NkPostbote3.dll

Description: Storage Server Plugin

Authors: Copyright 2007 by Nikon Corporation. All rights reserved.

Version: 1.14.0.3000

Architecture: 64-bit

Operating System: Windows

SHA256: c4da5e61c637b2b87be8f499bd853797

File Size: 167.3 KB

Uploaded At: Dec. 1, 2025, 2:52 p.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • Close (Ordinal: 1, Address: 0x18b0)
  • Initialize (Ordinal: 2, Address: 0x4020)
  • SetDisconnectCallback (Ordinal: 3, Address: 0x2420)
  • StSvrPlCreatePlugin (Ordinal: 4, Address: 0x4200)
  • TransferAccept (Ordinal: 5, Address: 0x1990)
  • TransferFile (Ordinal: 6, Address: 0x1fd0)
  • ValidateJob (Ordinal: 7, Address: 0x24c0)

Imported DLLs & Functions

ADVAPI32.dll
  • CreateProcessAsUserW (Address: 0x180019050)
  • DuplicateTokenEx (Address: 0x180019010)
  • ImpersonateLoggedOnUser (Address: 0x180019038)
  • OpenThreadToken (Address: 0x180019008)
  • RegCloseKey (Address: 0x180019018)
  • RegOpenCurrentUser (Address: 0x180019000)
  • RegOpenKeyExW (Address: 0x180019020)
  • RegQueryValueExW (Address: 0x180019028)
  • RegSetValueExW (Address: 0x180019030)
  • RevertToSelf (Address: 0x180019040)
  • SetNamedSecurityInfoW (Address: 0x180019048)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x180019488)
  • atoi (Address: 0x180019480)
  • atol (Address: 0x180019490)
  • mbstowcs_s (Address: 0x1800194a0)
  • wcstombs_s (Address: 0x180019498)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _access (Address: 0x1800194b8)
  • _waccess (Address: 0x1800194b0)
api-ms-win-crt-heap-l1-1-0.dll
  • free (Address: 0x1800194c8)
  • malloc (Address: 0x1800194d0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthread (Address: 0x1800194e0)
  • _cexit (Address: 0x180019530)
  • _configure_narrow_argv (Address: 0x1800194f0)
  • _crt_atexit (Address: 0x180019538)
  • _execute_onexit_table (Address: 0x180019508)
  • _initialize_narrow_environment (Address: 0x1800194e8)
  • _initialize_onexit_table (Address: 0x180019540)
  • _initterm (Address: 0x180019520)
  • _initterm_e (Address: 0x180019518)
  • _invalid_parameter_noinfo_noreturn (Address: 0x180019510)
  • _register_onexit_function (Address: 0x180019500)
  • _seh_filter_dll (Address: 0x1800194f8)
  • terminate (Address: 0x180019528)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsprintf_s (Address: 0x180019550)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsnicmp (Address: 0x180019568)
  • wcscat_s (Address: 0x180019560)
  • wcscpy_s (Address: 0x180019578)
  • wcsncpy_s (Address: 0x180019570)
KERNEL32.dll
  • CloseHandle (Address: 0x180019140)
  • CreateDirectoryW (Address: 0x1800191b0)
  • CreateEventW (Address: 0x180019098)
  • CreateProcessW (Address: 0x180019118)
  • DeleteCriticalSection (Address: 0x180019068)
  • EnterCriticalSection (Address: 0x180019078)
  • FreeLibrary (Address: 0x1800190a0)
  • GetCurrentProcess (Address: 0x1800191a8)
  • GetCurrentProcessId (Address: 0x180019180)
  • GetCurrentThread (Address: 0x180019120)
  • GetCurrentThreadId (Address: 0x180019178)
  • GetDiskFreeSpaceExW (Address: 0x180019150)
  • GetFileAttributesW (Address: 0x180019148)
  • GetLastError (Address: 0x180019130)
