silksong-windows.zip
- SHA256 b061b2879d088152238449a6c3af173d710ea95456d2e1bcff7884ea89aae6a3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
silksong.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
silksong.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target silksong-windows.zip
- Size 29.0MB
- Sample261027-pg7axstxdy
- SHA256 b061b2879d088152238449a6c3af173d710ea95456d2e1bcff7884ea89aae6a3
- MD5 e555cc157933f88e547da337e1ac4bac
- SHA1 6143b3ada6dd22dc73d7951c4f0b12bd6dad5092
- SHA512 a0b5238b37a95fdfffc75a8d4272903af23099f8573a6bfa1453eceeaaf7e02652fa9f1f905149b27dedecbb7c3236a194a2b850892a4dc624f5ae4ebe6046a9
- SSDEEP 786432:u/RQqrMAgWJEztiPPAReFNiY0ZtYLGxhpQLSrfEhhM:gRQqZati3f3iYUtHJD7E0
- TLSH T1706733C1AC50B83391F7B28E371B303479DE70B1BC5B206655AC72328DE62DA97ADD58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/silksong.exe
File Explorer
-
silksong-windows.zip.zip 29.0MB
-
assets/audio/piano_a.wav298KB
-
assets/audio/piano_as.wav298KB
-
assets/audio/piano_b.wav298KB
-
assets/audio/piano_c.wav298KB
-
assets/audio/piano_cs.wav298KB
-
assets/audio/piano_d.wav298KB
-
assets/audio/piano_ds.wav298KB
-
assets/audio/piano_e.wav298KB
-
assets/audio/piano_f.wav298KB
-
assets/audio/piano_fs.wav298KB
-
assets/audio/piano_g.wav298KB
-
assets/audio/piano_gs.wav298KB
-
assets/audio/strings_Am_1_I_iv_VI_v.wav3.2MB
-
assets/audio/strings_Am_2_I_iidim_v_VII.wav3.2MB
-
assets/icons/circle-pause-regular.svg.svg 523B
-
assets/icons/circle-play-regular.svg.svg 521B
-
assets/icons/music-solid.svg.svg 523B
-
assets/shaders/silk.wgsl.js 1KB
-
silksong.exe.exe 64.3MB
assets/audio/piano_a.wav
- SHA256 8e5d33875a72fb8c1d470ebb755484d8b6ef1a914cc5975adfc9fc69326b64d2
- MD5 966e6e5935629e8d6a09d72f0ec1150a
- SHA1 e7a138d7eb3ebf5502661476b8cf05f915cb4b93
- SHA512 cf93bc2f2c155796e4a56727e65465312ee7d40ed7bbe589dbc0fdc39ae290cea5ee4cc8efcbe4c2483b73c5b11af4f17f68f034396be80a779f56af065907e3
- SSDEEP 6144:Cc3i5V0Qd6JcKylfuA5wUgNGOpJ7qm8uc4IbsuD7LE16y+N:Cc3uOo6JI4wOz+mr4sELyqN
- TLSH T1BA54011AF7BAE3B4AAFDD8469D8B890B5B14B22B6D46597F213DC04372824133D5372C
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_as.wav
- SHA256 c9708f52ec149e766724008b6553991192ffa15e9dc580df1371bba0b67a8377
- MD5 be4ea783093968eb8397a873eaab248e
- SHA1 63f7c2c4612c81cb3b82f84dd93131e87cf34a9f
- SHA512 a9cce15e063f31e10f58dd8be219651cb03bdee585b1688fc7ca2db203dad8bec69796b85c2788acc5984fb4fdf346833f9c9c471fbba8eaec6575697b9c055c
- SSDEEP 6144:/dIXfnj6dUfFOHL0Bn/YY1Jy+kxgXs3mF+TkplpNa21A92RSo:mvnSvHMn/Yc4WXn+Tkpl3q2RH
- TLSH T1BA54020AF73A739475EE8923AD19C81A6641F95B4C03CE7BA13EC45AB4A01733E1B5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_b.wav
- SHA256 907cffd3560a2caee9c32f321ca0a4b31303b87f3e4d26d212112a04bd834b5d
- MD5 295c727742d52048c7f7fc028756eadd
- SHA1 36f1c5a3291e32fe0f4af5952ed74400cfd66e59
