCP
FlushFileBuffers
CloseHandle
GetACP
SetLastError
MapViewOfFile
CreateFileMappingW
CreateFileW
UnmapViewOfFile
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

GetUserNameA

Exports

Exports

_ImoDeinitialize@4
_ImoInitialize@16

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 827KB - Virtual size: 827KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_IPPR.dll
.dll windows:5 windows x86 arch:x86

c4c51fc399767e7dddf9021fd5b40645

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

spoolss

ReadPrinter
SetPrinterDataW
EndDocPrinter
StartDocPrinterW
WritePrinter
GetPrinterDataW
GetPrinterDriverW
OpenPrinterW
ClosePrinter

kernel32

TlsGetValue
TlsSetValue
ResetEvent
SetEvent
SetLastError
WaitForSingleObject
WriteFile
TlsAlloc
ReadFile
WideCharToMultiByte
GetProcAddress
LoadLibraryW
FreeLibrary
CreateEventW
TlsFree
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
CopyFileW
GetLastError
CloseHandle
GetConsoleOutputCP
WriteConsoleW
SetFilePointerEx
HeapSize
WriteConsoleA
SetStdHandle
CreateFileA
FlushFileBuffers
DisableThreadLibraryCalls
GetCurrentThreadId
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

gdi32

GdiGetDC
GdiStartDocEMF
GdiGetPageHandle
GdiStartPageEMF
GdiPlayPageEMF
GdiEndPageEMF
GdiEndDocEMF
GdiDeleteSpoolFileHandle
GdiGetDevmodeForPage
GdiResetDCEMF
SetGraphicsMode
GetDeviceCaps
CancelDC
GdiGetSpoolFileHandle

advapi32

RegQueryValueExA
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW

Exports

Exports

ClosePrintProcessor
ControlPrintProcessor
EnumPrintProcessorDatatypesW
GetPrintProcessorCapabilities
InitializePrintProcessor
InstallPrintProcessor
OpenPrintProcessor
PrintDocumentOnPrintProcessor

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_ISMON.exe
.exe windows:5 windows x86 arch:x86

462adf4bb6a97f36e3dd50e26c3c9373

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
Sleep
WaitForSingleObject
GetModuleHandleA
GetPrivateProfileStringA
GetVersionExA
lstrcpyA
SetEvent
HeapSize
ReadFile
GetProcessHeap
SetEndOfFile
CreateMutexA
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
LoadLibraryA
CreateFileA
CreateEventA
GetLastError
CreateThread
GetStartupInfoA
WriteConsoleW
ReleaseMutex
SetFilePointer
FlushFileBuffers
GetConsoleMode
HeapFree
HeapAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP

user32

LoadStringW
SetDlgItemTextW
SetForegroundWindow
PostQuitMessage
CreatePopupMenu
GetCursorPos
InsertMenuA
SetFocus
SendMessageA
TrackPopupMenu
DestroyMenu
SendDlgItemMessageA
ShowWindow
EnableWindow
GetDlgItem
LoadImageA
DestroyIcon
LoadStringA
CreateDialogParamA
SetWindowTextA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
SetDlgItemTextA

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathA
Shell_NotifyIconA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_IUI.dll
.dll windows:5 windows x86 arch:x86

8d63f74822808076b380b55d55bba1cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DeleteFormW
GetPrinterW
GetPrinterDataW
DeletePrinterDataExW
SetPrinterW
AddPrintProcessorW
SetPrinterDataW
SetPrinterDataExW
EnumFormsW
GetPrinterDriverW
DeletePrinterDataW
EnumPrintProcessorsW
OpenPrinterW
AddFormW

