44d50f22de16d7fc4856036554723135_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44d50f22de16d7fc4856036554723135_JaffaCakes118
Size

14.3MB
MD5

44d50f22de16d7fc4856036554723135
SHA1

6a35de7ec08194d028f5dcb04935efa5a1bfe2f8
SHA256

6d0cc72bd759f932c908b17fb4764cf1809c0a8cf67aefe84f0b2ebe84608688
SHA512

4c5aeaf24c19dd4eca7d90e76512fe3be9e869d70dc09f774ef01cced5ac16a1db5de375d384b2e5dac80f56f5950659797770e7f904e8aa4f46094776292660
SSDEEP

393216:jRYDSS9ddB8EOn9iOOrf8Zsjt3K6ppJAR:jR6RdSz9iOKCs53rppc

Score

3^/10

Malware Config

Signatures

Unsigned PE 27 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Photoshop7/Photoshop7/!)点我绿化.exe
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsDialogs.dll
unpack001/Photoshop7/Photoshop7/ACE.dll
unpack001/Photoshop7/Photoshop7/AGM.dll
unpack001/Photoshop7/Photoshop7/Asn.er.dll
unpack001/Photoshop7/Photoshop7/Bib.dll
unpack001/Photoshop7/Photoshop7/CoolType.dll
unpack001/Photoshop7/Photoshop7/MPS.dll
unpack001/Photoshop7/Photoshop7/OPP.dll
unpack001/Photoshop7/Photoshop7/PDFL50.dll
unpack001/Photoshop7/Photoshop7/PSViews.dll
unpack001/Photoshop7/Photoshop7/Photoshop.dll
unpack001/Photoshop7/Photoshop7/Photoshop.exe
unpack001/Photoshop7/Photoshop7/Photoshop.fon
unpack001/Photoshop7/Photoshop7/Plug-Ins/File Formats/BMP.8BI
unpack001/Photoshop7/Photoshop7/Plug-Ins/File Formats/Gif.8bi
unpack001/Photoshop7/Photoshop7/Plug-Ins/File Formats/Png.8bi
unpack001/Photoshop7/Photoshop7/Plugin.dll
unpack001/Photoshop7/Photoshop7/Psut9532.dll
unpack001/Photoshop7/Photoshop7/Required/ADMPlugin.apl
unpack001/Photoshop7/Photoshop7/Required/ADMUI3.fon
unpack001/Photoshop7/Photoshop7/Required/ASDataStream.apl
unpack001/Photoshop7/Photoshop7/Required/Droplet Template.exe
unpack001/Photoshop7/Photoshop7/Required/PNGIcons.apl
unpack001/Photoshop7/Photoshop7/Required/PhotoshopAdapter.apl
unpack001/Photoshop7/Photoshop7/Shfolder.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/Photoshop7/Photoshop7/!)点我绿化.exe	nsis_installer_1
static1/unpack001/Photoshop7/Photoshop7/!)点我绿化.exe	nsis_installer_2

Files

44d50f22de16d7fc4856036554723135_JaffaCakes118
.rar
Photoshop7/Photoshop7/!)点我绿化.exe
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/xzb2.bmp
Photoshop7/Photoshop7/ACE.dll
.dll windows:4 windows x86 arch:x86

a55893145c6afc1c70bfacd8cdca52e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetACP
IsValidCodePage
FindNextFileA
GetVersionExA
CreateThread
CloseHandle
TerminateThread
CreateEventA
SetEvent
WaitForSingleObject
WaitForMultipleObjects
GetSystemInfo
GetLastError
RtlUnwind
RaiseException
IsBadReadPtr
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
DeleteFileA
MoveFileA
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GlobalMemoryStatus
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProfileStringA
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetFilePointer
ReadFile
LCMapStringA
LCMapStringW
IsBadCodePtr
GetCPInfo
GetOEMCP
CreateFileA
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
CreateDirectoryA
GetFileAttributesA
FindFirstFileA
HeapReAlloc
HeapSize
GetProcAddress
FreeLibrary
LoadLibraryA
TerminateProcess
GetCurrentProcess
SetHandleCount

user32

LoadStringA
wsprintfA

gdi32

CreateDCA
GetICMProfileA
DeleteDC

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA

ole32

CoCreateInstance

Exports

Exports

ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACETerminate

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/AGM.dll
.dll windows:4 windows x86 arch:x86

877641cbd3941ae34729126753704edf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
CloseHandle
FlushFileBuffers
RaiseException
RtlUnwind
IsBadReadPtr
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
GetVersion
SetUnhandledExceptionFilter
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
GetLastError
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

GetDC
ReleaseDC
GetWindowRect
GetSystemMetrics
GetDesktopWindow
WindowFromDC

gdi32

CreateCompatibleBitmap
GetDeviceCaps
SetBitmapBits
BitBlt
GetBitmapBits
CreateBrushIndirect
SetMapMode
GetDIBits
CreatePalette
GetStockObject
RealizePalette
GetViewportOrgEx
SelectPalette
SetBkColor
SetTextColor
DeleteObject
SelectObject
CreateDIBPatternBrushPt
CreateCompatibleDC
CreatePolyPolygonRgn
RestoreDC
StretchDIBits
SetStretchBltMode
ExtSelectClipRgn
SaveDC
DeleteDC
GetDIBColorTable
GetObjectA
PatBlt
CreateBitmap
CreateSolidBrush
CreatePatternBrush
CreateDIBitmap

Exports

Exports

AGMGetVersion
AGMInitialize
AGMTerminate

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/Asn.er.dll
.dll windows:4 windows x86 arch:x86

934de64a238e1a3a6b7d73fe014c9c8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetUnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
CloseHandle
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
RtlUnwind
WideCharToMultiByte
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetConsoleCtrlHandler
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle
ReadFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
InterlockedExchange
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
SetEndOfFile

Exports

Exports

??0AsnDll@@QAE@XZ
??4AsnDll@@QAEAAV0@ABV0@@Z
?dllMain@AsnDll@@SAHPAXK0@Z
?main@AsnDll@@SAHHPBQBD@Z
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo_0100
asn_exit
asn_getVersion_0100
asn_info_0100
asn_init
asn_makeChecksum_0100
asn_makePrivateEx_0100
asn_makePrivate_0100
asn_verifyChecksum_0100

Sections

.text
Size: 596KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Bib.dll
.dll windows:4 windows x86 arch:x86

d698b4087e267df835a8ae2ea785f9f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetHandleCount
EnterCriticalSection
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
CloseHandle
CreateThread
Sleep
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LeaveCriticalSection
GetStdHandle
GetFileType
GetStartupInfoA
GetLastError
SetFilePointer
ReadFile
FlushFileBuffers
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile

Exports

Exports

BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/CoolType.dll
.dll windows:4 windows x86 arch:x86

d49f127a9ea5e4d2924a409b6e4c1898

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetVolumeInformationA
GetFullPathNameA
FlushFileBuffers
GetLastError
FindCloseChangeNotification
InterlockedDecrement
FileTimeToSystemTime
FindFirstChangeNotificationA
lstrcatA
SetLastError
FindNextFileA
CompareStringA
GetSystemDefaultLCID
GetModuleHandleA
GetPrivateProfileIntA
MultiByteToWideChar
FindFirstFileA
InterlockedIncrement
lstrlenA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
IsDBCSLeadByte
GetDriveTypeA
SetFileAttributesA
WriteFile
GetFileAttributesA
DeleteFileA
SetFilePointer
CreateFileA
GetFileSize
GetVersionExA
ReadFile
CloseHandle
FindNextChangeNotification
WaitForMultipleObjects
lstrcmpiA
SetStdHandle
SetCurrentDirectoryA
GetFileType
GetSystemTime
GetLocalTime
GetEnvironmentStringsW
GetPrivateProfileStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetACP
WideCharToMultiByte
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryA
GetCurrentDirectoryA
TerminateProcess
RaiseException
SetEnvironmentVariableA
CompareStringW
IsBadCodePtr
DisableThreadLibraryCalls
ReadProcessMemory
GetCurrentProcess
GetThreadSelectorEntry
GetCurrentThread
RtlUnwind
IsBadReadPtr
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
ExitProcess
GetStdHandle
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
HeapSize
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW

user32

ReleaseDC
GetDC
RegisterClassA
wsprintfA
CharUpperA
DestroyWindow
GetDesktopWindow
CreateWindowExA
DefWindowProcA