- SHA512 7caa499e4d2d999bdb1c7bdd1fe61c1ecbe2f035960da5182a23e8f32e498f6de1e7f2280e94ffeca2ecb0ca43d9fbcc62176e2ecc8bc58f2eeb9506928b0354
- SSDEEP 6144:uWImXdUIBsPz4zsmOsHEHBN+ieRnzE3p7NNldYh+rfaJMGgYu:Hdtf+JIHE7+iGgpjlyIGg
- TLSH T1E1540144F777A7A08BDDD023AEA5CD19561577579C02C8BAA27EC2CAB071443BE030DE
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_c.wav
- SHA256 d6784dd71e6a8742aadcf04ba127997b5675e4916248c8920474a80a811e6925
- MD5 bc314f6b8c5b86af1062d9efeb7adc83
- SHA1 df12e14d74188b58cdeb8f327641e4bd0af699ff
- SHA512 41063f37e7b99198482b2fa79a797905bbbaa15362eda2e426bc494b12806531d9541a36d7313f22a3569b69424cc9efa2e34148a051b4016a595e116b407003
- SSDEEP 6144:w8as0Exrchd0DANx+HRMUV663vkhqCynFEwjrmau8hRGUDTVlNYWgQWMDlZqYg:w8L06470EOHRMUV663vkQnjKlmHVMWV6
- TLSH T14254029AF67B632867DDE5169DCAC942064275A34C1288BF907FC1CBB1B04137E136EE
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_cs.wav
- SHA256 d29c63bf9363bb78a7844bf4bc53292d90cd1ae7ca31f6f8f7b23f2190cfdf07
- MD5 e803987476f7a6e9eda018f193fed18b
- SHA1 bf7a41a4c788e752ad725e4b019063f52ea47bef
- SHA512 90e1006044d2f66e66d56eaf4a5ea6698e7e0511b35183c15bd572b6e73bad68c8c32256612b4c4c10cc1993db6d16b711a521c53e845638100a5c91201fc231
- SSDEEP 6144:5k9+C/JidHwUKow8doxFyK2xazsj4iEC70awLBIfyuLvOq0ub:5k9+4idQUKX6oxF32xa4jSLT4kA
- TLSH T174541248F7B3939423EE984ACEE4C8850649B25B2E22C9BF517ED24AB1B11433C575BD
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_d.wav
- SHA256 a7d26b699c60d56002b991b01b4e34e3222b3e49f90953506963748ce1077bc4
- MD5 91f2cca83fb8c7deb3c3a84cb85722e0
- SHA1 565d3f51cfc90aacae4baa87827a3c5c1b181f64
- SHA512 b3d182b7eb1b54dd7c4e091ad286ffd597a5dec380eb23720a59b8073b9c8c5bf97f7a39064fe5bcf3219f26dd572a84f55522b0168fb3b2655631291971c78b
- SSDEEP 6144:hYTJvHJhQjyXrgVTppV/O5+rmcqBsqdu79wOrA5iK3bfVxwSzYu:hYTNpujmrc9/O6jvQg9wO4jLfh
- TLSH T15254F10EF722933593DDDA039C85C98A679576A74D0389AB103FE5CB24B2123BD076BD
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_ds.wav
- SHA256 0571afa0687c9089a12417392f434bcb13ee8499726809734be6f8d849b9ef60
- MD5 9f5c978eebc575d77e1fe61bb24f6d54
- SHA1 bc8d4d57ef0df7009dd54c0250bc5bcb37569cb8
- SHA512 f4f39922ab990e33ef29bc17d0f9267c02a8bc38c0ac065c57304caa0b3c57809cf141513e43042772e507e2f487d3bbf3c97ff18853157b4be776eda180f760
- SSDEEP 6144:tsVtrNYo3D7JmnwDGOB1fzci7XeL9BnGqJPfWZnwxxkPiwwoZhVbTU:01h334nxZeHoPowxZwJlo
- TLSH T12454F11AB77223A597EDE502EDEBCC0B4B40B6464D02DAAF607ED18620B34237E5357D
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_e.wav
- SHA256 66eb57b30ded1e09355bdafb26d702ee92f34afcac6f0eab9f1b6598906462c0
- MD5 43863a3380f45f54e9a025ce901be844
- SHA1 622b6e190ebd67a37f584f566909e7f9fff5c857
- SHA512 6b8e540770d9a765dda028a7f5b1939197ff62eaf2ec970608a4c98eff261c8f65769bcbb3bbeb5a04752764a25c0e71983d274c3d69d85ca61982919e4166ce