spoolss

ImpersonatePrinterClient
RevertToPrinterSelf

msimg32

TransparentBlt

t2embed

ord14

kernel32

MultiByteToWideChar
CreateDirectoryW
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTickCount
GetProfileIntW
GetUserDefaultLangID
FindClose
FindNextFileW
FindFirstFileW
SetFilePointer
FreeLibrary
SetFileAttributesW
WriteFile
CopyFileW
InterlockedIncrement
InterlockedDecrement
GetEnvironmentVariableW
GetComputerNameW
GetVersionExW
WritePrivateProfileStringW
GetProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
WinExec
GetWindowsDirectoryW
CreateEventW
SetEndOfFile
ExitProcess
Sleep
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcatW
HeapDestroy
HeapCreate
LCMapStringW
TlsFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlUnwind
CreateFileA
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeA
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
CreateFileW
GetFileSize
ReadFile
lstrcmpW
CreateProcessW
WaitForSingleObject
CloseHandle
FreeEnvironmentStringsA
GetPrivateProfileStringW
LoadLibraryA
WideCharToMultiByte
GetPrivateProfileIntW
lstrlenW
lstrcpyW
MulDiv
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetProcessHeap
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameA
GetConsoleCP
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
GetCurrentProcessId
LCMapStringA
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

GetDlgCtrlID
LoadCursorW
IsWindowEnabled
GetSysColor
ReleaseDC
GetCursor
SetCursor
DrawTextW
wsprintfW
MessageBoxW
LoadBitmapW
GetWindowRect
MapWindowPoints
LoadImageW
GetDlgItemTextW
SetFocus
CallWindowProcW
SetScrollRange
SetScrollPos
DialogBoxParamW
SendDlgItemMessageW
CheckDlgButton
SetDlgItemInt
CheckRadioButton
GetParent
SendMessageW
GetDlgItemInt
IsDlgButtonChecked
SetWindowLongW
LoadStringW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
GetWindowPlacement
EnableWindow
ShowWindow
SetWindowPlacement
GetWindowLongW
BeginPaint
EndPaint
EndDialog
FillRect
InvalidateRect
UpdateWindow
LoadIconW
GetScrollInfo
PostMessageW

gdi32

EnumFontFamiliesW
Pie
GetFontLanguageInfo
GetCharacterPlacementW
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
GetGlyphOutlineW
CreateFontIndirectW
GetTextExtentPointW
SetTextAlign
ExtTextOutW
MoveToEx
LineTo
CreatePen
GetMapMode
CreateDIBitmap
SetDIBits
DPtoLP
StretchBlt
CreateSolidBrush
GetStockObject
Rectangle
SetMapMode
SetTextColor
CreateDCW
GetObjectW
CreateCompatibleDC
PolyBezier
GetDeviceCaps
CreateFontW
SelectObject
SetBkMode
TextOutW
DeleteObject
DeleteDC

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
SetThreadToken
RevertToSelf
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
GetUserNameW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantInit
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen

Exports

Exports

DevQueryPrintEx
DllCanUnloadNow
DllGetClassObject
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvUpgradePrinter
GuiEndJob
GuiStartJob
GuiStartSheet
MxdcGetPDEVAdjustment

Sections

.text
Size: 610KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/eSm1_IWM.exe
.exe windows:5 windows x86 arch:x86

d25a222b8a244db44e97494b5f1ece5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetTempFileNameA
DeleteFileA
CreateEventA
SetEvent
WritePrivateProfileStringA
WriteFile
GetFullPathNameA
GetFileSize
GetPrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
WideCharToMultiByte
MulDiv
lstrcpyA
lstrlenA
GetVersionExA
CreateFileA
CloseHandle
ReadFile
FlushFileBuffers
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP

gdi32

StartDocA
CreateDCA
EndPage
EndDoc
GetTextCharset
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetFontLanguageInfo
SetTextAlign
GetCharacterPlacementA
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetTextAlign
BeginPath
CreatePen
CreateSolidBrush
GetGlyphOutlineA
MoveToEx
EndPath
FlattenPath
PolyBezier
GetTextMetricsA
GetTextFaceA
GetStockObject
StretchDIBits
StartPage
ExtEscape
TextOutA
SetTextColor
SetBkMode
DeleteDC
DeleteObject
LineTo
GetPath

winspool.drv

DocumentPropertiesA
GetPrinterA
ClosePrinter
OpenPrinterA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x32/esm1_gdim.cat
x64/do2664.cat
x64/eSm1_DS.chm
.chm
x64/eSm1_DS.dll
.dll windows:5 windows x86 arch:x86

d0b0ab81bf0e4cd20070f6525db9fd67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x64/eSm1_DS.ds
.dll windows:5 windows x86 arch:x86

