ccleaner_pro[.]zip

ccleaner_pro.zip

.zip

About/Cursors/aero_arrow.cur

About/Cursors/aero_arrow_l.cur

About/Cursors/aero_arrow_xl.cur

About/Cursors/aero_busy.ani

About/Cursors/aero_busy_l.ani

About/Cursors/aero_busy_xl.ani

About/Cursors/aero_ew.cur

About/Cursors/aero_ew_l.cur

About/Cursors/aero_ew_xl.cur

About/Cursors/aero_helpsel.cur

About/Cursors/aero_helpsel_l.cur

About/Cursors/aero_helpsel_xl.cur

About/Cursors/aero_link.cur

About/Cursors/aero_link_i.cur

About/Cursors/aero_link_il.cur

About/Cursors/aero_link_im.cur

About/Cursors/aero_link_l.cur

About/Cursors/aero_link_xl.cur

About/Cursors/aero_move.cur

About/Cursors/aero_move_l.cur

About/Cursors/aero_move_xl.cur

About/Cursors/aero_nesw.cur

About/Cursors/aero_nesw_l.cur

About/Cursors/aero_nesw_xl.cur

About/Cursors/aero_ns.cur

About/Cursors/aero_ns_l.cur

About/Cursors/aero_ns_xl.cur

About/Cursors/aero_nwse.cur

About/Cursors/aero_nwse_l.cur

About/Cursors/aero_nwse_xl.cur

About/Cursors/aero_pen.cur

About/Cursors/aero_pen_l.cur

About/Cursors/aero_pen_xl.cur

About/Cursors/aero_person.cur

About/Cursors/aero_person_l.cur

About/Cursors/aero_person_xl.cur

About/Cursors/aero_pin.cur

About/Cursors/aero_pin_l.cur

About/Cursors/aero_pin_xl.cur

About/Cursors/aero_unavail.cur

About/Cursors/aero_unavail_l.cur

About/Cursors/aero_unavail_xl.cur

About/Cursors/aero_up.cur

About/Cursors/aero_up_l.cur

About/Cursors/aero_up_xl.cur

About/Cursors/aero_working.ani

About/Cursors/aero_working_l.ani

About/Cursors/aero_working_xl.ani

About/Cursors/arrow.svg

.xml

About/Cursors/arrow_i.cur

About/Cursors/arrow_il.cur

About/Cursors/arrow_im.cur

About/Cursors/arrow_l.cur

About/Cursors/arrow_m.cur

About/Cursors/arrow_r.cur

About/Cursors/arrow_rl.cur

About/Cursors/arrow_rm.cur

About/Cursors/beam_i.cur

About/Cursors/beam_il.cur

About/Cursors/beam_im.cur

About/Cursors/beam_l.cur

About/Cursors/beam_m.cur

About/Cursors/beam_r.cur

About/Cursors/beam_rl.cur

About/Cursors/beam_rm.cur

About/Cursors/busy.svg

.xml

About/Cursors/busy_i.cur

About/Cursors/busy_il.cur

About/Cursors/busy_im.cur

About/Cursors/busy_l.cur

About/Cursors/busy_m.cur

About/Cursors/busy_r.cur

About/Cursors/busy_rl.cur

About/Cursors/busy_rm.cur

About/Cursors/cross.svg

.xml

About/Cursors/cross_i.cur

About/Cursors/cross_il.cur

About/Cursors/cross_im.cur

About/Cursors/cross_l.cur

About/Cursors/cross_m.cur

About/Cursors/cross_r.cur

About/Cursors/cross_rl.cur

About/Cursors/cross_rm.cur

About/Cursors/ew.svg

.xml

About/Cursors/help_i.cur

About/Cursors/help_il.cur

About/Cursors/help_im.cur

About/Cursors/help_l.cur

About/Cursors/help_m.cur

About/Cursors/help_r.cur

About/Cursors/help_rl.cur

About/Cursors/help_rm.cur

About/Cursors/helpsel.svg

.xml

About/Cursors/ibeam.svg

.xml

About/Cursors/lappstrt.cur

About/Cursors/larrow.cur

About/Cursors/lcross.cur

About/Cursors/libeam.cur

About/Cursors/link.svg

.xml

About/Cursors/lmove.cur

About/Cursors/lnesw.cur

About/Cursors/lnodrop.cur