- SSDEEP 6144:jlFLOzw7/F4iGo80Fds7pRY8Q7gdSzqpN+8qT:j7OM7/F9GoTWpRcc4t
- TLSH T1E154F119F373A3A0A7DCD6028E92C8089596B6570C23C97BE07EE6C375711133E57A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_f.wav
- SHA256 22adb1078cf3684a36d543b06d58d44bafa0c172ba8d6e28a859142de18bdbce
- MD5 c246b89e925988676b1a2501e1150895
- SHA1 8caea7a528c53967055fee1463962e7e5a7e3beb
- SHA512 25a285e49a0b3ddf9376d11e649a3552694411618b5f96344d7daaece2413bf445565f45d49028ae871e5bbfeb3fcea54be2eedbac0220280a1f91b8a247e40d
- SSDEEP 6144:G1tuO/a1GfUh9l9GXwTYxi7kQ18btGBGXcPosE1EifRLPPk:GSLt/uFi7GbtQGXkosE1EifxXk
- TLSH T124540102FBA353A56BFDC502AD8A894A8B00765B9D43597F217DC212B0C2153BFD367D
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_fs.wav
- SHA256 ad99ed37e587adda29673e0864f34f32fa10160f7ee39e314c93a76c1474f4d8
- MD5 5a0e1be0649856481bcfcbd104682d80
- SHA1 d5b8ac57b5453713886cf4bcb2463d6711805c60
- SHA512 3d402584f169fdb091c680aed997365b0c3ce5a8aa9f0d9597b8710385a899b0fc4c765a0f786040581f3ab9cba1e6e6ca07fc56d919a1611b96238a51017a86
- SSDEEP 6144:QsczzsfEs4+j/zjFDDGguO2r2Qyv13Z39FxJR5IaUbc10E2:M1s4y7jFvGgu3Iv13ZtFMhbc10E2
- TLSH T192540216FBB353B97BECD4467D4AE909561936051D12C5F7603AE0CA3022423BDABAFC
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_g.wav
- SHA256 5d1a91781979f360bf50da9b1abcecfbf041fcc4bdd6ec068b71bae9afd14c01
- MD5 e415039a7de96d485c07c9f13c7fe42f
- SHA1 bf719ddca7b6c99a090c844be0c8bbe23d1d2fd1
- SHA512 9ad68f12cd9bef517ddb65a3d3e062a0bf1b47b0b5c48934be2e2b64d828ea1e92204b2286cbfed38189c2aa19fa7342d74e83986c559beea7ed39ac7909af09
- SSDEEP 6144:qtj5F1Wkbx2WZRZZhRJEOKSXeZlU89u3bLCvQW:qtjf1Xboeh0OKSXeZlESb
- TLSH T1A754F196B322B379E7DE94069ED6CC8416003A8B0D03D0ABA17ED2D67165173BD63DEC
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/piano_gs.wav
- SHA256 cd7f6ef9f03d6fe800a4cbbf3d840e7785cad95d48fe23da88d4eadeac2d18b1
- MD5 5eb6a993e34adcbe80a4afcda7d45e95
- SHA1 ff1db30202e4613579ec98ecc3a570374696797e
- SHA512 3d352eb515e971339223ef0c240f1fab1aeb4e6dbbba23c48bb6d2ac65b0847ed225a8d985ddce70463fa7c529979005fea4613fd2651b6818e0502d67548108
- SSDEEP 6144:b0BqdowMRCxK1kbNBrL6Dal2nUUKOFu1ALGWHF0zThvGDxbyPE+2QW9FK:bewMRqwkZ1WD8q7v01EFHytGDxx+2fPK
- TLSH T12D54125EB777E72077EED406ACE1CD4E6A00728A4C2AD8BB887BD05271014637E8776D
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/strings_Am_1_I_iv_VI_v.wav
- SHA256 cde8ef7423b9d240baf4ea35e101527c154e2e4d71f9853b1145d61b6ac7420a
- MD5 188f4441f2f1156cc7402b300adbd785
- SHA1 a0546a8bedb798c3b136abd20195e5f0962baf92
- SHA512 84e83d9a1dce6cac86da2915832ef76e2ada9bc09f8ba1efe1ae139d78776e4be90bcb4cddcad7b2e4ab7727bc2c28a4b3873cec9347d8760d8debda16c91d01
- SSDEEP 98304:ESQDUWUHTzAY93IMiwulWDqF+FvbOr++dQyvmRx9Z/2UejT:W4LAY93QHlW2F+5bv+dQyvgCn
- TLSH T12DE5DF94E133BB8045DD9916A956DE9C03227E8EAF078E366038F75374A21C33E657CE