gdi32

SetTextColor
SetBkColor
ExtTextOutA
EnumFontFamiliesExA
ExtTextOutW
GetFontData
SelectObject
CreateFontIndirectA
DeleteDC
CreateCompatibleDC
DeleteObject
SetBkMode
SetTextAlign
EnumFontFamiliesA
GetTextMetricsA
CreateBitmap
GetDeviceCaps
PatBlt
GetCharABCWidthsA
GetBitmapBits
GetTextExtentPointA
GetTextExtentPointW
GetCharABCWidthsW

advapi32

RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

SHGetFileInfoA

ole32

CoUninitialize
CoInitialize

winmm

timeGetTime

Exports

Exports

CTAddFontsAndConfig
CTAddFontsInCurDirectory
CTAddFontsInInternetDirectory
CTBeginModalPurge
CTCMapIsAvailable
CTClearIncrGlyphList
CTComposeFont
CTConvertDesignVector
CTCreateFontContext
CTCreateFontInstance
CTCreateInternetFontContext
CTCreateOutlineIter
CTDefKeyVal
CTDeleteEncoding
CTDeleteFont
CTDeleteFontContext
CTDeleteFontInstance
CTDeleteInternetFontContext
CTDeleteOutlineIter
CTDeletePSFontStream
CTDeleteTempFontsHandle
CTDeleteTranslator
CTDeleteUniTranslator
CTEncodingIsValid
CTEndModalPurge
CTFindFont
CTFindFontPS
CTFindOrFauxFont
CTGet1GlyphID
CTGet1GlyphMetrics
CTGet1Kern
CTGetAGMFontServer
CTGetATCGlyphID
CTGetCIDEncoding
CTGetCharacterBoundaries
CTGetComponentGlyphID
CTGetContextType
CTGetFindOrFauxFontStatus
CTGetFontNamesFromMenuName
CTGetFontPolicy
CTGetFontScriptAndEncodingFromPSFontName
CTGetFontSetSeed
CTGetGlyphIDs
CTGetGlyphLocations
CTGetGlyphMaps
CTGetHintedGlyphLocations
CTGetIndexedFont
CTGetIndexedFontGroup
CTGetMenuName
CTGetNamedFontGroup
CTGetNumFontGroups
CTGetNumFontsInGroup
CTGetPSNameFromMenuName
CTGetPanoseMatchingPolicy
CTGetPreDefinedEncoding
CTGetSearchParam
CTGetShadowFont
CTGetSystemDefaultFont
CTGetTrueTypeEncoding
CTGetTrueTypeEncodingCodePage
CTGetType1Encoding
CTGetVal
CTGetValDataLength
CTHasKerningTable
CTInitAndConfig
CTInitialize
CTIsKeyDefed
CTMakeStringAtom
CTNewCIDTranslator
CTNewCMapUnicodeTranslator
CTNewCreateOutlineIter
CTNewEncoding
CTNewFauxFont
CTNewFont
CTNewPSFontStream
CTNewServer
CTNewTempFont
CTNewTempFontsHandle
CTNewTranslator
CTNewUIServer
CTNextOutlineSegment
CTOTAvailableFeatures
CTOTFeature
CTOTGlyphAccess
CTOTNumberOfAlternates
CTPSFontStreamDownloadIncr
CTPurgeNextBlock
CTRasterDevGetVal
CTRasterDevSetVal
CTReleaseGlyphMapLocks
CTRomanFauxFontAddWidths
CTSetCIDEncoding
CTSetFontPolicy
CTSetPanoseMatchingPolicy
CTSetSearchParam
CTSetSystemDefaultFonts
CTSetTrueTypeEncoding
CTSetTrueTypeEncodingCodePage
CTSetType1Encoding
CTShallowCopyFont
CTShareVal
CTStreamCMap
CTStreamFont
CTStreamPSFont
CTStreamPSProcSet
CTStreamRearrangement
CTTerminate
CTTranslateBaseline
CTTranslateEncoding
CTTranslateGlyphID
CTTranslateUnicode
CTUndefKey
CTVerifyPanose
CTVersion

Sections

.text
Size: 988KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/MPS.dll
.dll windows:4 windows x86 arch:x86

408a373f83b4d04e2c18c0da04b94f44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadWritePtr
SizeofResource
FindResourceA
LockResource
LoadResource
FreeResource
GetCommandLineA
GetVersion
RtlUnwind
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
SetUnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
HeapSize
VirtualAlloc
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
CloseHandle
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
GetFullPathNameA
FindFirstFileA
FindNextFileA
FindClose
GetSystemTime
GetLocalTime
MoveFileA
GetSystemTimeAsFileTime
DeleteFileA
GetDriveTypeA
GetCurrentProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
SetEndOfFile
GetCurrentDirectoryA
CreateFileA

user32

CharUpperA

Exports

Exports

MPSExportHack
MPSGetMemoryServer
MPSGetVersion
MPSImportHack
MPSInitialize
MPSNewAGMDisplayServer
MPSNewAGMStreamServer
MPSNewAI2EPSStreamServer
MPSNewAI2EPSStreamServerExt
MPSNewBIBStreamServer
MPSNewCTEncodingServer
MPSNewCTEncodingServer2
MPSNewCTFontServer
MPSNewCTResourceServer
MPSNewDCSFilterStreamServer
MPSNewDefIdleServer
MPSNewDefResourceServer
MPSNewDictionary
MPSNewExportPreferenceDisplayServer
MPSNewFontProxieServer
MPSNewMemoryServer
MPSNewPSStreamDisplayServer
MPSNewParser
MPSNewParserPICT
MPSNewParserPS
MPSNewParserWMF
MPSNewStdDeviceServer
MPSNewStdDeviceServerOrientation
MPSNewStdDeviceServerTr
MPSNewStdIdleServer
MPSOptions
MPSRecognize
MPSRecognizePICT
MPSRecognizePS
MPSRecognizeWMF
MPSTerminate
MPSToAGMColorSpace

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 324KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 640KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/OPP.dll
.dll windows:4 windows x86 arch:x86

fb781a6807fd23ee15ea408b30769382

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStringsW
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
RaiseException
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

OPPGetVersion
OPPInitialize
OPPTerminate

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/PDFL50.dll
.dll windows:4 windows x86 arch:x86

f3a87e6e699bc73c6f8b900dda5bb731

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentProcess
GetEnvironmentStrings
WideCharToMultiByte
TerminateProcess
OpenFile
lstrcpynA
GetDriveTypeA
GetModuleHandleA
WriteFile
GetLastError
CreateFileA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
SetEndOfFile
DeleteFileA
GetCommandLineA
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
IsDBCSLeadByteEx
GetTickCount
CompareStringA
HeapAlloc
GetEnvironmentStringsW
WinExec
GetPrivateProfileStringA
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceA
GlobalMemoryStatus
MulDiv
GetPrivateProfileIntA
IsValidCodePage
SetCurrentDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
CompareFileTime
GetSystemTimeAsFileTime
lstrcmpiA
_lopen
lstrcmpA
FlushFileBuffers
MoveFileA
GetTimeZoneInformation
GetLocalTime
IsBadReadPtr
RaiseException
HeapCompact
SetStdHandle
GetCurrentProcessId
HeapSize
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
CompareStringW
SetEnvironmentVariableA
ReadFile
CloseHandle
ExitProcess
GetVersion
IsBadWritePtr
VirtualAlloc
HeapReAlloc
GetOEMCP
GetCPInfo
GetACP
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringA
LCMapStringW
GetStringTypeW
RtlUnwind
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
HeapFree
VirtualFree
GetEnvironmentVariableA
HeapDestroy
GetVersionExA
SystemTimeToFileTime
GetModuleFileNameA
GetSystemTime
IsDBCSLeadByte
GetStartupInfoA
lstrlenA
FreeLibrary
EnumSystemLocalesA
GetLocaleInfoW
IsValidLocale
GetLocaleInfoA
GetUserDefaultLCID

bib

ord4
ord11
ord5

ace

ord3
ord4

agm

ord4
ord3

cooltype

ord95
ord44
ord46
ord45
ord3
ord67
ord69
ord18
ord19
ord68
ord98
ord66
ord25
ord48
ord13
ord51
ord11
ord10
ord26
ord27
ord28
ord30
ord97
ord33
ord49
ord32
ord31
ord60
ord7
ord34
ord47
ord96
ord6
ord114
ord113
ord9
ord39
ord53
ord17
ord40
ord55
ord52
ord29
ord41
ord88
ord87
ord86
ord12
ord38
ord24
ord23
ord21
ord20
ord16
ord61
ord8

opp

ord4
ord3

user32

CharUpperBuffA
OemToCharBuffA
CharToOemBuffA
CharUpperA
GetDesktopWindow
wsprintfA
SetRect
LoadStringA
ReleaseDC
GetDC
OemToCharA

gdi32

EnumFontFamiliesExA
GetStockObject
TextOutA
SelectObject
CreateDCA
ResetDCA
AbortDoc
ExtEscape
Escape
DeleteDC
StartPage
EndPage
GetDeviceCaps
EndDoc
BitBlt
StartDocA
CreateBitmap
CreateCompatibleBitmap
SetBkColor
GetDIBits
GetTextFaceA
CreateCompatibleDC
AddFontResourceA
CreateScalableFontResourceA
EnumFontFamiliesA
GetFontData
RemoveFontResourceA
GetObjectA
CreateFontIndirectA
DeleteObject

winspool.drv

EnumJobsA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
EnumPrintersA

advapi32

GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetAddConnection2A
WNetGetConnectionA