About/Cursors/lns.cur

About/Cursors/lnwse.cur

About/Cursors/lperson.cur

About/Cursors/lpin.cur

About/Cursors/lwait.cur

About/Cursors/lwe.cur

About/Cursors/move.svg

.xml

About/Cursors/move_i.cur

About/Cursors/move_il.cur

About/Cursors/move_im.cur

About/Cursors/move_l.cur

About/Cursors/move_m.cur

About/Cursors/move_r.cur

About/Cursors/move_rl.cur

About/Cursors/move_rm.cur

About/Cursors/nesw.svg

.xml

About/Cursors/no_i.cur

About/Cursors/no_il.cur

About/Cursors/no_im.cur

About/Cursors/no_l.cur

About/Cursors/no_m.cur

About/Cursors/no_r.cur

About/Cursors/no_rl.cur

About/Cursors/no_rm.cur

About/Cursors/ns.svg

.xml

About/Cursors/nwse.svg

.xml

About/Cursors/pen.svg

.xml

About/Cursors/pen_i.cur

About/Cursors/pen_il.cur

About/Cursors/pen_im.cur

About/Cursors/pen_l.cur

About/Cursors/pen_m.cur

About/Cursors/pen_r.cur

About/Cursors/pen_rl.cur

About/Cursors/pen_rm.cur

About/Cursors/person.svg

.xml

About/Cursors/person_i.cur

About/Cursors/person_il.cur

About/Cursors/person_im.cur

About/Cursors/person_l.cur

About/Cursors/person_m.cur

About/Cursors/person_r.cur

About/Cursors/person_rl.cur

About/Cursors/person_rm.cur

About/Cursors/pin.svg

.xml

About/Cursors/pin_i.cur

About/Cursors/pin_il.cur

About/Cursors/pin_im.cur

About/Cursors/pin_l.cur

About/Cursors/pin_m.cur

About/Cursors/pin_r.cur

About/Cursors/pin_rl.cur

About/Cursors/pin_rm.cur

About/Cursors/size1_i.cur

About/Cursors/size1_il.cur

About/Cursors/size1_im.cur

About/Cursors/size1_l.cur

About/Cursors/size1_m.cur

About/Cursors/size1_r.cur

About/Cursors/size1_rl.cur

About/Cursors/size1_rm.cur

About/Cursors/size2_i.cur

About/Cursors/size2_il.cur

About/Cursors/size2_im.cur

About/Cursors/size2_l.cur

About/Cursors/size2_m.cur

About/Cursors/size2_r.cur

About/Cursors/size2_rl.cur

About/Cursors/size2_rm.cur

About/Cursors/size3_i.cur

About/Cursors/size3_il.cur

About/Cursors/size3_im.cur

About/Cursors/size3_l.cur

About/Cursors/size3_m.cur

About/Cursors/size3_r.cur

About/Cursors/size3_rl.cur

About/Cursors/size3_rm.cur

About/Cursors/size4_i.cur

About/Cursors/size4_il.cur

About/Cursors/size4_im.cur

About/Cursors/size4_l.cur

About/Cursors/size4_m.cur

About/Cursors/size4_r.cur

About/Cursors/size4_rl.cur

About/Cursors/size4_rm.cur

About/Cursors/unavail.svg

.xml

About/Cursors/up.svg

.xml

About/Cursors/up_i.cur

About/Cursors/up_il.cur

About/Cursors/up_im.cur

About/Cursors/up_l.cur

About/Cursors/up_m.cur

About/Cursors/up_r.cur

About/Cursors/up_rl.cur

About/Cursors/up_rm.cur

About/Cursors/wait.svg

.xml

About/Cursors/wait_i.cur

About/Cursors/wait_il.cur

About/Cursors/wait_im.cur

About/Cursors/wait_l.cur

About/Cursors/wait_m.cur

About/Cursors/wait_r.cur

About/Cursors/wait_rl.cur

About/Cursors/wait_rm.cur

About/Globalization/ELS/HyphenationDictionaries/MsHy7en.lex

About/Globalization/ELS/HyphenationDictionaries/MsHy7ru.lex

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/.config