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/audio/strings_Am_2_I_iidim_v_VII.wav
- SHA256 5585eaa56965cce84f5cbb7db7a7212fdba0edd3db4ab32158a7d570682b31bf
- MD5 4584240953e43315abfae3c197f126eb
- SHA1 8382313de3a0b49eb1dbff53cf0857972fbcefb3
- SHA512 d3dc88e7f225e97266a0e8fcef953171b910246076b6350a3c8beeeb3ae6beeaf1265b936cb13e18250ee3fe54b501fc6f4c504ef6375204af86fbecb67e768e
- SSDEEP 98304:ESQDURpzq+n9m3W6dHiHIOB8Jm36IXW+catgq0RsyvAlLxPv:W4Vn93SiHIOLXWjdsfL
- TLSH T197E5D094E133BB8045DD89166952DE9C03227E8E9F07DE366038F76370A21933EA57DE
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/icons/circle-pause-regular.svg
- SHA256 d39545a157c4e2cd51f2e8c3371fdd36aa740762be13db5eddfcb7b1e06236f4
- MD5 db030e1719bd25aae43897b693b8797c
- SHA1 9fd37fec78b59f548dbcdd486208057e138291b8
- SHA512 19d865533109c23575d030c2d5c8109764fa3c821a3ab8f739de35dff89d69eab952be90d64d9e93fe17e222ea13a17215dfbc52e3ebdcd506d8ab22d073337f
- TLSH T163F02474480C00B80E1AC7C05E5D783D6D1EE19665D92E3AB90C829503436BEF48AEE4
- MD5 SHA1 SHA512 TLSH
assets/icons/circle-play-regular.svg
- SHA256 51533d81a4aa1a7ed871afdceb4aec3c6eec8714858ba0aa171c64c6bbd084bb
- MD5 cefd2db7783123d4190731b44acacc8d
- SHA1 8149cbdbcbaec030e1a80ca96b37191a60be6680
- SHA512 ccff3cbacadbd265e63e22958b19255f31f1a1b7e6ffccf1a6c1078e4f2f26a8767d3c98e54960623dc0e3b60285a1a4d728f894b8af85a8cf043d6e2a70233b
- TLSH T12BF0C076814C41B80E93C7F09C5A7029AE8B61C2A4E57B6CBC6D50D2209028FE0C9AA4
- MD5 SHA1 SHA512 TLSH
assets/icons/music-solid.svg
- SHA256 1dcd848ba9f834aeeb99c2efc0c341f76fdd48d352d090e5ab3e2ed74fca8908
- MD5 69faf735448b4375d9e5e023b28d1c5e
- SHA1 bf3230e045ca3310a2799fb9954feb21e6f8e453
- SHA512 a1491bf5aa0453c9b17507735d030d2f39eb9f0f326b79b9b034ee4d48de6d91353689d5644290fc17ef73fb818845cc3c45ab91e7a6b041e255241f74539125
- TLSH T15BF0842D2B29403E8B6852A66A3AE66C9C0E60C6E8FA8301F10B100135A0A8526C09F1
- MD5 SHA1 SHA512 TLSH
assets/shaders/silk.wgsl
- SHA256 be82277cf4453c6f9c5a2cac188f4c5c1066ca078067e177691c69d5b0f38881
- MD5 8c74bf3a0d16967564056d92fd808680
- SHA1 3f01b196e9a22fd012dbf7b12bc48cc951fdf701
- SHA512 ffea5a876ce9fd0f62d54e7a9846057987f1896e5d62b11d18e56aa07b0d30871a2f7da97c0b5d15f5919e0a37ec9c6b09a2cbc9678679eb37360abf9f9ca696
- TLSH T10221DFC41682002C796BE7A2823442D9E73D619B4E441ACDF41C31687F738BCA7F9AAD
- MD5 SHA1 SHA512 TLSH
silksong.exe
- IMPHASH 2f0f5e345bb1753f05fa18f307539de9
- SHA256 c956aa6cd14a726df4bd319c3374eec7f8cd9d47b2f828eff5ca5768c9114d04
- MD5 a71b266a50ba8549dc51374b75d9e0ae
- SHA1 6ea31807bc9c62b40b4dd45e7417c526efbecfd5
- SHA512 78dd6a7af7ecfc7f1158a18e95ca22f7286e0fcf4745a0ed489bcd7fa4c015fedfe5ba3e513d0a1065fe0218f184c9f345730580d1f6889d1efb7d7f5ba17d81
- SSDEEP 393216:MDpQbud1YQkOZnQOj3iMWQn1aVfriQrjrJer1rg5r6/ryrArFqrxNaPzMRcGLsNL:MDpKiaPOZnQO7YQn1aaTWaDun4gcsun
- TLSH T161E73A157A8A68ADD06AC8B0834B4A326E3134DB0B3579FF44D546752F7DAF82F3C618