Exports

Exports

ACGetExceptionErrorCode
ACPopExceptionFrame
ACPushExceptionFrame
AGMFunctionGetCosObj
ASAtomExistsForString
ASAtomFromString
ASAtomGetCount
ASAtomGetString
ASCStringToFixed
ASCabCopy
ASCabDestroy
ASCabDestroyEmpties
ASCabDetachBinary
ASCabDetachCab
ASCabDetachPathName
ASCabDetachPointerRaw
ASCabDetachString
ASCabDetachText
ASCabDup
ASCabEnum
ASCabEqual
ASCabFromEntryList
ASCabGetAtom
ASCabGetBinary
ASCabGetBinaryCopy
ASCabGetBool
ASCabGetCab
ASCabGetDouble
ASCabGetInt
ASCabGetPathNameCopy
ASCabGetPointerDestroyProc
ASCabGetPointerRaw
ASCabGetPointerType
ASCabGetString
ASCabGetStringCopy
ASCabGetText
ASCabGetType
ASCabKnown
ASCabMakeEmpty
ASCabMunge
ASCabNew
ASCabNumEntries
ASCabPutAtom
ASCabPutBinary
ASCabPutBool
ASCabPutCab
ASCabPutDouble
ASCabPutInt
ASCabPutNull
ASCabPutPathName
ASCabPutPointerRaw
ASCabPutString
ASCabPutText
ASCabReadFromStream
ASCabRemove
ASCabRename
ASCabValueEqual
ASCabWriteToStream
ASFileAcquirePathName
ASFileClearOutstandingMReads
ASFileClose
ASFileFlush
ASFileFromMDFile
ASFileGetEOF
ASFileGetFileSys
ASFileGetFileSysByName
ASFileGetMDFile
ASFileGetOpenMode
ASFileGetPos
ASFileGetURL
ASFileIsSame
ASFileMReadRequest
ASFilePushData
ASFileRead
ASFileRegisterFileSys
ASFileReopen
ASFileSetEOF
ASFileSetMode
ASFileSetPos
ASFileStmRdOpen
ASFileStmWrOpen
ASFileSysAcquireFileSysPath
ASFileSysAcquireParent
ASFileSysCopyPathName
ASFileSysCreateFolder
ASFileSysCreatePathName
ASFileSysDIPathFromPath
ASFileSysDestroyFolderIterator
ASFileSysDisplayStringFromPath
ASFileSysFirstFolderItem
ASFileSysFlushVolume
ASFileSysGetDefaultTempPath
ASFileSysGetItemProps
ASFileSysGetNameFromPath
ASFileSysGetStorageFreeSpace
ASFileSysGetTempPathName
ASFileSysGetTypeAndCreator
ASFileSysNextFolderItem
ASFileSysOpenFile
ASFileSysPathFromDIPath
ASFileSysReleasePathName
ASFileSysRemove
ASFileSysRemoveFolder
ASFileSysSetDefaultTempPath
ASFileSysSetTypeAndCreator
ASFileSysURLFromPath
ASFileUnregisterFileSys
ASFileWrite
ASFixedDiv
ASFixedMatrixConcat
ASFixedMatrixInvert
ASFixedMatrixTransform
ASFixedMatrixTransformRect
ASFixedMul
ASFixedToCString
ASFixedToFloat
ASGetConfiguration
ASGetDefaultFileSys
ASGetErrorString
ASHostMBLen
ASMemStmRdOpen
ASPathFromPlatformPath
ASPopExceptionFrame
ASProcStmRdOpen
ASProcStmWrOpen
ASPurgeMemory
ASPushExceptionFrame
ASRaise
ASRegisterErrorString
ASScriptFromHostEncoding
ASScriptToHostEncoding
ASSecs
ASStmClose
ASStmRead
ASStmWrite
ASSureMalloc
ASTextCat
ASTextCatMany
ASTextCmp
ASTextCopy
ASTextDestroy
ASTextDup
ASTextFromEncoded
ASTextFromInt32
ASTextFromPDText
ASTextFromScriptText
ASTextFromSizedEncoded
ASTextFromSizedPDText
ASTextFromSizedScriptText
ASTextFromSizedUnicode
ASTextFromUnicode
ASTextFromUns32
ASTextGetBestEncoding
ASTextGetBestScript
ASTextGetCountry
ASTextGetEncoded
ASTextGetEncodedCopy
ASTextGetLanguage
ASTextGetPDTextCopy
ASTextGetScriptText
ASTextGetScriptTextCopy
ASTextGetUnicode
ASTextGetUnicodeCopy
ASTextIsEmpty
ASTextMakeEmpty
ASTextNew
ASTextNormalizeEndOfLine
ASTextReplace
ASTextReplaceASCII
ASTextSetCountry
ASTextSetEncoded
ASTextSetLanguage
ASTextSetPDText
ASTextSetScriptText
ASTextSetSizedEncoded
ASTextSetSizedPDText
ASTextSetSizedScriptText
ASTextSetSizedUnicode
ASTextSetUnicode
AScalloc
ASfree
ASmalloc
ASmemcpy
ASmemset
ASmemsubmem
ASrealloc
ASsprintf
ASstrcat
ASstrchr
ASstrcmp
ASstrcpy
ASstrlen
ASstrncmp
ASstrncpy
ASstrrchr
AVExtensionMgrRegisterNotification
AVExtensionMgrUnregisterNotification
CStringToInt32
CosArrayGet
CosArrayInsert
CosArrayLength
CosArrayPut
CosArrayRemove
CosArrayRemoveNth
CosBooleanValue
CosCopyStringValue
CosCryptGetVersion
CosDecryptData
CosDecryptGetMaxKeyBytes
CosDictGet
CosDictGetXAPMetadata
CosDictKnown
CosDictPut
CosDictRemove
CosDictSetXAPMetadata
CosDocClose
CosDocCreate
CosDocEnumEOFs
CosDocEnumIndirect
CosDocGetID
CosDocGetInfoDict
CosDocGetObjByID
CosDocGetRoot
CosDocOpenWithParams
CosDocSaveToFile
CosDocSaveWithParams
CosDocSetDirty
CosEncryptData
CosEncryptGetMaxKeyBytes
CosFixedValue
CosIntegerValue
CosNameValue
CosNewArray
CosNewBoolean
CosNewDict
CosNewFixed
CosNewInteger
CosNewName
CosNewNull
CosNewStream
CosNewString
CosObjCmp
CosObjCopy
CosObjDestroy
CosObjEnum
CosObjEqual
CosObjGetDoc
CosObjGetGeneration
CosObjGetID
CosObjGetType
CosObjHash
CosObjIsIndirect
CosParseStmToken
CosSetMaxDocStorage
CosStreamDict
CosStreamLength
CosStreamOpenStm
CosStreamPos
CosStreamSetData
CosStringGetHexFlag
CosStringSetHexFlag
CosStringValue
CosStringValueSafe
FloatToASFixed
MD5Final
MD5Init
MD5Update
PDActionDestroy
PDActionEqual
PDActionFromCosObj
PDActionGetCosObj
PDActionGetDest
PDActionGetFileSpec
PDActionGetSubtype
PDActionIsValid
PDActionNew
PDActionNewFromDest
PDActionNewFromFileSpec
PDAnnotEqual
PDAnnotFromCosObj
PDAnnotGetColor
PDAnnotGetCosObj
PDAnnotGetDate
PDAnnotGetFlags
PDAnnotGetRect
PDAnnotGetSubtype
PDAnnotGetTitle
PDAnnotIsValid
PDAnnotNotifyDidChange
PDAnnotNotifyWillChange
PDAnnotSetColor
PDAnnotSetDate
PDAnnotSetFlags
PDAnnotSetRect
PDAnnotSetTitle
PDApplyFunction
PDBeadAcquirePage
PDBeadDestroy
PDBeadEqual
PDBeadFromCosObj
PDBeadGetCosObj
PDBeadGetIndex
PDBeadGetNext
PDBeadGetPrev
PDBeadGetRect
PDBeadGetThread
PDBeadInsert
PDBeadIsValid
PDBeadNew
PDBeadSetPage
PDBeadSetRect
PDBookmarkAddChild
PDBookmarkAddNewChild
PDBookmarkAddNewSibling
PDBookmarkAddNext
PDBookmarkAddPrev
PDBookmarkAddSubtree
PDBookmarkDestroy
PDBookmarkEqual
PDBookmarkFromCosObj
PDBookmarkGetAction
PDBookmarkGetByTitle
PDBookmarkGetColor
PDBookmarkGetCosObj
PDBookmarkGetCount
PDBookmarkGetFirstChild
PDBookmarkGetFlags
PDBookmarkGetIndent
PDBookmarkGetLastChild
PDBookmarkGetNext
PDBookmarkGetParent
PDBookmarkGetPrev
PDBookmarkGetTitle
PDBookmarkHasChildren
PDBookmarkIsOpen
PDBookmarkIsValid
PDBookmarkRemoveAction
PDBookmarkSetAction
PDBookmarkSetColor
PDBookmarkSetFlags
PDBookmarkSetOpen
PDBookmarkSetTitle
PDBookmarkUnlink
PDCharProcEnum
PDCharProcGetCosObj
PDClearCaches
PDDocAcquire
PDDocAcquirePage
PDDocAddThread
PDDocAuthorize
PDDocCalculateImplicitMetadata
PDDocClearFlags
PDDocClose
PDDocCopyToFile
PDDocCreate
PDDocCreateNameTree
PDDocCreatePage
PDDocCreateStructTreeRoot
PDDocCreateTextSelect
PDDocCreateTextSelectHost
PDDocCreateThumbs
PDDocCreateWordFinder
PDDocCreateWordFinderUCS
PDDocDeletePages
PDDocDeleteThumbs
PDDocEnumFonts
PDDocEnumLoadedFonts
PDDocEnumResources
PDDocEnumURL
PDDocExportNotes
PDDocExportSomeNotes
PDDocFindPageNumForLabel
PDDocFromCosDoc
PDDocGetBookmarkRoot
PDDocGetCosDoc
PDDocGetCryptHandlerClientData
PDDocGetFile
PDDocGetFlags
PDDocGetFullScreen
PDDocGetID
PDDocGetInfo
PDDocGetLabelForPageNum
PDDocGetNameTree
PDDocGetNewCryptHandler
PDDocGetNewSecurityData
PDDocGetNewSecurityInfo
PDDocGetNumPages
PDDocGetNumThreads
PDDocGetOpenAction
PDDocGetPageLabel
PDDocGetPageMode
PDDocGetPageObjByNum
PDDocGetPermissions
PDDocGetSecurityData
PDDocGetStructTreeRoot
PDDocGetThread
PDDocGetThreadIndex
PDDocGetTransition
PDDocGetVersion
PDDocGetWordFinder
PDDocGetWordFinderHost
PDDocGetXAPMetadata
PDDocHasTransition
PDDocImportCosDocNotes
PDDocImportNotes
PDDocInsertPages
PDDocIsSigned
PDDocMovePage
PDDocNewSecurityData
PDDocOpen
PDDocOpenEx
PDDocOpenFromASFile
PDDocOpenFromASFileEx
PDDocOpenWithParams
PDDocPermRequest
PDDocPrintPages
PDDocReadAhead
PDDocReadAheadPages
PDDocRelease
PDDocRemoveAllSignatures
PDDocRemoveNameTree
PDDocRemoveOpenAction
PDDocRemovePageLabel
PDDocRemoveStructTreeRoot
PDDocRemoveThread
PDDocReplacePages
PDDocSave
PDDocSaveWithParams
PDDocSetFlags
PDDocSetFullScreen
PDDocSetInfo
PDDocSetNewCryptHandler
PDDocSetNewSecurityData
PDDocSetOpenAction
PDDocSetPageLabel
PDDocSetPageMode
PDDocSetTransition
PDDocSetXAPMetadata
PDDrawCosObjToWindow
PDEAcquire
PDEAddTag
PDEAttrEnumTable
PDEBeginContainerCreate
PDEBeginContainerGetDict
PDEBeginContainerGetMCTag
PDEBeginContainerSetDict
PDEBeginContainerSetMCTag
PDEBeginGroupCreate
PDEClipAddElem
PDEClipCopy
PDEClipCreate
PDEClipFlattenedEnumElems
PDEClipGetElem
PDEClipGetNumElems
PDEClipRemoveElems
PDEColorSpaceCreate
PDEColorSpaceCreateFromAGMColorSpace
PDEColorSpaceCreateFromCosObj
PDEColorSpaceCreateFromName
PDEColorSpaceGetAGMColorSpace
PDEColorSpaceGetBase
PDEColorSpaceGetBaseNumComps
PDEColorSpaceGetCTable
PDEColorSpaceGetCosObj
PDEColorSpaceGetHiVal
PDEColorSpaceGetName
PDEColorSpaceGetNumComps
PDEContainerCreate
PDEContainerGetContent
PDEContainerGetDict
PDEContainerGetMCTag
PDEContainerGetXAPMetadata
PDEContainerSetContent
PDEContainerSetDict
PDEContainerSetMCTag
PDEContainerSetXAPMetadata
PDEContentAddElem
PDEContentAddPage
PDEContentCreate
PDEContentCreateFromCosObj
PDEContentGetAttrs
PDEContentGetDefaultColorSpace
PDEContentGetElem
PDEContentGetNumElems
PDEContentGetResources
PDEContentRemoveElem
PDEContentToCosObj
PDECosCopyRecursive
PDEDefaultGState
PDEDeviceNColorsCreate
PDEDeviceNColorsGetColorValue
PDEElementCopy
PDEElementGetBBox
PDEElementGetClip
PDEElementGetGState
PDEElementGetMatrix
PDEElementHasGState
PDEElementIsAtPoint
PDEElementIsAtRect
PDEElementSetClip