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/charactermap.json

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/emoji_bg_c.lm2

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/en_US.lm

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/en_US_windowsadds.lm1

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/en_US_word_c.lm1

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/extra.dat

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/ime.json

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/punctuation-SDK1.2.json

About/Globalization/ELS/SpellDictionaries/Fluency/en-US/swiftkey.lm3

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/.config

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/charactermap.json

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/emoji_bg_c.lm2

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/ime.json

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/punctuation-SDK1.2.json

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/ru_RU.lm

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/ru_RU_word_c.lm1

About/Globalization/ELS/SpellDictionaries/Fluency/ru-RU/swiftkey.lm3

About/Globalization/ELS/SpellDictionaries/MsSp7en-US.acl

About/Globalization/ELS/SpellDictionaries/MsSp7en-US.dub

About/Globalization/ELS/SpellDictionaries/MsSp7en-US.lex

.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

About/Globalization/ELS/SpellDictionaries/MsSp7ru.acl

About/Globalization/ELS/SpellDictionaries/MsSp7ru.dub

About/Globalization/ELS/SpellDictionaries/MsSp7ru.lex

.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

About/Globalization/ELS/Transliteration/Hans-To-Hant.nlt

About/Globalization/ELS/Transliteration/Hant-To-Hans.nlt

About/Globalization/ELS/Transliteration/bengali-to-latin.nlt

About/Globalization/ELS/Transliteration/cyrl-to-latin.nlt

About/Globalization/ELS/Transliteration/decompose-hangul.nlt

About/Globalization/ELS/Transliteration/devanagari-to-latin.nlt

About/Globalization/ELS/Transliteration/malayalam-to-latin.nlt

About/Globalization/ICU/icudtl.dat

About/Globalization/ICU/metaZones.res

About/Globalization/ICU/timezoneTypes.res

About/Globalization/ICU/windowsZones.res

About/Globalization/ICU/zoneinfo64.res

About/Globalization/Ink/en-US/configuration.ini

About/Globalization/Ink/en-US/hwr.dat

About/Globalization/Sorting/SortDefault.nls

About/Globalization/Sorting/SortServer2003Compat.nls

About/Globalization/Sorting/SortServer2008Compat.nls

About/Globalization/Sorting/SortVistaCompat.nls

About/Globalization/Sorting/SortWindows61.nls

About/Globalization/Sorting/SortWindows62.nls

About/Globalization/Sorting/SortWindows63.nls

About/Globalization/Time Zone/timezoneMapping.xml

About/Globalization/Time Zone/timezones.xml

About/Globalization/Time Zone/tzautoupdate.dat

About/ImmersiveControlPanel/ConstraintIndex/ConstraintIndex.cab

.cab

About/ImmersiveControlPanel/Settings/AllSystemSettings_{253E530E-387D-4BC2-959D-E6F86122E5F2}.xml