e138f24da5298304eee94f025171a415

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringA
lstrcpyA
GetPrivateProfileStringA
GetPrivateProfileIntA
DeviceIoControl
GetProcessHeap
SetEndOfFile
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
RaiseException
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateEventA
CreateThread
GetFileSize
ReadFile
WriteFile
GetLocalTime
WaitForSingleObjectEx
GetProfileIntA
SetEvent
lstrcatA
GetVersionExA
GetProcAddress
GlobalAlloc
GlobalLock
lstrlenA
GlobalHandle
GlobalUnlock
GlobalFree
DeleteFileA
GetWindowsDirectoryA
FreeLibrary
OutputDebugStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetModuleFileNameA
CreateFileA
CloseHandle
LoadLibraryA
FindFirstFileA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
SetLastError
GetTickCount
TerminateThread
GetExitCodeThread
WaitForSingleObject
ExpandEnvironmentStringsA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
DeleteCriticalSection

user32

EndDialog
SetDlgItemTextA
SetWindowTextA
LoadStringA
ShowWindow
GetSysColorBrush
CreateWindowExA
SetWindowPos
GetClientRect
IsWindowEnabled
GetDlgCtrlID
GetSysColor
BringWindowToTop
KillTimer
PtInRect
IsDlgButtonChecked
LoadBitmapA
SetTimer
GetWindowRect
MapWindowPoints
MoveWindow
wvsprintfA
wsprintfA
MessageBoxA
RegisterHotKey
GetActiveWindow
UnregisterHotKey
InvalidateRect
DestroyWindow
CreateDialogParamA
UpdateWindow
IsDialogMessageA
DialogBoxParamA
PostMessageA
SendMessageA
LoadCursorA
SetCursor
BeginPaint
EndPaint
GetDC
ReleaseDC
GetDlgItemTextA
SetDlgItemInt
SetFocus
GetWindowLongA
SendDlgItemMessageA
GetDlgItemInt
GetDlgItem
EnableWindow

gdi32

CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
StretchDIBits
SetBkMode
TextOutA
CreateFontA
Polygon
CreateICA
GetDeviceCaps
MoveToEx
LineTo
GetTextExtentPoint32A
GetObjectA
CreateSolidBrush
CreatePen
BitBlt
DeleteDC
GetStockObject
SelectObject
Rectangle
DeleteObject
CreatePolygonRgn
PtInRegion

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetSpecialFolderPathA

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetIcon
InitCommonControlsEx

msimg32

TransparentBlt

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DS_Entry

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_DS.inf
x64/eSm1_GDIM.inf
x64/eSm1_GDIM.ini
x64/eSm1_GDIMcfg.xml
.xml
x64/eSm1_IGFX.dll
.dll windows:5 windows x64 arch:x64

19429d2187296c169bf3c2de17fdca6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

EngGetCurrentCodePage
EngDeletePalette
EngDeleteSurface
EngAssociateSurface
EngCreateDeviceSurface
EngCreatePalette
EngUnicodeToMultiByteN
EngMultiByteToUnicodeN
XFORMOBJ_bApplyXform
FONTOBJ_pvTrueTypeFontFile
EngWideCharToMultiByte
FONTOBJ_pxoGetXform
PATHOBJ_vGetBounds
FONTOBJ_cGetGlyphs
PATHOBJ_bEnum
PATHOBJ_vEnumStart
XFORMOBJ_iGetXform
STROBJ_bEnumPositionsOnly
STROBJ_bEnum
STROBJ_vEnumStart
CLIPOBJ_cEnumStart
CLIPOBJ_bEnum
BRUSHOBJ_pvAllocRbrush
BRUSHOBJ_pvGetRbrush
EngEraseSurface
FONTOBJ_pifi
XLATEOBJ_cGetPalette

kernel32

ReadFile
GetFileSize
CreateFileA
LeaveCriticalSection
SetEvent
EnterCriticalSection
InitializeCriticalSection
CreateEventW
DeleteCriticalSection
WaitForMultipleObjects
ResetEvent
SetFilePointer
GlobalAlloc
GlobalFree
GetSystemWindowsDirectoryW
UnlockFileEx
SetEndOfFile
WriteFile
LockFileEx
Sleep
DeleteFileW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetTempPathW
GetSystemDefaultLangID
TlsSetValue
__C_specific_handler
PeekNamedPipe
CreatePipe
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
SetCurrentDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
WideCharToMultiByte
TlsFree
TlsAlloc
TlsGetValue
FlushFileBuffers
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
CopyFileW
GetLastError
CloseHandle
SetLastError
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle

winspool.drv

WritePrinter
GetPrinterDriverW
GetPrinterW
GetJobW
OpenPrinterW
SetPrinterDataW
GetPrinterDataW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegQueryValueExA
RegCloseKey