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Photoshop7/Photoshop7/PSUT9516.DLL
Photoshop7/Photoshop7/PSViews.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Photoshop.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 868KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Photoshop.exe
.exe windows:4 windows x86 arch:x86

e49f41fc4ad14f564edc16eed02e0ee5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetFullPathNameA
FindFirstFileA
GetFileSize
GetDriveTypeA
GetModuleHandleW
GetModuleHandleA
GetProcAddress
SizeofResource
LoadLibraryW
OutputDebugStringA
GetLastError
GlobalFree
GetLocalTime
VirtualFree
CreateFileA
GetFileInformationByHandle
FindNextFileA
GetVolumeInformationA
SetErrorMode
LoadLibraryA
FreeLibrary
GetFileAttributesExA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
CopyFileA
CopyFileExA
MoveFileA
CompareFileTime
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
SystemTimeToFileTime
GetTimeZoneInformation
lstrcmpA
CreateProcessA
GetStdHandle
GlobalMemoryStatus
GetVersionExA
GetSystemInfo
OpenFile
GetWindowsDirectoryA
GetSystemDirectoryA
AreFileApisANSI
CreateFileW
LockResource
LoadResource
FindResourceA
GetDiskFreeSpaceA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetComputerNameA
GlobalDeleteAtom
QueryPerformanceCounter
DebugBreak
OpenEventA
GlobalGetAtomNameA
SetEvent
GetCurrentDirectoryW
lstrlenW
MulDiv
GetModuleFileNameW
_lclose
GetDiskFreeSpaceExA
CloseHandle
GetTempFileNameA
lstrcpyA
GetTickCount
ReadFile
SetFilePointer
GetDateFormatA
CreateDirectoryA
GetTempPathA
lstrcatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTimeFormatA
GetSystemTime
GetModuleFileNameA
GetEnvironmentVariableA
GetExitCodeThread
FreeResource
lstrcpynA
GetACP
GetCPInfo
CompareStringW
GetCurrentThreadId
IsValidCodePage
ResumeThread
CreateMutexA
WriteProfileStringA
FormatMessageA
GetLogicalDriveStringsA
GlobalAddAtomA
GetProfileStringA
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
HeapFree
GetProcessHeap
GetLocaleInfoA
HeapAlloc
Sleep
EnumResourceNamesA
SleepEx
GetProfileIntA
CreateEventA
GlobalSize
InitializeCriticalSection
WaitForSingleObject
CreateThread
DeleteCriticalSection
ResetEvent
EnterCriticalSection
LeaveCriticalSection
_lread
FileTimeToDosDateTime
GetLogicalDrives
SetEndOfFile
_lwrite
GetShortPathNameA
GetFileTime
_llseek
FlushFileBuffers
FindClose
DeleteFileW
GetFileAttributesW
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
FileTimeToSystemTime
lstrlenA
FileTimeToLocalFileTime
FindFirstFileW
IsBadCodePtr
IsBadReadPtr
RaiseException
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
PeekNamedPipe
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsDBCSLeadByteEx
GetSystemDefaultLangID
LoadLibraryExA
SuspendThread
ExitThread
CompareStringA
GetStringTypeW
VirtualAlloc
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
SetStdHandle
GetFullPathNameW
GetOEMCP
GetEnvironmentStringsW
LCMapStringW
LCMapStringA
WriteFile
SetUnhandledExceptionFilter
GetVersion
GetCommandLineA
GetLocaleInfoW
SetEnvironmentVariableA
GetStartupInfoA
GetFileType
HeapCompact