.xml

About/ImmersiveControlPanel/SystemSettings.dll

.dll windows x64

78b7610691593063689a0d8735c28490

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW

RegGetValueW

RegNotifyChangeKeyValue

RegCloseKey

RegOpenKeyExW

RegSetValueExW

RegQueryValueExW

RegCreateKeyExW

RegQueryInfoKeyW

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

SetLastError

RaiseException

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

SetThreadpoolWait

CreateThreadpoolWait

WaitForThreadpoolWaitCallbacks

CloseThreadpoolTimer

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

TrySubmitThreadpoolCallback

CloseThreadpoolWait

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetCurrentProcess

TerminateProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

LCMapStringEx

GetUserPreferredUILanguages

GetLocaleInfoEx

GetUserGeoID

FormatMessageW

ResolveLocaleName

GetGeoInfoW

api-ms-win-core-synch-l1-1-0

SetEvent

AcquireSRWLockExclusive

InitializeCriticalSectionEx

CreateEventW

CreateEventExW

ReleaseSRWLockExclusive

CreateSemaphoreExW

SetWaitableTimer

WaitForSingleObject

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

ReleaseSemaphore

OpenEventW

ResetEvent

OpenSemaphoreW

LeaveCriticalSection

ReleaseMutex

InitializeSRWLock

WaitForSingleObjectEx

AcquireSRWLockShared

ReleaseSRWLockShared

InitializeCriticalSection

CreateMutexExW

EnterCriticalSection

api-ms-win-core-heap-l2-1-0

LocalFree

LocalAlloc

api-ms-win-core-com-l1-1-0

CoGetMalloc

CoCreateInstance

CoTaskMemFree

PropVariantClear

CoCreateFreeThreadedMarshaler

CoTaskMemRealloc

CoTaskMemAlloc

CoGetObjectContext

CoGetContextToken

CoGetApartmentType

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventActivityIdControl

EventWriteTransfer

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsTrimStringStart

WindowsTrimStringEnd

WindowsCompareStringOrdinal

WindowsConcatString

WindowsDuplicateString

WindowsGetStringLen

WindowsCreateString

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

CompareStringW

WideCharToMultiByte

CompareStringOrdinal

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

InitOnceBeginInitialize

InitOnceComplete

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

GetModuleFileNameA

GetModuleHandleExA

DisableThreadLibraryCalls

GetModuleHandleExW

FreeLibrary

GetProcAddress

FindResourceExW

FindStringOrdinal

LockResource

LoadResource

LoadLibraryExW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW

GetWindowsDirectoryW

GetSystemTimeAsFileTime

GetTickCount64

GetSystemDirectoryW

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

GetProductInfo

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

RoFailFastWithErrorContext

SetRestrictedErrorInfo

RoOriginateError

oleaut32

GetErrorInfo

SetErrorInfo

SysFreeString

SafeArrayCreate

SafeArrayUnaccessData

SysAllocString

SysStringLen

SafeArrayAccessData

SafeArrayDestroy

api-ms-win-core-processthreads-l1-1-1

OpenProcess

IsProcessorFeaturePresent

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-localization-l1-2-3

GetUserDefaultGeoName

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-file-l1-1-0

CompareFileTime

GetFileAttributesW

api-ms-win-core-path-l1-1-0

PathCchAppend

sspicli

GetUserNameExW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-security-base-l1-1-0

CheckTokenMembership

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

CreateWaitableTimerW

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv

GetComputerNameW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathParseIconLocationW

SHExpandEnvironmentStringsW

PathFindExtensionW

api-ms-win-security-lsalookup-l1-1-2

LsaLookupUserAccountType

shcore

IsOS

CreateStreamOverRandomAccessStream

SetCurrentProcessExplicitAppUserModelID

ord244

SHCreateMemStream

SHSetValueW

CreateRandomAccessStreamOverStream

gdi32

DeleteObject

CreateDIBSection

GetObjectW

propsys

PSCreateMemoryPropertyStore

PSPropertyBag_WriteStr

ntdll

NtQueryWnfStateData

RtlSubscribeWnfStateChangeNotification

RtlUnsubscribeWnfStateChangeNotification

WinSqmIncrementDWORD

RtlPublishWnfStateData

RtlUnsubscribeWnfNotificationWaitForCompletion

mrmcorer

ResourceManagerQueueGetString

d2d1

ord1

api-ms-win-ntuser-sysparams-l1-1-0

GetMonitorInfoW

GetSystemMetrics

api-ms-win-rtcore-ntuser-window-l1-1-0

GetAncestor

AllowSetForegroundWindow

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW

api-ms-win-appmodel-runtime-l1-1-1

FindPackagesByPackageFamily

api-ms-win-crt-private-l1-1-0

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o___stdio_common_vswscanf

_o__beginthreadex

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__get_errno

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__set_errno

_o__wcsicmp

_o__wcsnicmp

_o_abort

_o_ceil

_o_ceilf

_o_cos

_o_exp

_o_floor

_o_floorf

_o_free

_o_iswspace

_o_malloc

_o_pow

_o_realloc

_o_sin

_o_sqrt

_o_terminate

_o_towlower

_o_towupper

_o_wcscat_s

_o_wcscpy_s

_o_wcsncpy_s

_o_wcstod

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcschr

strchr

wcsstr

wcsrchr

memcmp

_CxxThrowException

memcpy

__C_specific_handler

__CxxFrameHandler3

memmove

api-ms-win-crt-string-l1-1-0

wcslen

wcscspn

memset

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

msvcp_win

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?is@?$ctype@_W@std@@QEBA_NF_W@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

??1_Locinfo@std@@QEAA@XZ

??1_Lockit@std@@QEAA@XZ

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@PEBD@Z

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?id@?$ctype@_W@std@@2V0locale@2@A

??Bid@locale@std@@QEAA_KXZ

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$collate@_W@std@@2V0locale@2@A

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

_Query_perf_counter

_Query_perf_frequency

?uncaught_exception@std@@YA_NXZ

?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z

?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?width@ios_base@std@@QEAA_J_J@Z

?width@ios_base@std@@QEBA_JXZ

?flags@ios_base@std@@QEBAHXZ

?good@ios_base@std@@QEBA_NXZ

?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

??1facet@locale@std@@MEAA@XZ

?_Throw_Cpp_error@std@@YAXH@Z

_Thrd_join

_Thrd_id

_Cnd_do_broadcast_at_thread_exit

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z

??0facet@locale@std@@IEAA@_K@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Thrd_yield