Exports

Exports

DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_IIME.dll
.dll windows:5 windows x64 arch:x64

89e296161322803fdfa674216b6d5fb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msimg32

TransparentBlt
AlphaBlend

kernel32

GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
HeapSize
RaiseException
FindResourceW
SetFilePointerEx
DeleteFileA
GetTempPathA
GetTempFileNameA
WaitForSingleObject
ResetEvent
WaitForMultipleObjects
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
EnterCriticalSection
SetEvent
LeaveCriticalSection
LoadLibraryA
GetProcAddress
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
FreeLibrary
TlsGetValue
SetLastError
SetFilePointer
ReadFile
GetFileSize
DisableThreadLibraryCalls
GetVersionExA
GlobalMemoryStatus
TlsSetValue
WriteFile
MulDiv
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
CreateFileA
GetLastError
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
CloseHandle
TlsFree
TlsAlloc
CreateFileMappingW
CreateFileW
GetModuleHandleA
ResumeThread
SignalObjectAndWait
GetExitCodeThread
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLocaleInfoA
WideCharToMultiByte
ExitThread
CreateThread
CreateDirectoryA
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

IsRectEmpty
InflateRect
EqualRect
OffsetRect
SetRectEmpty
UnionRect
SubtractRect
IntersectRect

gdi32

ExtCreatePen
CreatePen
PathToRegion
LineTo
GetGlyphOutlineA
GetGlyphOutlineW
GetWindowOrgEx
ScaleWindowExtEx
OffsetWindowOrgEx
PolyBezierTo
CreateFontIndirectA
RemoveFontResourceExA
AddFontResourceExA
CombineRgn
GetRegionData
OffsetRgn
CreateRectRgnIndirect
ExtCreateRegion
UnrealizeObject
GetStockObject
CreateSolidBrush
CreateDIBPatternBrushPt
SetBrushOrgEx
CreateDIBitmap
DeleteObject
CreateCompatibleDC
SetMapMode
GetCurrentObject
GetMiterLimit
DeleteDC
CreateDIBSection
SetTextAlign
SetStretchBltMode
SetBkColor
SetTextColor
SetBkMode
GetTextMetricsA
GetWindowExtEx
ExtTextOutW
ExtTextOutA
MaskBlt
StretchDIBits
BitBlt
Rectangle
SetPolyFillMode
FillPath
StrokeAndFillPath
PatBlt
SetViewportOrgEx
SelectObject
SetMiterLimit
SelectClipRgn
SetViewportExtEx
SetWindowOrgEx
SetWindowExtEx
LPtoDP
OffsetViewportOrgEx
GetViewportOrgEx
GetViewportExtEx
RestoreDC
SetMetaRgn
IntersectClipRect
SaveDC
GdiFlush
StrokePath
EndPath
PolylineTo
MoveToEx
BeginPath
CloseFigure
Polyline
SetROP2

winspool.drv

GetPrinterDataA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW

Exports

Exports

ImeExtAlloc
ImeExtFree
ImeExtJobDataWrite
ImeExtLogEvent
ImeExtTextureAlloc
ImeExtTextureFree
ImeRender
ImeRenderOverlay
ImxAlloc
ImxCacheFlush
ImxCmmDeinit
ImxCmmInit
ImxCmmProfileDestroy
ImxCmmProfileLoad
ImxCmmProfileQuery
ImxCmmWorldApplyColor
ImxCmmWorldApplyColorEx
ImxCmmWorldApplyImage
ImxCmmWorldApplyImageEx
ImxCmmWorldCreate
ImxCmmWorldCreateEx
ImxCmmWorldDestroy
ImxCmmWorldLoad
ImxCpuCapsGet
ImxErrDiffConfigure
ImxErrDiffCreate
ImxErrDiffDestroy
ImxErrDiffImage
ImxErrDiffLoadConfig
ImxFree
ImxHalftoneCreate
ImxHalftoneDestroy
ImxHalftoneLoad
ImxHalftoneTextureColor
ImxHalftoneTextureImage
ImxJBIGEncoderDeinit
ImxJBIGEncoderInit
ImxJBIGImageBandAdd
ImxJBIGImageBegin
ImxJBIGImageEnd
ImxJBIGImageFlush
ImxJobDataWrite
ImxLogEvent
ImxTextureAlloc
ImxTextureFree