advapi32

RegEnumValueA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
IsTextUnicode
GetSecurityDescriptorDacl
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetFileSecurityA
GetEffectiveRightsFromAclA
RegQueryValueExA
SetFileSecurityA
GetUserNameA

user32

MapWindowPoints
CopyAcceleratorTableA
GetKeyboardState
ToAscii
GetUpdateRgn
GetMessageTime
GetWindowThreadProcessId
EnumChildWindows
InvalidateRgn
DialogBoxParamW
DialogBoxParamA
GetSystemMenu
EnableMenuItem
GetMessageA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
MessageBoxW
GetTopWindow
SetWindowTextW
SendMessageA
IsDlgButtonChecked
CreateWindowExW
GetDoubleClickTime
GetScrollInfo
SetScrollInfo
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SendMessageW
SetMessageExtraInfo
GetClipboardData
GetMessageExtraInfo
ScreenToClient
IntersectRect
GetMenuStringA
FillRect
GetNextDlgTabItem
GetWindowDC
CheckMenuItem
GetMenuItemCount
GetMenuItemID
GetSysColorBrush
OffsetRect
DrawTextA
InflateRect
InvertRect
SetRect
FrameRect
GetNextDlgGroupItem
SetWindowWord
GetCapture
ReleaseCapture
SetCapture
GetWindowWord
GetKeyState
GetClipboardViewer
SetClipboardViewer
BringWindowToTop
ChangeClipboardChain
PostMessageA
GetWindow
DefFrameProcA
SetTimer
GetQueueStatus
AdjustWindowRectEx
RedrawWindow
WindowFromDC
IsChild
GetSubMenu
SetMenu
CreateMenu
RemoveMenu
AppendMenuA
DrawMenuBar
ModifyMenuA
ModifyMenuW
DestroyMenu
UnionRect
LoadCursorA
SetDlgItemTextA
SetMenuItemInfoA
AppendMenuW
GetMenuStringW
InsertMenuA
BeginPaint
EndPaint
SetRectEmpty
LoadAcceleratorsA
PtInRect
ValidateRect
GetWindowTextA
SetWindowTextA
GetClassNameA
CharLowerA
GetActiveWindow
GetMenuItemInfoA
InsertMenuW
GetMenu
CreatePopupMenu
IsRectEmpty
DrawTextW
TranslateMDISysAccel
PostQuitMessage
KillTimer
GetLastActivePopup
GetDlgItem
CharUpperBuffA
CharLowerBuffA
IsMenu
SendDlgItemMessageA
SetCursor
GetCursor
GetDlgItemTextA
FindWindowExA
GetWindowTextW
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
LoadMenuA
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItemTextW
CreateDialogParamA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
RegisterClassW
DrawFocusRect
LoadBitmapA
DefFrameProcW
DefMDIChildProcW
DefMDIChildProcA
DefWindowProcW
DefWindowProcA
CallWindowProcW
CallWindowProcA
TrackPopupMenuEx
GetClassNameW
GetForegroundWindow
SetWindowPlacement
GetUpdateRect
ScrollWindow
GetWindowLongW
SetWindowLongW
GetWindowLongA
SetWindowLongA
GetWindowTextLengthA
DrawEdge
WindowFromPoint
SetActiveWindow
DialogBoxIndirectParamA
MapDialogRect
EndDialog
LoadImageA
CreateIconFromResourceEx
LookupIconIdFromDirectory
EnableWindow
EmptyClipboard
OpenClipboard
CloseClipboard
RegisterClipboardFormatA
IsWindowVisible
InvalidateRect
GetDlgCtrlID
GetPropA
GetParent
RemovePropA
SetPropA
SetParent
GetKeyboardLayout
GetCursorPos
WaitForInputIdle
SetForegroundWindow
FindWindowA
GetFocus
GetDCEx
GetIconInfo
DrawIconEx
GetSysColor
GetClientRect
UpdateWindow
IsZoomed
SystemParametersInfoA
GetDesktopWindow
LoadStringA
wsprintfA
LoadIconA
DestroyIcon
GetWindowPlacement
GetSystemMetrics
GetAsyncKeyState
PeekMessageA
ClientToScreen
GetMenuState
IsIconic
ShowWindow
IsWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
DestroyWindow
GetWindowRect
IsClipboardFormatAvailable
SetWindowPos
SetFocus
IsWindowEnabled
GetDC
ReleaseDC
CharUpperA
GetKeyboardLayoutList
ActivateKeyboardLayout
CreateCursor
DestroyCursor
ShowCursor
SetCursorPos
MessageBeep
CheckDlgButton
IsWindowUnicode

gdi32

GetStockObject
RealizePalette
SelectPalette
GetDIBits
StretchDIBits
PatBlt
GetObjectA
SetBkColor
GetPixel
ExtTextOutA
GetDeviceCaps
SetStretchBltMode
GdiFlush
SetTextColor
DeleteDC
ExtTextOutW
CreateCompatibleDC
GetTextExtentPointW
StretchBlt
CreateFontIndirectA
CreateSolidBrush
GetTextMetricsA
LineTo
MoveToEx
SetBkMode
BitBlt
CreateCompatibleBitmap
CreatePen
SetICMMode
SelectClipRgn
GetTextExtentPointA
SetBitmapBits
Escape
CreateRectRgn
CreateBitmap
GetBitmapBits
SetDIBits
GdiSetBatchLimit
TextOutA
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CreateDiscardableBitmap
GetCurrentObject
SetMapMode
CreateDCA
CreateICA
SetWindowOrgEx
EndDoc
AbortDoc
StartDocA
EndPage
CreateEnhMetaFileA
StartPage
DeleteMetaFile
CloseMetaFile
DeleteEnhMetaFile
CloseEnhMetaFile
SetViewportOrgEx
CreateMetaFileA
GetDCOrgEx
GetClipBox
SetAbortProc
GetSystemPaletteEntries
GetPaletteEntries
SetPaletteEntries
GetClipRgn
CreateBitmapIndirect
SetBrushOrgEx
GetBkColor
CreateRectRgnIndirect
GetTextColor
GetRgnBox
CreateBrushIndirect
CombineRgn
CreateEllipticRgnIndirect
SetROP2
FillRgn
GetKerningPairsA
ExtEscape
EnumFontsA
GetTextCharset
EnumFontFamiliesExA
TextOutW
GetTextFaceA
SetRectRgn
OffsetRgn
PtInRegion
PaintRgn
UnrealizeObject
SetSystemPaletteUse
CreatePalette
AnimatePalette
FrameRgn
CreatePolygonRgn
DeleteObject
SelectObject
SetTextAlign
GetTextAlign
GetBkMode
CreateFontA
Polygon
CreatePatternBrush
RemoveFontResourceA
AddFontResourceA
RoundRect
ExtCreatePen
LineDDA
ExcludeClipRect

shlwapi

PathIsRootA
PathAppendA
PathIsUNCA
PathRemoveExtensionA
PathFindFileNameA
PathIsSameRootA
PathFindExtensionA
PathGetDriveNumberA
PathBuildRootA
PathStripToRootA
PathRemoveFileSpecA
PathAddBackslashA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

mmioCreateChunk
mciSendStringA
mciSendCommandA
mciGetErrorStringA
mmioWrite
mmioClose
mmioAscend
mmioRead
mmioDescend
mciSendCommandW
mciSendStringW
mmioOpenA
mmioOpenW