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Cnd_init_in_situ

_Mtx_init_in_situ

_Wcscoll

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z

?_Xbad_alloc@std@@YAXXZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Cnd_destroy_in_situ

_Mtx_destroy_in_situ

_Cnd_broadcast

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Xbad_function_call@std@@YAXXZ

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_Xout_of_range@std@@YAXPEBD@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

??Bios_base@std@@QEBA_NXZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z

?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z

?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z

?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?_Throw_C_error@std@@YAXH@Z

_Mtx_lock

_Mtx_unlock

_Cnd_wait

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?_Incref@facet@locale@std@@UEAAXXZ

_Wcsxfrm

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?_Xinvalid_argument@std@@YAXPEBD@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z

wincorlib

?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?ToString@float64@default@@QEAAPE$AAVString@Platform@@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

??0Exception@Platform@@QE$AAA@H@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?EnableFactoryCache@@YAXXZ

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?UninitializeData@Details@Platform@@YAXH@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0Delegate@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0Object@Platform@@QE$AAA@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

ext-ms-win-rtcore-ntuser-sysparams-l1-1-0

MonitorFromPoint

ext-ms-win-shell-shell32-l1-2-0

ShellExecuteExW

SHCreateItemInKnownFolder

ext-ms-win-shell-shell32-l1-2-1

SHGetStockIconInfo

SHDefExtractIconW

ext-ms-win-ntuser-gui-l1-1-0

DestroyIcon

ext-ms-win-ole32-bindctx-l1-1-0

CreateBindCtx

ext-ms-win-ntuser-keyboard-l1-1-0

MapVirtualKeyExW

ext-ms-win-ntuser-keyboard-l1-2-0

GetKeyNameTextW

ext-ms-win-com-ole32-l1-1-1

CoAllowSetForegroundWindow

ext-ms-win-security-slc-l1-1-0

SLGetWindowsInformationDWORD

policymanager

PolicyManager_GetPolicyInt

winlangdb

Bcp47GetEnglishName

Bcp47GetLocalizedName

Bcp47GetNativeName

bcp47langs

Bcp47GetIsoScriptCode

Bcp47IsWellFormed

wintrust

WTGetSignatureInfo

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList

InitializeSListHead

ext-ms-win-els-elscore-l1-1-0

MappingFreePropertyBag

MappingRecognizeText

MappingGetServices

Exports

DllCanUnloadNow

DllGetActivationFactory

StartApplication

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 549KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

About/ImmersiveControlPanel/SystemSettings.exe

.exe windows x64

15ac25d947472a3f989c6a1c938c9f4c

Code Sign

33:00:00:03:8b:79:45:c1:8b:0e:b6:87:ec:00:00:00:00:03:8b
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1c:71:48:c6:06:cf:b4:5c:c3:13:4d:c3:15:80:d2:4d:5d:06:68:5c:54:2a:e5:38:62:4e:6b:a9:dd:d2:db:f1
Signer

Actual PE Digest

1c:71:48:c6:06:cf:b4:5c:c3:13:4d:c3:15:80:d2:4d:5d:06:68:5c:54:2a:e5:38:62:4e:6b:a9:dd:d2:db:f1

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07/02/2023, 20:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memcpy_s

_amsg_exit

_XcptFilter

_wcmdln

_initterm

__wgetmainargs

__set_app_type

__setusermatherr

exit

_vsnwprintf

_fmode

_cexit

_commode

_lock

_exit

_unlock

?terminate@@YAXXZ

_onexit

__C_specific_handler

__dllonexit

memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

LoadLibraryExW

FreeLibrary

GetModuleFileNameA

GetModuleFileNameW

GetModuleHandleExW

GetProcAddress

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW

CreateMutexExW

ReleaseSemaphore

ReleaseMutex

WaitForSingleObject

WaitForSingleObjectEx

OpenSemaphoreW

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

RaiseException

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringA

OutputDebugStringW

IsDebuggerPresent

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventRegister

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-security-base-l1-1-0

CheckTokenMembership

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

RoInitialize

RoUninitialize

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentThreadId

GetCurrentProcessId

GetStartupInfoW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount64

GetTickCount

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx

QueryActCtxW

CreateActCtxW

FindActCtxSectionStringW

ActivateActCtx

shcore

ord190

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.imrsiv
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

