DTS X Sound[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

DTS X Sound.rar
Size

26.5MB
MD5

9bf532a75bb75ec3eb901800a6d8b314
SHA1

b5395470451293167a6077e7dc489bb1102d5abb
SHA256

b887d2e55c3abeae7aef4f16a7cbc2f71f386bb428b44dc70018867aafe8798a
SHA512

ab83908194ecfaac6d0b0c254f8907d34f780a04522cf8ba4bddf06f1dbb0b3990fe894921d88df388c0b6804147a3957f03ae5cfbd3c65b54771e30c44cdbe8
SSDEEP

786432:IDUUwU1jmlF7AvzNYNgtZW8C85qwvwk63YZJasNTDlmX:UUUwUvLabaV4kEin/wX

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack003/sl3apo32.dll
unpack003/sl3apo64.dll
unpack003/slcnt32.dll
unpack003/slcnt64.dll
unpack003/sltech32.dll
unpack003/sltech64.dll
unpack004/sl3apo32.dll
unpack004/sl3apo64.dll
unpack004/slcnt32.dll
unpack004/slcnt64.dll
unpack004/sltech32.dll
unpack004/sltech64.dll

Files

DTS X Sound.rar
.rar
Application setup/DTS AUDIO SETUP.zip
.zip
DTS_APO_GUI_Win32-64_Installer.exe
.exe windows:5 windows x86 arch:x86

d4fe8eec31ba44b37546499596e74621

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0e:5c:10:23:18:0a:1e:44:f1:48:bb:bc:52:9f:55:3e
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30/01/2015, 00:00

Not After

07/02/2018, 12:00

Subject

CN=DTS\, Inc.,O=DTS\, Inc.,L=Calabasas,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:2e:1d:5f:65:0d:f7:c5:c2:1b:99:f6:b3:b6:66:58:b6:6f:1e:16:fc:e4:3c:20:b7:19:72:78:17:de:bb:be
Signer

Actual PE Digest

93:2e:1d:5f:65:0d:f7:c5:c2:1b:99:f6:b3:b6:66:58:b6:6f:1e:16:fc:e4:3c:20:b7:19:72:78:17:de:bb:be

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comctl32

ord17

kernel32

LoadLibraryW
GetModuleHandleW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
FlushFileBuffers
SetEndOfFile
VirtualQuery
lstrcpyA
IsBadReadPtr
GetDiskFreeSpaceW
GetDriveTypeW
GetExitCodeProcess
GetCurrentThread
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GetProcAddress
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
CreateEventW
QueryPerformanceFrequency
ReadConsoleW
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetTempFileNameW
SetConsoleCtrlHandler
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
FatalAppExitA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
HeapReAlloc
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetCPInfo
GetOEMCP
IsValidCodePage
GetCurrentThreadId
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetStdHandle
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
lstrcpynA
LocalAlloc
QueryPerformanceCounter
SearchPathW
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
VirtualProtect
GetCurrentProcessId
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
FindResourceExW
GetLastError
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
lstrcpyW
GetWindowsDirectoryW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
SetFilePointer
ReadFile
WideCharToMultiByte
GetEnvironmentVariableW
SetFileTime
GetFileTime
OpenProcess
GetProcessTimes
LCMapStringW
DecodePointer
EncodePointer
MultiByteToWideChar
lstrlenA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CloseHandle
GetFileSize
CreateFileW
SetLastError
GetConsoleCP

user32

DefWindowProcW
PostMessageW
DispatchMessageW
PostQuitMessage
RegisterClassW
TranslateMessage
GetMessageW
CharUpperW
KillTimer
SetTimer
GetDC
CharPrevW
SendDlgItemMessageW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
IntersectRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
ExitWindowsEx
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
CreateWindowExW

gdi32

GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateFontW
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject
CreatePalette
GetSystemPaletteEntries
RealizePalette
SelectPalette
GetDIBColorTable
CreateHalftonePalette
UnrealizeObject
TranslateCharsetInfo
CreateSolidBrush

advapi32

RegCloseKey
CryptSignHashW
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptVerifySignatureW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegEnumValueW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW

shell32

SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
SHGetMalloc

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CreateItemMoniker
GetRunningObjectTable
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
ProgIDFromCLSID
CoUninitialize
CoInitializeSecurity
CoInitialize

oleaut32

LoadTypeLi
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantClear
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
RegisterTypeLi
SetErrorInfo
CreateErrorInfo

crypt32

CryptAcquireCertificatePrivateKey
CryptImportPublicKeyInfo
PFXImportCertStore
CertSaveStore
CertOpenStore
CertFindCertificateInStore
CertCompareCertificate
CertOpenSystemStoreW
CertGetIssuerCertificateFromStore
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertAddCertificateContextToStore
CertEnumCertificatesInStore

rpcrt4

UuidCreate
UuidToStringW
UuidFromStringW
RpcStringFreeW

Sections

.text
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DTS_APO_GUI_readme.txt
silentinstall.bat
.bat .vbs
Drivers for Windows/Driver for windows 7.zip
.zip
hdaudio.inf
sl3apo32.dll
.dll regsvr32 windows:6 windows x86 arch:x86

e65d8af8d041f3bf1f1af21538a8805c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\sluapo32.pdb