  • GetModuleFileNameW (Address: 0x180019108)
  • GetModuleHandleW (Address: 0x180019100)
  • GetProcAddress (Address: 0x1800190f8)
  • GetSystemTimeAsFileTime (Address: 0x180019170)
  • InitializeCriticalSection (Address: 0x180019070)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180019060)
  • InitializeSListHead (Address: 0x180019168)
  • IsDebuggerPresent (Address: 0x180019190)
  • IsProcessorFeaturePresent (Address: 0x180019198)
  • LeaveCriticalSection (Address: 0x180019080)
  • LocalAlloc (Address: 0x1800190b0)
  • LocalFree (Address: 0x180019158)
  • OpenProcess (Address: 0x180019110)
  • OutputDebugStringW (Address: 0x180019138)
  • QueryPerformanceCounter (Address: 0x180019188)
  • RemoveDirectoryW (Address: 0x1800190f0)
  • RtlCaptureContext (Address: 0x1800190c8)
  • RtlLookupFunctionEntry (Address: 0x1800190d0)
  • RtlVirtualUnwind (Address: 0x1800190d8)
  • SetEvent (Address: 0x180019088)
  • SetFileAttributesW (Address: 0x1800190a8)
  • SetUnhandledExceptionFilter (Address: 0x180019160)
  • Sleep (Address: 0x180019128)
  • TerminateProcess (Address: 0x1800191a0)
  • UnhandledExceptionFilter (Address: 0x1800190e0)
  • VerifyVersionInfoW (Address: 0x1800190c0)
  • VerSetConditionMask (Address: 0x1800190b8)
  • WaitForSingleObject (Address: 0x180019090)
  • WTSGetActiveConsoleSessionId (Address: 0x1800190e8)
mfc140u.dll
  • (Address: 0x180019768)
  • (Address: 0x180019770)
  • (Address: 0x180019778)
  • (Address: 0x180019780)
  • (Address: 0x180019788)
  • (Address: 0x180019790)
  • (Address: 0x180019798)
  • (Address: 0x1800197a0)
  • (Address: 0x1800197a8)
  • (Address: 0x1800197b0)
  • (Address: 0x1800197b8)
  • (Address: 0x1800197c0)
  • (Address: 0x1800197c8)
  • (Address: 0x1800197d0)
  • (Address: 0x1800197d8)
  • (Address: 0x1800197e0)
  • (Address: 0x1800197e8)
  • (Address: 0x1800197f0)
  • (Address: 0x1800197f8)
  • (Address: 0x180019800)
  • (Address: 0x180019808)
  • (Address: 0x180019810)
  • (Address: 0x180019818)
  • (Address: 0x180019820)
  • (Address: 0x180019828)
  • (Address: 0x180019830)
  • (Address: 0x180019838)
  • (Address: 0x180019840)
  • (Address: 0x180019848)
  • (Address: 0x180019850)
  • (Address: 0x180019858)
  • (Address: 0x180019860)
  • (Address: 0x180019868)
  • (Address: 0x180019870)
  • (Address: 0x180019878)
  • (Address: 0x180019880)
  • (Address: 0x180019888)
  • (Address: 0x180019890)
  • (Address: 0x180019898)
  • (Address: 0x180019588)
  • (Address: 0x180019590)
  • (Address: 0x180019598)
  • (Address: 0x1800195a0)
  • (Address: 0x1800195a8)
  • (Address: 0x1800195b0)
  • (Address: 0x1800195b8)
  • (Address: 0x1800195c0)
  • (Address: 0x1800195c8)
  • (Address: 0x1800195d0)
  • (Address: 0x1800195d8)
  • (Address: 0x1800195e0)
  • (Address: 0x1800195e8)
  • (Address: 0x1800195f0)
  • (Address: 0x1800195f8)
  • (Address: 0x180019600)
  • (Address: 0x180019608)
  • (Address: 0x180019610)
  • (Address: 0x180019618)
  • (Address: 0x180019620)
  • (Address: 0x180019628)
  • (Address: 0x180019630)
  • (Address: 0x180019638)
  • (Address: 0x180019640)
  • (Address: 0x180019648)
  • (Address: 0x180019650)
  • (Address: 0x180019658)