ole32

RevokeDragDrop
DoDragDrop
GetRunningObjectTable
CreateOleAdviseHolder
CoGetMalloc
WriteFmtUserTypeStg
OleIsCurrentClipboard
OleGetClipboard
OleFlushClipboard
OleSetClipboard
RegisterDragDrop
StgCreateDocfile
CoRegisterClassObject
OleSetAutoConvert
CoRevokeClassObject
OleInitialize
WriteClassStg
CreateDataAdviseHolder
CoFileTimeNow
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SetErrorInfo
SysAllocString
DispGetIDsOfNames
CreateErrorInfo
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SafeArrayDestroy
SafeArrayGetLBound
VariantClear
SafeArrayGetElement
VariantInit
SafeArrayPutElement
SafeArrayCreate
RegisterActiveObject
RevokeActiveObject
LoadRegTypeLi
LoadTypeLi
SafeArrayCopy
DispInvoke

shell32

DragAcceptFiles
SHGetFileInfoA
SHGetDesktopFolder
SHGetMalloc
SHFileOperationA
ShellExecuteA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
FindExecutableA
SHGetPathFromIDListA
SHBrowseForFolderA

ace

ord4
ord5

agm

ord2
ord4
ord3

bib

ord2
ord11
ord4

cooltype

ord54
ord20
ord24
ord21
ord99
ord109
ord46
ord45
ord72
ord42
ord78
ord43
ord28
ord27
ord26
ord2
ord6
ord7
ord85
ord9
ord8
ord93
ord4
ord84
ord3
ord60
ord35
ord50
ord11
ord23
ord51
ord89
ord88
ord87
ord86
ord12
ord53
ord52
ord17
ord55
ord40
ord39
ord38
ord49
ord31
ord30
ord41
ord33
ord29
ord16
ord19
ord68
ord67
ord66
ord97
ord32
ord59
ord106

asn.er

asn_info_0100
asn_exit
asn_init

Exports

Exports

??4ExifTagList@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 11.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 656KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Photoshop.fon
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Plug-Ins/Desktop.ini
Photoshop7/Photoshop7/Plug-Ins/File Formats/BMP.8BI
.dll windows:4 windows x86 arch:x86

b05adc151c6bcbc47ddb953b053cc2f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

plugin

InitializePIExpressDialogs
GetEOF
DeinitializePIExpressDialogs
UtilReadDescriptors
UtilWriteDescriptors
CenterWindow
HLock
PIDMWinExpressDialog
HUnlock

kernel32

OutputDebugStringA
LoadLibraryA
GetProcAddress
_llseek
GetVersion
_lread
_lwrite
FreeLibrary
LoadLibraryW
SetLastError
GetModuleFileNameW
GetModuleHandleA
GetLastError
GetModuleHandleW

user32

CheckRadioButton
CheckDlgButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
EndDialog
DialogBoxIndirectParamA
GetClientRect
GetSysColor

gdi32

SetBkMode
SetBkColor
ExtTextOutA
DeleteObject
CreateSolidBrush

msvcrt

_except_handler3

Exports

Exports

AboutDlgProc
BMPAdvancedProc
BMPProc
ENTRYPOINT1

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Plug-Ins/File Formats/Gif.8bi
.dll windows:4 windows x86 arch:x86

eb765803e106ed16b3826f8bde975513

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

plugin

DeinitializePIExpressDialogs
GetEOF
InitializePIExpressDialogs
HLock
HUnlock
PIDMWinExpressDialog
UtilReadDescriptors
UtilWriteDescriptors
CenterWindow
PIZNoteAlert

kernel32

GetLastError
GetModuleFileNameW
SetLastError
LoadLibraryA
GetProcAddress
_llseek
GetVersion
_lread
_lwrite
FreeLibrary
OutputDebugStringA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW

user32

GetClientRect
IsDlgButtonChecked
DialogBoxIndirectParamA
EndDialog
CheckRadioButton
GetSysColor

gdi32

SetBkMode
SetBkColor
ExtTextOutA
DeleteObject
CreateSolidBrush

msvcrt

_except_handler3

Exports

Exports

AboutDlgProc
ENTRYPOINT1

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Plug-Ins/File Formats/Png.8bi
.dll windows:4 windows x86 arch:x86

c0626d87222f6cb4924e16f5db3cc47d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

plugin

UtilReadDescriptors
NewPtrClear
GetFPos
PISetRect
FSRead
SetFPos
DisposePtr
PIDMWinExpressDialog
HUnlock
CenterWindow
HLock
DeinitializePIExpressDialogs
InitializePIExpressDialogs
UtilWriteDescriptors
GetEOF

kernel32

GetModuleHandleA
GetModuleFileNameW
LoadLibraryW
OutputDebugStringA
GetModuleHandleW
GetLastError
GetProcAddress
LoadLibraryA
SetLastError
GetVersion
_lread
_lwrite
FreeLibrary

user32

DialogBoxIndirectParamA
GetClientRect
CheckRadioButton
IsDlgButtonChecked
EndDialog
GetSysColor

gdi32

SetBkMode
SetBkColor
ExtTextOutA
DeleteObject
CreateSolidBrush

msvcrt

_except_handler3
free
_ftol
_CIpow
calloc

Exports

Exports

ENTRYPOINT1

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Plugin.dll
.dll windows:4 windows x86 arch:x86

352b444fdfedbe44980591c3b2142bf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetVersion
GlobalReAlloc
lstrcmpA
GetModuleFileNameW
GetTickCount
DeleteFileA
_llseek
_lread
WriteFile
_lclose
GetModuleHandleW
ResumeThread
CreateThread
CreateEventA
TerminateThread
CloseHandle
GetPrivateProfileIntA
FreeResource
LockResource
LoadResource
FindResourceA
LoadLibraryW
OutputDebugStringA
GetProcAddress
GetLastError
GetModuleHandleA
ResetEvent
SetLastError
WaitForSingleObject
GlobalUnlock
SetEvent
GlobalHandle
GlobalLock
GlobalAlloc
GlobalSize
lstrlenA
GlobalFree
GetSystemInfo

user32

GetDlgCtrlID
GetSystemMetrics
FrameRect
GetWindowRect
SetCapture
InflateRect
GetSysColor
GetSysColorBrush
IsWindowEnabled
DefWindowProcA
PeekMessageA
FillRect
GetQueueStatus
TranslateMessage
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
MessageBeep
GetWindowTextA
SetFocus
GetDlgItem
SetWindowPos
GetDesktopWindow
ClientToScreen
IsWindow
DispatchMessageA
ScreenToClient
MessageBoxA
GetActiveWindow
EndDialog
DialogBoxIndirectParamA
GetDialogBaseUnits
DrawTextA
DrawFocusRect
LoadStringA
ReleaseCapture
BeginPaint
GetDC
EndPaint
ReleaseDC
UnregisterClassA
InvalidateRect
UpdateWindow
RegisterClassA
SetRect
GetClientRect
GetWindowLongA
SetPropA
RemovePropA
GetPropA
LoadCursorA
RegisterWindowMessageA
GetAsyncKeyState
SendMessageA
MoveWindow
IntersectRect
GetCursorPos
GetParent

gdi32

DeleteObject
BitBlt
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
LineTo
MoveToEx
GetStockObject
CreatePen
ExtTextOutA
CreateSolidBrush
SetBkMode
RoundRect
SetBkColor
SetTextColor