Imports

kernel32

WaitForSingleObject
WaitForMultipleObjects
TerminateThread
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
ReadFile
GetOverlappedResult
WriteFile
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
DecodePointer
EncodePointer
DuplicateHandle
GetCurrentProcess
GetThreadPriority
GetCurrentThread
SetThreadPriority
GetProcessHeap
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
ResetEvent
OutputDebugStringW
SetEvent
InitializeCriticalSection
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
OutputDebugStringA
GetFileInformationByHandle
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryExW
SetEndOfFile
WriteConsoleW
SignalObjectAndWait
SetStdHandle
FlushFileBuffers
GetConsoleCP
UnregisterWait
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
HeapSize
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetStdHandle
IsWow64Process
GetSystemDirectoryW
OpenMutexW
ReleaseMutex
Sleep
LoadLibraryW
DeviceIoControl
GetNativeSystemInfo
SetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
GetStringTypeW
InterlockedExchange
GetSystemTimeAsFileTime
TlsGetValue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
TlsSetValue
CreateTimerQueue
CreateTimerQueueTimer
IsDebuggerPresent
CreateThread
ExitThread
GetCommandLineA
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InitializeSListHead
GetTickCount
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect

user32

wsprintfW
CharNextW

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyExW
RegNotifyChangeKeyValue
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

ole32

CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
CoUninitialize
PropVariantClear
CoInitializeEx
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

shlwapi

PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW

msdmo

MoFreeMediaType
MoCreateMediaType

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RT_DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sl3apo64.dll
.dll regsvr32 windows:6 windows x64 arch:x64

aa3fadef3bccb4eeefe0e8f775143a1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\sluapo64.pdb

Imports

kernel32

WaitForSingleObject
WaitForMultipleObjects
TerminateThread
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
ReadFile
GetOverlappedResult
WriteFile
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
DecodePointer
EncodePointer
DuplicateHandle
GetCurrentProcess
GetThreadPriority
GetCurrentThread
SetThreadPriority
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
ResetEvent
OutputDebugStringW
SetEvent
InitializeCriticalSection
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
OutputDebugStringA
GetFileInformationByHandle
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryExW
SetEndOfFile
WriteConsoleW
SignalObjectAndWait
SetStdHandle
FlushFileBuffers
GetConsoleCP
UnregisterWait
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
HeapSize
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetStdHandle
IsWow64Process
GetSystemDirectoryW
OpenMutexW
ReleaseMutex
Sleep
LoadLibraryW
DeviceIoControl
SetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
GetStringTypeW
GetSystemTimeAsFileTime
TlsGetValue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
TlsSetValue
RtlPcToFileHeader
CreateTimerQueue
CreateTimerQueueTimer
IsDebuggerPresent
CreateThread
ExitThread
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InitializeSListHead
GetTickCount
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect

user32

wsprintfW
CharNextW

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyExW
RegNotifyChangeKeyValue
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

ole32

CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
CoUninitialize
PropVariantClear
CoInitializeEx
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

shlwapi

PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW

msdmo

MoFreeMediaType
MoCreateMediaType

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RT_DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slcnt32.dll
.dll regsvr32 windows:6 windows x86 arch:x86

7de8daff2fcd07f0f027804733e1f017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\slcnt32.pdb

Imports

kernel32

EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
DeviceIoControl
CreateFileW
OpenEventW
SetEvent
CloseHandle
MultiByteToWideChar
FindResourceW
lstrcmpiW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
InterlockedCompareExchange
SignalObjectAndWait
SetEndOfFile
UnregisterWait
GetThreadPriority
WriteConsoleW
SetStdHandle
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetTickCount
SetThreadPriority
FreeLibrary
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
OutputDebugStringW
OutputDebugStringA
GetModuleHandleA
FreeLibraryAndExitThread
CreateEventW
ResetEvent
TerminateThread
Sleep
GetCurrentProcess
IsWow64Process
GetSystemDirectoryW
WaitForMultipleObjects
InitializeCriticalSection
LoadLibraryW
GetNativeSystemInfo
DuplicateHandle
SetLastError
ReadFile
VerSetConditionMask
VerifyVersionInfoW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
CreateThread
ExitThread
GetCPInfo
TlsGetValue
CreateTimerQueueTimer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
HeapReAlloc
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadConsoleW
SetFilePointer
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes

user32

wsprintfW
CharNextW

advapi32

RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegQueryValueExW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CLSIDFromString
PropVariantClear
CoInitialize

oleaut32

SysStringByteLen
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarBstrCmp
VariantClear
SafeArrayGetVartype
SafeArrayUnlock