  • (Address: 0x180019660)
  • (Address: 0x180019668)
  • (Address: 0x180019670)
  • (Address: 0x180019678)
  • (Address: 0x180019680)
  • (Address: 0x180019688)
  • (Address: 0x180019690)
  • (Address: 0x180019698)
  • (Address: 0x1800196a0)
  • (Address: 0x1800196a8)
  • (Address: 0x1800196b0)
  • (Address: 0x1800196b8)
  • (Address: 0x1800196c0)
  • (Address: 0x1800196c8)
  • (Address: 0x1800196d0)
  • (Address: 0x1800196d8)
  • (Address: 0x1800196e0)
  • (Address: 0x1800196e8)
  • (Address: 0x1800196f0)
  • (Address: 0x1800196f8)
  • (Address: 0x180019700)
  • (Address: 0x180019708)
  • (Address: 0x180019710)
  • (Address: 0x180019718)
  • (Address: 0x180019720)
  • (Address: 0x180019728)
  • (Address: 0x180019730)
  • (Address: 0x180019738)
  • (Address: 0x180019740)
  • (Address: 0x180019748)
  • (Address: 0x180019750)
  • (Address: 0x180019758)
  • (Address: 0x180019760)
MSVCP140.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800191c8)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800191c0)
NkPostboteRTL3.dll
  • ??0CNkvFileHandle@@QEAA@AEBVCNkvFilePath@@@Z (Address: 0x180019228)
  • ??0CNkvFileHandle@@QEAA@XZ (Address: 0x1800191d8)
  • ??0CNkvFilePath@@QEAA@AEBV0@@Z (Address: 0x1800191f8)
  • ??0CNkvFilePath@@QEAA@XZ (Address: 0x180019320)
  • ??0CNkvStringData@@QEAA@AEBUNkvCharPlatform@@@Z (Address: 0x180019218)
  • ??0CNkvStringData@@QEAA@AEBV0@@Z (Address: 0x180019378)
  • ??0CNkvStringData@@QEAA@XZ (Address: 0x180019388)
  • ??0CNkvTime@@QEAA@AEBV0@@Z (Address: 0x1800192f0)
  • ??0CNkvTime@@QEAA@XZ (Address: 0x180019300)
  • ??0NkvCharPlatform@@QEAA@PEB_W@Z (Address: 0x180019280)
  • ??0NkvCharUnicode@@QEAA@PEB_W@Z (Address: 0x180019398)
  • ??1CNkvFileHandle@@QEAA@XZ (Address: 0x180019230)
  • ??1CNkvFilePath@@QEAA@XZ (Address: 0x180019318)
  • ??1CNkvStringData@@QEAA@XZ (Address: 0x180019380)
  • ??1CNkvTime@@QEAA@XZ (Address: 0x1800192f8)
  • ??4CNkvStringData@@QEAAAEAV0@AEBV0@@Z (Address: 0x180019370)
  • ??4CNkvTime@@QEAAAEBV0@AEBV0@@Z (Address: 0x180019298)
  • ??BCNkvTime@@QEBA_KXZ (Address: 0x1800192e8)
  • ?ConvertVirtualPath@CNkvFileHandle@@QEBAKPEAV?$vector@VCNkvFilePath@@V?$allocator@VCNkvFilePath@@@std@@@std@@@Z (Address: 0x1800191e8)
  • ?GetFullPath@CNkvFilePath@@QEBAKPEAVCNkvStringData@@@Z (Address: 0x180019308)
  • ?GetLengthByteSystemEncoding@CNkvStringData@@QEBA_KXZ (Address: 0x180019358)
  • ?GetLengthChar@CNkvStringData@@QEBA_KXZ (Address: 0x180019350)
  • ?GetPtrPlatform@CNkvStringData@@QEBAPEB_WXZ (Address: 0x180019360)
  • ?GetPtrSystemEncoding@CNkvStringData@@QEBAPEBDXZ (Address: 0x180019368)
  • ?GetTickCount@CNkvTime@@QEAAKXZ (Address: 0x1800191e0)
  • ?Initialize@CNkvFilePath@@QEAAKPEFBU_ITEMIDLIST@@@Z (Address: 0x1800191f0)
  • ?Initialize@CNkvFilePath@@UEAAKPEBVCNkvStringData@@@Z (Address: 0x180019310)
  • ?Initialize@CNkvTime@@QEAAKKKKKKKK@Z (Address: 0x180019208)
  • ?InitWithChar@CNkvStringData@@QEAAKAEBUNkvCharPlatform@@@Z (Address: 0x180019390)
  • ?InitWithChar@CNkvStringData@@QEAAKAEBUNkvCharUnicode@@@Z (Address: 0x180019348)
  • ?InitWithSystemEncoding@CNkvStringData@@QEAAKPEBD@Z (Address: 0x180019340)
  • ?InitWithUnicode@CNkvStringData@@QEAAKPEBG@Z (Address: 0x180019338)