About/ImmersiveControlPanel/SystemSettings.exe.manifest

.xml

About/ImmersiveControlPanel/SystemSettings/Assets/Aria.mp3

About/ImmersiveControlPanel/SystemSettings/Assets/Guy.mp3

About/ImmersiveControlPanel/SystemSettings/Assets/Jenny.mp3

About/ImmersiveControlPanel/SystemSettings/Assets/SDRSampleAccessibility.mkv

About/ImmersiveControlPanel/SystemSettingsViewModel.Desktop.dll

.dll windows x64

d10ef5f0915e0df88dae2854afc447bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-processthreads-l1-1-0

CreateThread

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetExitCodeThread

GetCurrentProcessId

OpenProcessToken

api-ms-win-core-localization-l1-2-0

GetUserPreferredUILanguages

FormatMessageW

GetLocaleInfoEx

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

TrySubmitThreadpoolCallback

CloseThreadpoolTimer

SetThreadpoolWait

WaitForThreadpoolWaitCallbacks

WaitForThreadpoolTimerCallbacks

CloseThreadpoolWait

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx

OpenSemaphoreW

LeaveCriticalSection

AcquireSRWLockExclusive

OpenEventW

WaitForSingleObject

ReleaseMutex

CreateEventExW

InitializeCriticalSectionAndSpinCount

ReleaseSemaphore

EnterCriticalSection

CreateSemaphoreExW

WaitForSingleObjectEx

ReleaseSRWLockExclusive

AcquireSRWLockShared

CreateEventW

SetEvent

ReleaseSRWLockShared

ResetEvent

CreateMutexExW

InitializeSRWLock

DeleteCriticalSection

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW

RegCloseKey

RegGetValueW

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceComplete

WakeByAddressSingle

WaitOnAddress

InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CoGetObjectContext

CoCreateFreeThreadedMarshaler

CoCreateInstance

CoTaskMemFree

CoTaskMemRealloc

CoGetContextToken

CoTaskMemAlloc

CoGetApartmentType

ntdll

RtlGetDeviceFamilyInfoEnum

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventSetInformation

EventRegister

EventWriteTransfer

EventActivityIdControl

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-winrt-l1-1-0

RoUninitialize

RoInitialize

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

GetRestrictedErrorInfo

SetRestrictedErrorInfo

RoOriginateError

oleaut32

SysStringLen

SysAllocString

SysFreeString

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

GetProcAddress

DisableThreadLibraryCalls

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW

GetSystemTimeAsFileTime

api-ms-win-core-localization-l1-2-3

GetUserDefaultGeoName

api-ms-win-security-base-l1-1-0

GetTokenInformation

CreateWellKnownSid

CheckTokenMembership

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

MultiByteToWideChar

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__wcsicmp

_o__wcsnicmp

_o_abort

_o_ceilf

_o_free

_o_iswspace

_o_malloc

_o_realloc

_o_terminate

_o_towlower

__CxxFrameHandler4

__std_terminate

wcsstr

strchr

__current_exception_context

__current_exception

__CxxFrameHandler3

__C_specific_handler

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

_CxxThrowException

memcmp

memcpy

memmove

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

msvcp_win

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

_Thrd_yield

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z

?_Incref@facet@locale@std@@UEAAXXZ

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?is@?$ctype@_W@std@@QEBA_NF_W@Z

??1_Locinfo@std@@QEAA@XZ

??1_Lockit@std@@QEAA@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

??0_Lockit@std@@QEAA@H@Z

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?id@?$ctype@_W@std@@2V0locale@2@A

??Bid@locale@std@@QEAA_KXZ

?id@?$collate@_W@std@@2V0locale@2@A

_Wcsxfrm

_Wcscoll

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?_Xbad_alloc@std@@YAXXZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

_Cnd_wait

_Mtx_unlock

_Mtx_lock

?_Throw_C_error@std@@YAXH@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

_Cnd_broadcast

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_Xout_of_range@std@@YAXPEBD@Z

_Query_perf_counter

_Query_perf_frequency

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z

wincorlib

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?EnableFactoryCache@@YAXXZ

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

??0Delegate@Platform@@QE$AAA@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

??0FailureException@Platform@@QE$AAA@XZ

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsIsStringEmpty

WindowsDeleteString

WindowsCreateString

WindowsConcatString

WindowsCreateStringReference

WindowsCompareStringOrdinal

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

InterlockedPushEntrySList

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-string-l1-1-0

wcslen

memset

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

About/ImmersiveControlPanel/Telemetry.Common.dll

.dll windows x64

51c3ba1ec821ae34ff1bcdc93bcdccd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleExW