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_ILANG.chm
.chm
x64/eSm1_ILANG.dll
.dll windows:5 windows x64 arch:x64

41d83f1693e1c68580a4b8826f63cd13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_ILOM.dll
.dll windows:5 windows x64 arch:x64

e39d5fe34f82e258a30bdfa81de81ddc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wsock32

send
recv
ioctlsocket
htons
socket
connect
closesocket

kernel32

lstrcatW
lstrcpyW
DisableThreadLibraryCalls
InitializeCriticalSection
SetLastError
Sleep
SetEvent
WaitForSingleObject
ResetEvent
GetTickCount
CloseHandle
SetThreadPriority
CreateThread
CreateEventW
GetVersionExW
WriteFile
CreateFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GlobalFree
GlobalAlloc
WriteConsoleA
HeapSize
HeapReAlloc
ReadFile
GetLocaleInfoA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
lstrcmpiW
RtlLookupFunctionEntry
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CreateFileA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

winspool.drv

SetJobW
GetPrinterW
EnumJobsW
SetPortW
OpenPrinterW
ClosePrinter

advapi32

RegCreateKeyW
RegSetValueExA
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathW

Exports

Exports

InitializePrintMonitor

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_IO.dll
.dll windows:5 windows x64 arch:x64

f3b6b26d950543f20da766152cf6afbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

esm1_iime

ord24
ord21
ord20
ord18
ord19
ord23
ord15
ord17
ord16
ord10
ord22
ord11

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
HeapReAlloc
GetLastError
RaiseException
ReadFile
SetFilePointer
GetFileSize
CreateFileA
DisableThreadLibraryCalls
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
FlsFree
SetLastError
MapViewOfFile
CreateFileMappingW
CreateFileW
UnmapViewOfFile
HeapAlloc
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

GetUserNameA

Exports

Exports

ImoDeinitialize
ImoInitialize

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 827KB - Virtual size: 827KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_IPPR.dll
.dll windows:5 windows x64 arch:x64

7da1eec4ab6ef956c56908e9a3c87738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

spoolss

ReadPrinter
SetPrinterDataW
EndDocPrinter
StartDocPrinterW
WritePrinter
GetPrinterDataW
GetPrinterDriverW
OpenPrinterW
ClosePrinter

kernel32

TlsAlloc
TlsGetValue
TlsSetValue
ResetEvent
SetEvent
SetLastError
WaitForSingleObject
TlsFree
DisableThreadLibraryCalls
ReadFile
WideCharToMultiByte
GetProcAddress
LoadLibraryW
FreeLibrary
CreateEventW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
__C_specific_handler
DeleteCriticalSection
CreateFileW
CopyFileW
GetLastError
CloseHandle
GetConsoleOutputCP
WriteConsoleW
WriteFile
HeapSize
WriteConsoleA
SetStdHandle
CreateFileA
FlushFileBuffers
SetFilePointerEx
CreateThread
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitThread
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapReAlloc

gdi32

GdiGetDC
GdiStartDocEMF
GdiGetPageHandle
GdiStartPageEMF
GdiPlayPageEMF
GdiEndPageEMF
GdiEndDocEMF
GdiDeleteSpoolFileHandle
GdiGetDevmodeForPage
GdiResetDCEMF
SetGraphicsMode
GetDeviceCaps
CancelDC
GdiGetSpoolFileHandle

advapi32

RegQueryValueExA
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW

Exports

Exports

ClosePrintProcessor
ControlPrintProcessor
EnumPrintProcessorDatatypesW
GetPrintProcessorCapabilities
InitializePrintProcessor
InstallPrintProcessor
OpenPrintProcessor
PrintDocumentOnPrintProcessor