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slcnt64.dll
.dll regsvr32 windows:6 windows x64 arch:x64

1aa7266a411b7527a1b8d8bd1a785138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\slcnt64.pdb

Imports

kernel32

EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
DeviceIoControl
CreateFileW
OpenEventW
SetEvent
CloseHandle
InitializeCriticalSectionEx
MultiByteToWideChar
FindResourceW
lstrcmpiW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
SignalObjectAndWait
SetEndOfFile
UnregisterWait
GetThreadPriority
WriteConsoleW
SetStdHandle
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetTickCount
SetThreadPriority
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
OutputDebugStringW
OutputDebugStringA
GetThreadTimes
SwitchToThread
CreateEventW
ResetEvent
TerminateThread
Sleep
GetCurrentProcess
IsWow64Process
GetSystemDirectoryW
WaitForMultipleObjects
InitializeCriticalSection
LoadLibraryW
DuplicateHandle
SetLastError
ReadFile
VerSetConditionMask
VerifyVersionInfoW
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
CreateThread
ExitThread
GetCPInfo
TlsGetValue
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
HeapReAlloc
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadConsoleW
SetFilePointer
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask

user32

wsprintfW
CharNextW

advapi32

RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegQueryValueExW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CLSIDFromString
PropVariantClear
CoInitialize

oleaut32

SysStringByteLen
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarBstrCmp
VariantClear
SafeArrayGetVartype
SafeArrayUnlock

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slconfig.xml
sltech32.dll
.dll windows:6 windows x86 arch:x86

f47c569937bb3c2e6fabbb492de453ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\sltech32.pdb

Imports

kernel32

OutputDebugStringW
OutputDebugStringA
InitializeCriticalSection
SetEndOfFile
SetFilePointer
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryExW
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadFile
ReadConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
InterlockedCompareExchange

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

Exports

Exports

SRSTechCreateProcess
SRSTechDestroyProcess
SRSTechEnumProcesses

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sltech64.dll
.dll windows:6 windows x64 arch:x64

dcf74895d751a0b67e59f73096c78b6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\sltech64.pdb

Imports

kernel32

OutputDebugStringW
OutputDebugStringA
SetEndOfFile
SetFilePointer
CloseHandle
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
GetLastError
HeapFree
HeapAlloc
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryExW
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadFile
ReadConsoleW
FlushFileBuffers
CreateFileW
InitializeCriticalSection

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

Exports

Exports

SRSTechCreateProcess
SRSTechDestroyProcess
SRSTechEnumProcesses

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers for Windows/Drivers for windows 8,8.1,10.zip
.zip
hdaudio.inf
sl3apo32.dll
.dll regsvr32 windows:6 windows x86 arch:x86

e65d8af8d041f3bf1f1af21538a8805c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\sluapo32.pdb

Imports

kernel32

WaitForSingleObject
WaitForMultipleObjects
TerminateThread
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
ReadFile
GetOverlappedResult
WriteFile
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
DecodePointer
EncodePointer
DuplicateHandle
GetCurrentProcess
GetThreadPriority
GetCurrentThread
SetThreadPriority
GetProcessHeap
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
ResetEvent
OutputDebugStringW
SetEvent
InitializeCriticalSection
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
OutputDebugStringA
GetFileInformationByHandle
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryExW
SetEndOfFile
WriteConsoleW
SignalObjectAndWait
SetStdHandle
FlushFileBuffers
GetConsoleCP
UnregisterWait
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
HeapSize
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetStdHandle
IsWow64Process
GetSystemDirectoryW
OpenMutexW
ReleaseMutex
Sleep
LoadLibraryW
DeviceIoControl
GetNativeSystemInfo
SetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
GetStringTypeW
InterlockedExchange
GetSystemTimeAsFileTime
TlsGetValue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
TlsSetValue
CreateTimerQueue
CreateTimerQueueTimer
IsDebuggerPresent
CreateThread
ExitThread
GetCommandLineA
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InitializeSListHead
GetTickCount
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect

user32

wsprintfW
CharNextW

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyExW
RegNotifyChangeKeyValue
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

ole32

CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
CoUninitialize
PropVariantClear
CoInitializeEx
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

shlwapi

PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW

msdmo

MoFreeMediaType
MoCreateMediaType

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RT_DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sl3apo64.dll
.dll regsvr32 windows:6 windows x64 arch:x64

aa3fadef3bccb4eeefe0e8f775143a1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\sluapo64.pdb