  • ?IsEmpty@CNkvStringData@@QEBA_NXZ (Address: 0x1800192b0)
  • ?IsExist@CNkvFileHandle@@QEBA_NXZ (Address: 0x180019220)
  • ?Mid@CNkvStringData@@QEBA?AV1@_K0@Z (Address: 0x180019330)
  • ?NkvCopyFileOverwrite@@YAKAEBVCNkvFilePath@@0PEBVCNkvStringData@@PEAV1@@Z (Address: 0x1800192c8)
  • ?NkvCreateFolder@@YAKAEBVCNkvFilePath@@AEBVCNkvStringData@@PEAV1@@Z (Address: 0x180019238)
  • ?NkvDeleteFile@@YAKAEBVCNkvFilePath@@@Z (Address: 0x1800192b8)
  • ?NkvGetFileNameFromPath@@YAKAEBVCNkvStringData@@PEAV1@@Z (Address: 0x180019240)
  • ?NkvGetParentFolder@@YAKAEBVCNkvStringData@@PEAV1@@Z (Address: 0x180019270)
  • ?NkvIsWritableFolder@@YA_NAEBVCNkvStringData@@@Z (Address: 0x180019258)
  • ?NkvMakeFilePath@@YAKAEBVCNkvFilePath@@AEBVCNkvStringData@@PEAV1@@Z (Address: 0x180019268)
  • ?NkvMakeFilePath@@YAKAEBVCNkvStringData@@0PEAV1@@Z (Address: 0x180019260)
  • ?NkvMoveFile@@YAKAEBVCNkvFilePath@@0AEBVCNkvStringData@@PEAV1@@Z (Address: 0x180019200)
  • ?NkvMoveFileOverwrite@@YAKAEBVCNkvFilePath@@0PEBVCNkvStringData@@PEAV1@@Z (Address: 0x1800192c0)
  • ?NkvPathAddBackslash@@YA?AVCNkvStringData@@AEBV1@@Z (Address: 0x1800192d0)
  • ?NkvPathAddBackslash@@YA?AVCNkvStringData@@AEBVCNkvFilePath@@@Z (Address: 0x180019248)
  • ?NkvPathFindExtension@@YA?AVCNkvStringData@@AEBV1@_N@Z (Address: 0x180019250)
  • ?NkvPathFindExtension@@YA?AVCNkvStringData@@AEBVCNkvFilePath@@_N@Z (Address: 0x1800192e0)
  • ?NkvPathFindFileName@@YA?AVCNkvStringData@@AEBV1@_N@Z (Address: 0x180019290)
  • ?NkvPathFindFileName@@YA?AVCNkvStringData@@AEBVCNkvFilePath@@_N@Z (Address: 0x1800192d8)
  • ?NkvPathRemoveBackslash@@YA?AVCNkvStringData@@AEBV1@@Z (Address: 0x180019288)
  • ?NkvStringDataCat@@YA?AVCNkvStringData@@AEBV1@0@Z (Address: 0x180019328)
  • ?NkvStringDataCmp@@YAHAEBVCNkvStringData@@0@Z (Address: 0x1800192a8)
  • ?NkvStringDataReplace@@YA?AVCNkvStringData@@AEBV1@00@Z (Address: 0x1800192a0)
  • ?NkvStringDataStr@@YA?AVCNkvStringData@@AEBV1@0@Z (Address: 0x180019210)
  • ?NkvStringDataTrimRight@@YA?AVCNkvStringData@@AEBV1@0@Z (Address: 0x180019278)
ole32.dll
  • CoInitialize (Address: 0x1800198b0)
  • CoUninitialize (Address: 0x1800198a8)
PSAPI.DLL
  • EnumProcesses (Address: 0x1800193a8)
  • EnumProcessModules (Address: 0x1800193b8)
  • GetModuleBaseNameW (Address: 0x1800193b0)
SHELL32.dll
  • SHGetMalloc (Address: 0x1800193d8)
  • SHGetSpecialFolderLocation (Address: 0x1800193d0)
  • SHGetSpecialFolderPathW (Address: 0x1800193c8)
USER32.dll
  • LoadStringW (Address: 0x1800193e8)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x180019400)
  • DestroyEnvironmentBlock (Address: 0x1800193f8)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180019418)
  • __CxxFrameHandler3 (Address: 0x180019438)
  • __std_terminate (Address: 0x180019428)
  • __std_type_info_destroy_list (Address: 0x180019420)
  • _CxxThrowException (Address: 0x180019430)
  • _purecall (Address: 0x180019458)
  • memcmp (Address: 0x180019410)
  • memcpy (Address: 0x180019440)
  • memmove (Address: 0x180019448)
  • memset (Address: 0x180019450)
WTSAPI32.dll
  • WTSEnumerateSessionsW (Address: 0x180019468)
  • WTSQueryUserToken (Address: 0x180019470)