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_ISMON.exe
.exe windows:5 windows x64 arch:x64

3bee3821bc68120015ae4a3d7046e346

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrlenA
Sleep
WaitForSingleObject
GetModuleHandleA
GetPrivateProfileStringA
GetVersionExA
lstrcpyA
SetEvent
HeapSize
ReadFile
GetProcessHeap
SetEndOfFile
CreateMutexA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
LoadLibraryA
CreateFileA
CreateEventA
GetLastError
CreateThread
GetStartupInfoA
HeapReAlloc
ReleaseMutex
InitializeCriticalSectionAndSpinCount
SetFilePointer
HeapFree
HeapAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
CloseHandle
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers

user32

SetForegroundWindow
LoadStringW
SetDlgItemTextW
PostQuitMessage
CreatePopupMenu
GetCursorPos
InsertMenuA
SetFocus
SendMessageA
TrackPopupMenu
DestroyMenu
SendDlgItemMessageA
ShowWindow
GetDlgItem
EnableWindow
LoadImageA
DestroyIcon
LoadStringA
CreateDialogParamA
SetWindowTextA
LoadIconA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA

gdi32

DeleteObject

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

SHGetFolderPathA
Shell_NotifyIconA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_IUI.dll
.dll windows:5 windows x64 arch:x64

c93d3bbb364613b7f8b0c59d7d54cc64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DeleteFormW
GetPrinterW
GetPrinterDataW
DeletePrinterDataExW
SetPrinterW
AddPrintProcessorW
SetPrinterDataW
SetPrinterDataExW
EnumFormsW
GetPrinterDriverW
DeletePrinterDataW
EnumPrintProcessorsW
OpenPrinterW
AddFormW

spoolss

ImpersonatePrinterClient
RevertToPrinterSelf

msimg32

TransparentBlt

t2embed

ord3

kernel32

GetFileSize
CreateFileW
lstrcatW
MultiByteToWideChar
CreateDirectoryW
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTickCount
GetProfileIntW
GetUserDefaultLangID
FindClose
FindNextFileW
FindFirstFileW
SetFilePointer
FreeLibrary
SetFileAttributesW
WriteFile
CopyFileW
GetEnvironmentVariableW
GetComputerNameW
GetVersionExW
WritePrivateProfileStringW
GetProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetModuleHandleW
GetVersion
WinExec
GetWindowsDirectoryW
CreateEventW
SetEndOfFile
LoadLibraryA
DeleteCriticalSection
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
HeapDestroy
ReadFile
HeapSetInformation
LCMapStringW
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlPcToFileHeader
RaiseException
HeapReAlloc
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
FlsSetValue
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlUnwindEx
RtlLookupFunctionEntry
CreateFileA
IsValidLocale
TlsGetValue
GetFileAttributesW
lstrcmpW
CreateProcessW
WaitForSingleObject
CloseHandle
GetPrivateProfileStringW
GetProcAddress
WideCharToMultiByte
GetPrivateProfileIntW
lstrlenW
lstrcpyW
MulDiv
__C_specific_handler
OutputDebugStringA
GetModuleHandleExW
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetProcessHeap
HeapAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
HeapCreate
GetStringTypeA
GetStringTypeW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount

user32

GetDlgCtrlID
LoadCursorW
IsWindowEnabled
GetSysColor
ReleaseDC
SetWindowLongW
GetWindowLongW
GetCursor
SetCursor
DrawTextW
wsprintfW
MessageBoxW
LoadBitmapW
GetWindowRect
MapWindowPoints
LoadImageW
GetDlgItemTextW
CallWindowProcW
GetScrollInfo
SetScrollRange
SetScrollPos
SendDlgItemMessageW
CheckDlgButton
SetDlgItemInt
CheckRadioButton
GetParent
SendMessageW
GetDlgItemInt
IsDlgButtonChecked
DialogBoxParamW
SetWindowLongPtrW
LoadStringW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
GetWindowPlacement
EnableWindow
ShowWindow
SetWindowPlacement
GetWindowLongPtrW
BeginPaint
EndPaint
EndDialog
FillRect
InvalidateRect
UpdateWindow
LoadIconW
SetFocus
PostMessageW

gdi32

EnumFontFamiliesW
Pie
GetFontLanguageInfo
GetCharacterPlacementW
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
GetGlyphOutlineW
CreateFontIndirectW
GetTextExtentPointW
SetTextAlign
ExtTextOutW
MoveToEx
LineTo
CreatePen
GetMapMode
CreateDIBitmap
SetDIBits
DPtoLP
StretchBlt
CreateSolidBrush
GetStockObject
Rectangle
SetMapMode
SetTextColor
CreateDCW
GetObjectW
CreateCompatibleDC
PolyBezier
GetDeviceCaps
CreateFontW
SelectObject
SetBkMode
TextOutW
DeleteObject
DeleteDC