Imports

kernel32

WaitForSingleObject
WaitForMultipleObjects
TerminateThread
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
ReadFile
GetOverlappedResult
WriteFile
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
DecodePointer
EncodePointer
DuplicateHandle
GetCurrentProcess
GetThreadPriority
GetCurrentThread
SetThreadPriority
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
ResetEvent
OutputDebugStringW
SetEvent
InitializeCriticalSection
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
OutputDebugStringA
GetFileInformationByHandle
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryExW
SetEndOfFile
WriteConsoleW
SignalObjectAndWait
SetStdHandle
FlushFileBuffers
GetConsoleCP
UnregisterWait
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
HeapSize
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetStdHandle
IsWow64Process
GetSystemDirectoryW
OpenMutexW
ReleaseMutex
Sleep
LoadLibraryW
DeviceIoControl
SetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
GetStringTypeW
GetSystemTimeAsFileTime
TlsGetValue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
TlsSetValue
RtlPcToFileHeader
CreateTimerQueue
CreateTimerQueueTimer
IsDebuggerPresent
CreateThread
ExitThread
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InitializeSListHead
GetTickCount
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect

user32

wsprintfW
CharNextW

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyExW
RegNotifyChangeKeyValue
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

ole32

CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
CoUninitialize
PropVariantClear
CoInitializeEx
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

shlwapi

PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW

msdmo

MoFreeMediaType
MoCreateMediaType

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RT_DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slcnt32.dll
.dll regsvr32 windows:6 windows x86 arch:x86

7de8daff2fcd07f0f027804733e1f017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\slcnt32.pdb

Imports

kernel32

EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
DeviceIoControl
CreateFileW
OpenEventW
SetEvent
CloseHandle
MultiByteToWideChar
FindResourceW
lstrcmpiW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
InterlockedCompareExchange
SignalObjectAndWait
SetEndOfFile
UnregisterWait
GetThreadPriority
WriteConsoleW
SetStdHandle
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetTickCount
SetThreadPriority
FreeLibrary
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
OutputDebugStringW
OutputDebugStringA
GetModuleHandleA
FreeLibraryAndExitThread
CreateEventW
ResetEvent
TerminateThread
Sleep
GetCurrentProcess
IsWow64Process
GetSystemDirectoryW
WaitForMultipleObjects
InitializeCriticalSection
LoadLibraryW
GetNativeSystemInfo
DuplicateHandle
SetLastError
ReadFile
VerSetConditionMask
VerifyVersionInfoW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
CreateThread
ExitThread
GetCPInfo
TlsGetValue
CreateTimerQueueTimer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
HeapReAlloc
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadConsoleW
SetFilePointer
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes

user32

wsprintfW
CharNextW

advapi32

RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegQueryValueExW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CLSIDFromString
PropVariantClear
CoInitialize

oleaut32

SysStringByteLen
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarBstrCmp
VariantClear
SafeArrayGetVartype
SafeArrayUnlock

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slcnt64.dll
.dll regsvr32 windows:6 windows x64 arch:x64

1aa7266a411b7527a1b8d8bd1a785138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\slcnt64.pdb

Imports

kernel32

EncodePointer
DecodePointer
GetThreadLocale
SetThreadLocale
DeviceIoControl
CreateFileW
OpenEventW
SetEvent
CloseHandle
InitializeCriticalSectionEx
MultiByteToWideChar
FindResourceW
lstrcmpiW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
SignalObjectAndWait
SetEndOfFile
UnregisterWait
GetThreadPriority
WriteConsoleW
SetStdHandle
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetTickCount
SetThreadPriority
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
OutputDebugStringW
OutputDebugStringA
GetThreadTimes
SwitchToThread
CreateEventW
ResetEvent
TerminateThread
Sleep
GetCurrentProcess
IsWow64Process
GetSystemDirectoryW
WaitForMultipleObjects
InitializeCriticalSection
LoadLibraryW
DuplicateHandle
SetLastError
ReadFile
VerSetConditionMask
VerifyVersionInfoW
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
CreateThread
ExitThread
GetCPInfo
TlsGetValue
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
HeapReAlloc
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadConsoleW
SetFilePointer
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask

user32

wsprintfW
CharNextW

advapi32

RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegQueryValueExW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CLSIDFromString
PropVariantClear
CoInitialize

oleaut32

SysStringByteLen
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarBstrCmp
VariantClear
SafeArrayGetVartype
SafeArrayUnlock