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
45978844
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
silksong.pdb
kernel32
SetWaitableTimer
GetCurrentThreadId
CreateWaitableTimerExW
CreateMutexA
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
MultiByteToWideChar
GetConsoleOutputCP
GetUserPreferredUILanguages
GetSystemInfo
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetCurrentProcess
DuplicateHandle
VirtualProtect
SetEvent
CreateEventA
SetThreadPriority
WaitForMultipleObjectsEx
GetFinalPathNameByHandleW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileExW
CreateDirectoryW
GetFileInformationByHandleEx
GetFileInformationByHandle
FindClose
FindNextFileW
GetFullPathNameW
CreateThread
WaitForSingleObject
LoadLibraryA
GetCurrentProcessId
GetModuleHandleW
ReleaseMutex
GetLogicalProcessorInformationEx
GlobalMemoryStatusEx
K32GetPerformanceInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetLastError
GetSystemTimeAsFileTime
lstrlenW
VirtualQueryEx
HeapFree
HeapAlloc
GetProcessHeap
InitializeSListHead
LocalFree
IsDebuggerPresent
GetProcessTimes
GetSystemTimes
GetProcessIoCounters
HeapReAlloc
FreeLibrary
LoadLibraryExA
GetSystemTimePreciseAsFileTime
ReadProcessMemory
OpenProcess
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
LoadLibraryExW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
GetStdHandle
SetFilePointerEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameW
SetThreadErrorMode
GetConsoleMode
Sleep
CreateFileW
CreateSemaphoreA
SetConsoleCtrlHandler
ReleaseSemaphore
SetFileInformationByHandle
SetThreadStackGuarantee
GetCurrentThread
SwitchToThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
IsProcessorFeaturePresent
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
ole32
CoIncrementMTAUsage
CoCreateInstance
RegisterDragDrop
RevokeDragDrop
OleInitialize
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateFreeThreadedMarshaler
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
VariantClear
SysStringLen
GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
user32
CloseTouchInputHandle
SetWindowPos
MapVirtualKeyExW
GetTouchInputInfo
TrackMouseEvent
MonitorFromRect
GetKeyState
InvalidateRgn
ToUnicodeEx
GetKeyboardState
GetAsyncKeyState
ScreenToClient
SetCursorPos
ClientToScreen
GetClientRect
EnumDisplaySettingsExW
GetForegroundWindow
ChangeDisplaySettingsExW
ValidateRect
GetWindowPlacement
CreateIconIndirect
ReleaseDC
IsWindowVisible
RedrawWindow
GetRawInputData
IsProcessDPIAware
GetDC
IsIconic
GetWindowRect
GetWindowLongPtrW
PostMessageW
RegisterTouchWindow
SetWindowTextW
SetForegroundWindow
SendInput
SetWindowDisplayAffinity
ShowCursor
ClipCursor
GetSystemMetrics
GetClipCursor
GetActiveWindow
AdjustWindowRectEx
GetMenu
GetWindowLongW
EnableMenuItem
GetSystemMenu
SetWindowLongW