msvcrt

strtol
_ltoa
rand
_except_handler3
strncpy

Exports

Exports

AboutDlgProc
AllocPointer
AllocSlider
AngleFromSlope
BlockMove
BlockMoveData
BufferedDraw
CalcProxyRect
CalcProxyRectCore
CenterWindow
CentreDialog
CheckProxiesSupported
DefPaintBack
DefPlotThumb
DeinitializePIExpressDialogs
DisposPtr
DisposeHandle
DisposePtr
DoYield
DragThumb
DrawSmallButton
DrawTheSmallButton
DrawTicksBack
DupHandle
EditFail
EmptyRect
FSClose
FSRead
FSWrite
FSpCreate
FSpDelete
FSpOpenDF
Fix2Frac
Fix2Long
Fix2X
FixATan2
FixDiv
FixHypot
FixMul
FixRatio
FixRound
FixSqrt
Frac2Fix
Frac2X
FracCos
FracDiv
FracHypot
FracMul
FracSin
FracSqrt
FreePointer
FreeSlider
GetDlgItemRect
GetEOF
GetFPos
GetHandleSize
GetIndString
GetIndStringPreferred
GetSliderPos
GetSliderRange
GetThumbRect
HLock
HUnlock
HandFromPtr
HostAddPIResource
HostAllocateBuffer
HostAllocateStripBuffer
HostBufferProcsAvailable
HostBufferSpace
HostCountPIResources
HostDeletePIResource
HostDisposeHandle
HostFreeBuffer
HostGetHandleSize
HostGetPIResource
HostHandleProcsAvailable
HostLockBuffer
HostLockHandle
HostNewHandle
HostResourceProcsAvailable
HostSetHandleSize
HostUnlockBuffer
HostUnlockHandle
Hypot
InitCursor
InitEditWnd
InitHypotTable
InitializePIExpressDialogs
Interpolate1D
Interpolate1DMulti
Interpolate2D
Interpolate2DMulti
InvalThumbRect
LockSliderData
Long2Fix
Long2X
LongHypot
LongMul
LongSqrt
MacToWinRect
MapRect
MemError
MoveHHi
NewCalcProxyRect
NewHandle
NewHandleClear
NewPtr
NewPtrClear
Num2Comp
NumToString
OutputMessage
PIDMDisposeDialog
PIDMExpressHandleDialog
PIDMExpressResDialog
PIDMGetControl
PIDMGetControlIndex
PIDMGetMacDialog
PIDMModalDialog
PIDMNewHandleDialog
PIDMNewResDialog
PIDMWinExpressDialog
PIExpressDialogsAvailable
PIInsetRect
PIOffsetRect
PIPtInRect
PIQuickZResToCString
PIQuickZResToPascalString
PIQuickZToCString
PIQuickZToCStringLen
PIQuickZToPascalString
PIQuickZToPascalStringLen
PISetRect
PIThreadsDoAll
PIThreadsEndThreads
PIThreadsGetNumThreads
PIThreadsGetParamsPtr
PIThreadsInit
PIThreadsStart1
PIThreadsWaitForCompletion
PIZGetIndString
PIZGetIndStringPreferred
PIZLoadString
PIZNoteAlert
PIZStopAlert
PIZToUnicodeCString
PackBits
PaintSlider
ParamText
Random
RegisterSlider
SectRect
SetFPos
SetHandleSize
SetSliderData
SetSliderFlags
SetSliderMax
SetSliderMin
SetSliderPos
SetSliderProc
SetSliderRange
SetSliderThumbOff
SetSliderThumbSize
ShortHypot
ShortMul
ShowAlert
ShowOutputBuffer
SliderWndProc
SlopeFromAngle
SnapToLogPos
TickCount
TranslatePos
TruncateFileName
UnRegisterSlider
UnlockSliderData
UnpackBits
UserChangedEditText
UserInputAvail
UtilReadDescriptors
UtilReadPlatformFilePathDescriptor
UtilReadPointDescriptor
UtilReadPointListDescriptor
UtilWriteDescriptors
UtilWriteNoDescForceUI
UtilWritePlatformFilePathDescriptor
UtilWritePointDescriptor
UtilWritePointListDescriptor
ValidateDlgLong
WAllocBuffer
WFreeBuffer
WSizeBuffer
WarnHostAdvanceStateAvailable
WarnHostBufferProcsAvailable
WarnHostHandleProcsAvailable
WarnHostResourceProcsAvailable
WinToMacRect
X2Fix
X2Frac
X2Long
map_one
map_to_logical
map_to_physical

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Psut9532.dll
.dll windows:1 windows x86 arch:x86

973aa01fab1c9402b624e30dba82b711

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt20

_chdir
memset
memcpy

kernel32

FT_Exit24
SMapLS_IP_EBP_8
K32Thk1632Epilog
K32Thk1632Prolog
lstrcatA
GetWindowsDirectoryA
SetLastError
SMapLS
SMapLS_IP_EBP_12
SMapLS_IP_EBP_20
SMapLS_IP_EBP_16
SMapLS_IP_EBP_28
FT_Exit20
SUnMapLS_IP_EBP_16
MapSLFix
MapSL
SUnMapLS_IP_EBP_12
ThunkConnect32
SUnMapLS_IP_EBP_20
SUnMapLS_IP_EBP_28
SUnMapLS_IP_EBP_8
FT_Thunk
SUnMapLS
UnMapSLFixArray
FT_Exit24
SMapLS_IP_EBP_8
K32Thk1632Epilog
K32Thk1632Prolog
lstrcatA
GetWindowsDirectoryA
SetLastError
SMapLS
SMapLS_IP_EBP_12
SMapLS_IP_EBP_20
SMapLS_IP_EBP_16
SMapLS_IP_EBP_28
FT_Exit20
SUnMapLS_IP_EBP_16
MapSLFix
MapSL
SUnMapLS_IP_EBP_12
ThunkConnect32
SUnMapLS_IP_EBP_20
SUnMapLS_IP_EBP_28
SUnMapLS_IP_EBP_8
FT_Thunk
SUnMapLS
UnMapSLFixArray

Exports

Exports

AddResource32
AllocateBuffer32
BufferSpace32
CB_Event32
CloseDriver16
CountResources32
DeleteResource32
DisplayPixels32
DisposeHandle32
FindResource16
FreeBuffer32
FreeDosMemory
FreeLibrary16
FreeResource16
GetHandleSize32
GetProcAddress16
GetResource32
HostProc32
LoadLibrary16
LoadResource16
LockBuffer32
LockHandle32
LockResource16
MemManInfo16
NewHandle32
OpenDriver16
OpenFile16
PSUTCall16BitPlugin
Progress32
SetHandleSize32
SizeofResource16
SpaceProc32
TestAbort32
UnlockBuffer32
UnlockHandle32
UnlockResource16
lclose16
sendDriverMessage16
ut16_ThunkData32
ut32_ThunkData32

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/ADMPlugin.apl
.dll windows:4 windows x86 arch:x86

7742784dbdf84dacb89c314f2d897d76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAddAtomA
IsValidCodePage
GetLocaleInfoA
GlobalAlloc
GlobalFree
GetTickCount
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetCurrentThreadId
LoadResource
LockResource
FreeResource
WideCharToMultiByte
lstrlenW
FreeLibrary
GetVersionExA
lstrlenA
FindResourceA
LoadLibraryA
GetModuleFileNameA
WaitForSingleObject
CloseHandle
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
OutputDebugStringA
GetLastError
SetLastError
OpenSemaphoreA
CreateSemaphoreA
ReleaseSemaphore
lstrcpyA
GetModuleHandleA
SetFilePointer
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
DisableThreadLibraryCalls
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetUnhandledExceptionFilter
HeapSize
GetCPInfo
LCMapStringW
LCMapStringA
GetCurrentProcess
TerminateProcess
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
GetVersion
GetCommandLineA
IsBadCodePtr
RaiseException
RtlUnwind
GetProcAddress
MultiByteToWideChar
GetLocaleInfoW
ReadFile
SetStdHandle
FlushFileBuffers

user32

GetDoubleClickTime
InflateRect
FrameRect
ChildWindowFromPointEx
GetClassNameA
DrawTextA
GetCapture
MoveWindow
PostMessageA
SetCursorPos
GetMessageA
GetAsyncKeyState
PeekMessageA
GetCursorPos
GetFocus
IsDialogMessageA
TranslateMessage
DispatchMessageA
ScreenToClient
ClientToScreen
GetSysColor
FillRect
GetSystemMenu
GetMenuItemCount
GetMenuItemID
DeleteMenu
CharLowerA
CreateWindowExA
GetDialogBaseUnits
DestroyWindow
TrackMouseEvent
SetCapture
WindowFromPoint
SetActiveWindow
IsWindowVisible
GetWindowLongA
SetWindowPos
ShowWindow
GetClientRect
SetCursor
LoadCursorA
GetActiveWindow
GetForegroundWindow
GetParent
MessageBoxExA
GetDesktopWindow
KillTimer
SetTimer
IsWindow
DefWindowProcA
SendMessageA
SetFocus
GetDC
DrawFocusRect
ReleaseDC
SystemParametersInfoA
GetWindowRect
ReleaseCapture
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetSysColorBrush
GetWindowDC
TrackPopupMenu
GetWindow
VkKeyScanA
GetSystemMetrics
MessageBoxA
MessageBeep
TrackPopupMenuEx
CreatePopupMenu
AppendMenuA
SetMenuItemBitmaps
GetNextDlgTabItem
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
CopyImage
LoadMenuA
GetSubMenu
GetMenuState
GetMenuStringA
DestroyMenu
GetCursor
PtInRect
GetWindowTextLengthA
GetWindowTextA
EnumChildWindows
DrawIconEx
CreateIconIndirect
LoadBitmapA
LoadImageA
LoadIconA
GetIconInfo
DestroyIcon
GetTopWindow
CallWindowProcA
GetUpdateRgn
BeginPaint
EndPaint
GetDlgItem
RemovePropA
SetPropA
SetWindowLongA
GetPropA
SetWindowTextA
SetForegroundWindow
IsIconic
UpdateWindow
InvalidateRect
IsWindowEnabled
EnableWindow
LoadStringA
GetKeyState