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

SHGetKnownFolderPath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slconfig.xml
sltech32.dll
.dll windows:6 windows x86 arch:x86

f47c569937bb3c2e6fabbb492de453ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\Win32\Release\sltech32.pdb

Imports

kernel32

OutputDebugStringW
OutputDebugStringA
InitializeCriticalSection
SetEndOfFile
SetFilePointer
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryExW
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadFile
ReadConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
InterlockedCompareExchange

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

Exports

Exports

SRSTechCreateProcess
SRSTechDestroyProcess
SRSTechEnumProcesses

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sltech64.dll
.dll windows:6 windows x64 arch:x64

dcf74895d751a0b67e59f73096c78b6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\APO-hpx-ss3d-Git\Core\x64\Release\sltech64.pdb

Imports

kernel32

OutputDebugStringW
OutputDebugStringA
SetEndOfFile
SetFilePointer
CloseHandle
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
GetLastError
HeapFree
HeapAlloc
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryExW
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadFile
ReadConsoleW
FlushFileBuffers
CreateFileW
InitializeCriticalSection

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

Exports

Exports

SRSTechCreateProcess
SRSTechDestroyProcess
SRSTechEnumProcesses

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4fe8eec31ba44b37546499596e74621

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0e:5c:10:23:18:0a:1e:44:f1:48:bb:bc:52:9f:55:3eCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

93:2e:1d:5f:65:0d:f7:c5:c2:1b:99:f6:b3:b6:66:58:b6:6f:1e:16:fc:e4:3c:20:b7:19:72:78:17:de:bb:beSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

crypt32

rpcrt4

Sections

.text Size: 717KB - Virtual size: 717KB

.rdata Size: 217KB - Virtual size: 216KB

.data Size: 9KB - Virtual size: 35KB

.rsrc Size: 317KB - Virtual size: 317KB

e65d8af8d041f3bf1f1af21538a8805c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

msdmo

setupapi

shell32

Exports

Exports

Sections

.text Size: 520KB - Virtual size: 520KB

RT_CODE Size: 1KB - Virtual size: 1KB

.rdata Size: 151KB - Virtual size: 150KB

.data Size: 21KB - Virtual size: 101KB

RT_DATA Size: 7KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 40B

.00cfg Size: 512B - Virtual size: 4B

_RDATA Size: 27KB - Virtual size: 26KB

.rsrc Size: 50KB - Virtual size: 49KB

.reloc Size: 88KB - Virtual size: 88KB

aa3fadef3bccb4eeefe0e8f775143a1e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0e:5c:10:23:18:0a:1e:44:f1:48:bb:bc:52:9f:55:3e
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

93:2e:1d:5f:65:0d:f7:c5:c2:1b:99:f6:b3:b6:66:58:b6:6f:1e:16:fc:e4:3c:20:b7:19:72:78:17:de:bb:be
Signer

.text
Size: 717KB - Virtual size: 717KB

.rdata
Size: 217KB - Virtual size: 216KB

.data
Size: 9KB - Virtual size: 35KB

.rsrc
Size: 317KB - Virtual size: 317KB

.text
Size: 520KB - Virtual size: 520KB

RT_CODE
Size: 1KB - Virtual size: 1KB

.rdata
Size: 151KB - Virtual size: 150KB

.data
Size: 21KB - Virtual size: 101KB

RT_DATA
Size: 7KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 40B

.00cfg
Size: 512B - Virtual size: 4B

_RDATA
Size: 27KB - Virtual size: 26KB

.rsrc
Size: 50KB - Virtual size: 49KB

.reloc
Size: 88KB - Virtual size: 88KB

.text
Size: 567KB - Virtual size: 567KB

RT_CODE
Size: 1KB - Virtual size: 1KB

.rdata
Size: 228KB - Virtual size: 228KB

.data
Size: 26KB - Virtual size: 116KB

.pdata
Size: 36KB - Virtual size: 35KB

RT_DATA
Size: 8KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 40B

.00cfg
Size: 512B - Virtual size: 8B

.rsrc
Size: 50KB - Virtual size: 49KB

.reloc
Size: 21KB - Virtual size: 20KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 277KB - Virtual size: 351KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 244KB - Virtual size: 243KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 286KB - Virtual size: 364KB

.pdata
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 45KB - Virtual size: 44KB