SendMessageW
ShowWindow
DestroyCursor
DestroyIcon
RegisterClassExA
DispatchMessageW
MonitorFromWindow
GetMonitorInfoW
GetCursorPos
MapVirtualKeyW
ReleaseCapture
SetCapture
CreateWindowExW
RegisterClassExW
RegisterWindowMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
RegisterRawInputDevices
MonitorFromPoint
EnumDisplayMonitors
TranslateMessage
DefWindowProcA
DefWindowProcW
PeekMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateWindowExA
RemovePropW
SetWindowLongPtrW
SetPropW
CallWindowProcW
GetKeyboardLayout
GetPropW
SetWindowPlacement
uiautomationcore
UiaRaiseAutomationPropertyChangedEvent
UiaHostProviderFromHwnd
UiaGetReservedNotSupportedValue
UiaRaiseAutomationEvent
UiaLookupId
UiaReturnRawElementProvider
imm32
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmAssociateContextEx
ImmSetCompositionWindow
ImmSetCandidateWindow
gdi32
GetDeviceCaps
CreateRectRgn
CreateBitmap
SetBitmapBits
GetPixelFormat
ChoosePixelFormat
SetPixelFormat
DescribePixelFormat
SwapBuffers
DeleteObject
CreateCompatibleBitmap
dwmapi
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
shell32
CommandLineToArgvW
DragQueryFileW
DragFinish
uxtheme
SetWindowTheme
pdh
PdhEnumObjectsA
PdhAddEnglishCounterW
PdhRemoveCounter
PdhCloseQuery
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
powrprof
CallNtPowerInformation
advapi32
CopySid
GetLengthSid
IsValidSid
RegCloseKey
OpenProcessToken
GetTokenInformation
RegQueryValueExW
RegOpenKeyExW
ntdll
NtWriteFile
RtlGetVersion
NtQueryInformationProcess
NtReadFile
RtlNtStatusToDosError
NtOpenFile
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
opengl32
wglCreateContext
wglGetProcAddress
wglMakeCurrent
wglDeleteContext
wglGetCurrentContext
d3dcompiler_47
D3DCompile
vcruntime140
memcmp
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
memmove
memcpy
__current_exception_context
__current_exception
memset
api-ms-win-crt-math-l1-1-0
ceilf
log2
ceil
atan2f
powf
fmodf
roundf
atan2
truncf
floorf
cosf
fmod
round
tan
cos
sin
_hypot
pow
log
__setusermatherr
fma
sinf
acosf
atan
fmaf
sinhf
sinh
log1pf
log1p
coshf
cosh
tanf
acos
tanhf
tanh
exp
asin
exp2
ldexp
atanf
log10f
exp2f
floor
asinf
logf
_hypotf
expf
trunc
log2f
api-ms-win-crt-string-l1-1-0
strlen
wcslen
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
api-ms-win-crt-runtime-l1-1-0
terminate
_crt_atexit
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
45.2MB
Virtual Size
45.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16.4MB
Virtual Size
16.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
740KB
Virtual Size
739KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=9, id=260, version=34321,
count=23, id=261, version=34321,
count=4, id=259, version=34808,
count=464, id=1, productName=Unmarked objects,
count=1529, productName=Unmarked objects (old),
count=1, id=258, version=34808,