GetModuleHandleW

DisableThreadLibraryCalls

GetModuleFileNameA

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventSetInformation

EventRegister

EventUnregister

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

InitOnceComplete

InitOnceBeginInitialize

api-ms-win-core-synch-l1-1-0

WaitForSingleObject

ReleaseSemaphore

CreateMutexExW

OpenSemaphoreW

CreateSemaphoreExW

DeleteCriticalSection

ReleaseMutex

InitializeCriticalSectionEx

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

LeaveCriticalSection

EnterCriticalSection

WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetLastError

SetUnhandledExceptionFilter

GetLastError

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoCreateGuid

CoCreateFreeThreadedMarshaler

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vswprintf

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__register_onexit_function

_o__seh_filter_dll

_o_free

__CxxFrameHandler4

__std_terminate

wcsstr

_o___stdio_common_vsnprintf_s

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

wincorlib

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsCreateStringReference

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsDuplicateString

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-crt-string-l1-1-0

memset

wcslen

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

About/ImmersiveControlPanel/appxblockmap.xml

.xml

About/ImmersiveControlPanel/appxmanifest.xml

.xml

About/ImmersiveControlPanel/appxsignature.p7x

About/ImmersiveControlPanel/images/Apps.png

.png

About/ImmersiveControlPanel/images/AppsRtl.png

.png

About/ImmersiveControlPanel/images/Contact.png

.png

About/ImmersiveControlPanel/images/DefaultPinTile.png

.png

About/ImmersiveControlPanel/images/Devices.png

.png

About/ImmersiveControlPanel/images/EaseOfAccess.png

.png

About/ImmersiveControlPanel/images/Extras.png

.png

About/ImmersiveControlPanel/images/Gaming.png

.png

About/ImmersiveControlPanel/images/Globe.png

.png

About/ImmersiveControlPanel/images/Holographic.png

.png

About/ImmersiveControlPanel/images/Lock.png

.png

About/ImmersiveControlPanel/images/Personalize.png

.png

About/ImmersiveControlPanel/images/Square71x71Logo.png

.png

About/ImmersiveControlPanel/images/System.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black_scale-100.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black_scale-125.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black_scale-150.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black_scale-200.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-black_scale-400.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white_scale-100.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white_scale-125.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white_scale-150.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white_scale-200.png

.png

About/ImmersiveControlPanel/images/TileSmall.contrast-white_scale-400.png

.png

About/ImmersiveControlPanel/images/TileSmall.png

.png

About/ImmersiveControlPanel/images/TileSmall.scale-100.png

.png

About/ImmersiveControlPanel/images/TileSmall.scale-125.png

.png

About/ImmersiveControlPanel/images/TileSmall.scale-150.png

.png

About/ImmersiveControlPanel/images/TileSmall.scale-200.png

.png

About/ImmersiveControlPanel/images/TileSmall.scale-400.png

.png

About/ImmersiveControlPanel/images/TimeLanguage.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black_scale-100.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black_scale-125.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black_scale-150.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black_scale-200.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-black_scale-400.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white_scale-100.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white_scale-125.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white_scale-150.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white_scale-200.png

.png

About/ImmersiveControlPanel/images/TinyTile.contrast-white_scale-400.png

.png

About/ImmersiveControlPanel/images/TinyTile.png

.png

About/ImmersiveControlPanel/images/TinyTile.scale-100.png

.png

About/ImmersiveControlPanel/images/TinyTile.scale-125.png

.png

About/ImmersiveControlPanel/images/TinyTile.scale-150.png

.png

About/ImmersiveControlPanel/images/TinyTile.scale-200.png

.png

About/ImmersiveControlPanel/images/TinyTile.scale-400.png

.png

About/ImmersiveControlPanel/images/UpdateRestore.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black_scale-100.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black_scale-125.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black_scale-150.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black_scale-200.png

.png

About/ImmersiveControlPanel/images/logo.contrast-black_scale-400.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white_scale-100.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white_scale-125.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white_scale-150.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white_scale-200.png