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
SetThreadToken
RevertToSelf
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
GetUserNameW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
VariantInit

Exports

Exports

DevQueryPrintEx
DllCanUnloadNow
DllGetClassObject
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvUpgradePrinter
GuiEndJob
GuiStartJob
GuiStartSheet
MxdcGetPDEVAdjustment

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/eSm1_IWM.exe
.exe windows:5 windows x64 arch:x64

a6160b82c25f469219cd5095f8daf741

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetTempFileNameA
DeleteFileA
CreateEventA
SetEvent
WritePrivateProfileStringA
WriteFile
GetFullPathNameA
GetFileSize
GetPrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
WideCharToMultiByte
MulDiv
lstrcpyA
lstrlenA
GetVersionExA
CreateFileA
CloseHandle
ReadFile
FlushFileBuffers
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapSetInformation
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP

gdi32

StartDocA
CreateDCA
EndPage
EndDoc
GetTextCharset
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetFontLanguageInfo
SetTextAlign
GetCharacterPlacementA
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetTextAlign
BeginPath
CreatePen
CreateSolidBrush
GetGlyphOutlineA
MoveToEx
EndPath
FlattenPath
PolyBezier
GetTextMetricsA
GetTextFaceA
GetStockObject
StretchDIBits
StartPage
ExtEscape
TextOutA
SetTextColor
SetBkMode
DeleteDC
DeleteObject
LineTo
GetPath

winspool.drv

DocumentPropertiesA
GetPrinterA
ClosePrinter
OpenPrinterA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/esm1_gdim.cat
使用说明.url
软件E线下载.url

Sharing

General

Malware Config

Signatures

Files

3ab7cc62e4963955ad408cd420cd8ef1

Code Sign

61:04:ca:69:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

61:01:c6:c1:00:00:00:00:00:07Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:07:02:dc:00:00:00:00:00:0bCertificate

Extended Key Usages

Key Usages

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9eSigner

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ntdll

shell32

setupapi

wintrust

ole32

oleaut32

comctl32

comdlg32

crypt32

version

Sections

.text Size: 392KB - Virtual size: 391KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 470KB - Virtual size: 472KB

.reloc Size: 24KB - Virtual size: 23KB

3eacb9638877275335da4b58e52824f8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

08:d4:07:bc:4f:fb:4e:dc:7a:ed:8f:39:15:f3:e9:40Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

shell32

setupapi

wintrust

ole32

oleaut32

comctl32

comdlg32

crypt32

61:04:ca:69:00:00:00:00:00:08
Certificate

61:01:c6:c1:00:00:00:00:00:07
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:07:02:dc:00:00:00:00:00:0b
Certificate

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e
Signer

.text
Size: 392KB - Virtual size: 391KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 470KB - Virtual size: 472KB

.reloc
Size: 24KB - Virtual size: 23KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

08:d4:07:bc:4f:fb:4e:dc:7a:ed:8f:39:15:f3:e9:40
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6
Signer

.text
Size: 510KB - Virtual size: 510KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 27KB - Virtual size: 27KB

.rsrc
Size: 470KB - Virtual size: 472KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 289KB - Virtual size: 289KB

.data
Size: 19KB - Virtual size: 43KB

.gfids
Size: 512B - Virtual size: 236B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 174KB - Virtual size: 173KB

.reloc
Size: 112KB - Virtual size: 111KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 175KB - Virtual size: 175KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 108KB - Virtual size: 108KB

.text
Size: 300KB - Virtual size: 300KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 15KB - Virtual size: 134KB

Shared
Size: 512B - Virtual size: 4B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 16KB - Virtual size: 15KB