gdi32

SetWindowOrgEx
EnumFontFamiliesA
GetClipBox
AddFontResourceA
RemoveFontResourceA
GetTextExtentPointA
SelectObject
DeleteObject
CreateRectRgn
GetTextMetricsA
LineTo
MoveToEx
CreatePen
CreateSolidBrush
SetBkColor
SetTextColor
GetObjectA
GetClipRgn
GdiSetBatchLimit
SetROP2
GetStockObject
SelectClipRgn
GetRgnBox
CreatePolygonRgn
ExtSelectClipRgn
GetCurrentObject
CreateFontA
CreateFontIndirectA
Polyline
Polygon
Rectangle
Ellipse
Pie
CreateDIBitmap
GetDIBits
DeleteDC
BitBlt
CreateCompatibleDC
TextOutA
CreateBitmap
CreatePatternBrush
FrameRgn
InvertRgn
PaintRgn
CombineRgn
PtInRegion
SetTextAlign
SetBkMode
GetTextExtentPoint32A
SetStretchBltMode
StretchBlt
SetPixel
GetPixel
CreateCompatibleBitmap
CreateDIBSection
CreateRectRgnIndirect

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoInitialize

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imm32

ImmAssociateContext

Exports

Exports

PluginMainHandler
PurePrintf
PurifyAllHandlesInuse
PurifyAllInuse
PurifyAllLeaks
PurifyAssertIsReadable
PurifyAssertIsWritable
PurifyBlue
PurifyClearInuse
PurifyClearLeaks
PurifyDescribe
PurifyGreen
PurifyHeapValidate
PurifyIsInitialized
PurifyIsReadable
PurifyIsRunning
PurifyIsWritable
PurifyMarkAsInitialized
PurifyMarkAsUninitialized
PurifyMarkForNoTrap
PurifyMarkForTrap
PurifyNewHandlesInuse
PurifyNewInuse
PurifyNewLeaks
PurifyPrintf
PurifyRed
PurifySetLateDetectScanCounter
PurifySetLateDetectScanInterval
PurifyWhatColors
PurifyYellow
QuantifyAddAnnotation
QuantifyClearData
QuantifyDisableRecordingData
QuantifyIsRecordingData
QuantifyIsRunning
QuantifySaveData
QuantifyStartRecordingData
QuantifyStopRecordingData
main

Sections

.text
Size: 664KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/ADMUI3.fon
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/ASDataStream.apl
.dll windows:4 windows x86 arch:x86

dacf74e693f7b6694cee5a5528f00154

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
SizeofResource
LockResource
LoadResource
FindResourceA
FreeResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
CloseHandle
GetFileType
GetLastError
CreateFileA
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
SetHandleCount
GetStdHandle
GetLocalTime
DeleteCriticalSection
GetModuleFileNameA
RaiseException
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

user32

LoadStringA

Exports

Exports

PluginMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/Default Actions.atn
Photoshop7/Photoshop7/Required/Default Brushes.abr
Photoshop7/Photoshop7/Required/Default Contours.shc
Photoshop7/Photoshop7/Required/Default Custom Shapes.csh
Photoshop7/Photoshop7/Required/Default Gradients.grd
Photoshop7/Photoshop7/Required/Default New Doc Sizes.txt
Photoshop7/Photoshop7/Required/Default Patterns.pat
Photoshop7/Photoshop7/Required/Default Styles.asl
Photoshop7/Photoshop7/Required/Default Swatches.aco
Photoshop7/Photoshop7/Required/Default Tool Presets.tpl
Photoshop7/Photoshop7/Required/Droplet Template
Photoshop7/Photoshop7/Required/Droplet Template.exe
.exe windows:1 windows x86 arch:x86

6fc7d662a4b407051985ae21be18148c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetLastError
DeleteFileA
WriteFile
GetLocalTime
GetTimeZoneInformation

msvcrt

_mbsrchr
_mbschr

oleaut32

SysAllocString
SysAllocStringByteLen

user32

wsprintfA
MessageBoxA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 365B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/PNGIcons.apl
.dll windows:4 windows x86 arch:x86

ecadd831f1d6791dca91256246e9a969

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

PluginMain

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/PS.sif
Photoshop7/Photoshop7/Required/PhotoshopAdapter.apl
.dll windows:4 windows x86 arch:x86

f82b03a5634ab2728728d72e5d099768

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
GetProcAddress
FreeLibrary
EnumResourceNamesA
LoadLibraryExA
LockResource
SizeofResource
LoadResource
FindResourceA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetLastError
SetCurrentDirectoryA
GetCurrentDirectoryA
DeleteFileA
LoadLibraryA
GetFileSize
IsBadWritePtr
VirtualAlloc
FlushFileBuffers
RtlUnwind
RaiseException
IsBadReadPtr
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
SetUnhandledExceptionFilter
HeapReAlloc
ExitProcess
TerminateProcess
GlobalMemoryStatus
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
GetEnvironmentStrings
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
GetEnvironmentStringsW
WriteFile
IsBadCodePtr
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

LoadStringA
GetForegroundWindow

Exports

Exports

PluginMain

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/Required/TW10428.DAT
Photoshop7/Photoshop7/Shfolder.dll
.dll windows:5 windows x86 arch:x86

95f81563369971605fb978131e2f7f51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesW
EnumResourceNamesW
lstrcatA
lstrcpyA
CompareStringW
CreateDirectoryA
CreateDirectoryW
GetLastError
FindResourceExW
GetSystemDefaultLangID
GetFileAttributesA
GetFileAttributesW
GetSystemDirectoryA
GetSystemDirectoryW
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetWindowsDirectoryW
LoadResource
LockResource
lstrlenA
GetWindowsDirectoryA
ExpandEnvironmentStringsW
GetVersionExA
lstrlenW
MultiByteToWideChar
GetProcAddress
LoadLibraryA
FreeLibrary
ExpandEnvironmentStringsA
WideCharToMultiByte
lstrcpynW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
InitializeAcl
GetAce
SetFileSecurityW
AddAccessAllowedAce
RegSetValueExA
LookupAccountSidW
RegCreateKeyExA
RegOpenKeyA
RegSetValueExW
RegQueryValueExA
RegCloseKey
RegQueryValueExW

Exports

Exports

SHGetFolderPathA
SHGetFolderPathW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Photoshop7/Photoshop7/TypeLibrary.tlb
Photoshop7/photoshop 7.0序列号.txt
Photoshop7/photoshop7.0常用笔刷.zip
.zip
photoshop常用笔刷/brushes_by_mar_ka-d338ela.abr
Photoshop7/下载安装说明.txt
Photoshop7/未来软件园_百度搜索.url
.url

Sharing

General

Malware Config

Signatures

Files

1c042238f43557c055fca8642de8a074

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 156KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 30KB - Virtual size: 29KB

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 470B

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 574B

a55893145c6afc1c70bfacd8cdca52e1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Exports

Exports

Sections

.text Size: 328KB - Virtual size: 324KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 28KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 24KB - Virtual size: 21KB

.rmnet Size: 60KB - Virtual size: 60KB

877641cbd3941ae34729126753704edf

Headers

File Characteristics

Imports

kernel32

user32

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 156KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 30KB - Virtual size: 29KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 470B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 574B

.text
Size: 328KB - Virtual size: 324KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 28KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 24KB - Virtual size: 21KB

.rmnet
Size: 60KB - Virtual size: 60KB

.text
Size: 644KB - Virtual size: 643KB

.rdata
Size: 128KB - Virtual size: 124KB

.data
Size: 64KB - Virtual size: 217KB

.rsrc
Size: 4KB - Virtual size: 976B

.reloc
Size: 64KB - Virtual size: 61KB

.rmnet
Size: 60KB - Virtual size: 60KB

.text
Size: 596KB - Virtual size: 594KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 32KB - Virtual size: 37KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 20KB - Virtual size: 18KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 12KB - Virtual size: 10KB

.rmnet
Size: 60KB - Virtual size: 60KB

.text
Size: 988KB - Virtual size: 984KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 288KB - Virtual size: 337KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 76KB - Virtual size: 75KB

.rmnet
Size: 60KB - Virtual size: 60KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 324KB - Virtual size: 390KB

.rsrc
Size: 640KB - Virtual size: 637KB