.png

About/ImmersiveControlPanel/images/logo.contrast-white_scale-400.png

.png

About/ImmersiveControlPanel/images/logo.png

.png

About/ImmersiveControlPanel/images/logo.scale-100.png

.png

About/ImmersiveControlPanel/images/logo.scale-125.png

.png

About/ImmersiveControlPanel/images/logo.scale-150.png

.png

About/ImmersiveControlPanel/images/logo.scale-200.png

.png

About/ImmersiveControlPanel/images/logo.scale-400.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-16_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-20_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-24_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-256_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-30_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-32_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-36_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-40_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-48_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-60_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-64_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-72_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-80_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96_altform-unplated.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96_altform-unplated_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96_altform-unplated_contrast-white.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96_contrast-black.png

.png

About/ImmersiveControlPanel/images/logo.targetsize-96_contrast-white.png

.png

About/ImmersiveControlPanel/images/phone.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black_scale-100.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black_scale-125.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black_scale-150.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black_scale-200.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-black_scale-400.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white_scale-100.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white_scale-125.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white_scale-150.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white_scale-200.png

.png

About/ImmersiveControlPanel/images/splashscreen.contrast-white_scale-400.png

.png

About/ImmersiveControlPanel/images/splashscreen.png

.png

About/ImmersiveControlPanel/images/splashscreen.scale-100.png

.png

About/ImmersiveControlPanel/images/splashscreen.scale-125.png

.png

About/ImmersiveControlPanel/images/splashscreen.scale-150.png

.png

About/ImmersiveControlPanel/images/splashscreen.scale-200.png

.png

About/ImmersiveControlPanel/images/splashscreen.scale-400.png

.png

About/ImmersiveControlPanel/images/wide.Apps.png

.png

About/ImmersiveControlPanel/images/wide.AppsRtl.png

.png

About/ImmersiveControlPanel/images/wide.Contact.png

.png

About/ImmersiveControlPanel/images/wide.DefaultPinTile.png

.png

About/ImmersiveControlPanel/images/wide.Devices.png

.png

About/ImmersiveControlPanel/images/wide.EaseOfAccess.png

.png

About/ImmersiveControlPanel/images/wide.Extras.png

.png

About/ImmersiveControlPanel/images/wide.Gaming.png

.png

About/ImmersiveControlPanel/images/wide.Globe.png

.png

About/ImmersiveControlPanel/images/wide.Holographic.png

.png

About/ImmersiveControlPanel/images/wide.Lock.png

.png

About/ImmersiveControlPanel/images/wide.Personalize.png

.png

About/ImmersiveControlPanel/images/wide.System.png

.png

About/ImmersiveControlPanel/images/wide.TimeLanguage.png

.png

About/ImmersiveControlPanel/images/wide.UpdateRestore.png

.png

About/ImmersiveControlPanel/images/wide.phone.png

.png

About/ImmersiveControlPanel/pris/resources.ru-RU.pri

About/ImmersiveControlPanel/resources.pri

About/ImmersiveControlPanel/ru-RU/SystemSettings.exe.mui

.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

About/apppatch/AcRes.dll

.dll windows x64

Code Sign

33:00:00:03:8b:79:45:c1:8b:0e:b6:87:ec:00:00:00:00:03:8b
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

69:21:02:0e:f6:f2:ef:c1:b2:c2:48:79:31:3b:e3:d5:2d:1d:b2:8a:92:25:29:cc:83:58:5c:0f:04:57:d2:83
Signer

Actual PE Digest

69:21:02:0e:f6:f2:ef:c1:b2:c2:48:79:31:3b:e3:d5:2d:1d:b2:8a:92:25:29:cc:83:58:5c:0f:04:57:d2:83

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07/02/2023, 20:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 320KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

About/apppatch/DirectXApps.lzma

About/apppatch/DirectXApps.sdb

About/apppatch/MergeSdbFiles/01D81186E0AAA800.msimain.sdb

About/apppatch/MergeSdbFiles/01D81186E0AAA800.sysmain.sdb

About/apppatch/MergeSdbFilesSource/01D81186E0AAA800.msimain.sdb

About/apppatch/MergeSdbFilesSource/01D81186E0AAA800.sysmain.sdb

About/apppatch/MergeSdbFilesSource/msiMerge.sdb

About/apppatch/MergeSdbFilesSource/sysMerge.sdb

About/apppatch/drvmain.sdb

About/apppatch/frxmain.sdb

About/apppatch/msimain.sdb

About/apppatch/pcamain.sdb

About/apppatch/ru-RU/AcRes.dll.mui

.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

About/apppatch/sysmain.sdb

README.md.url

.url

ccleaner_pro.exe

.exe windows x86

844a2d30ece05bea398a662fadfd98b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess

GetComputerNameW

GetModuleHandleW

GetTickCount

GetGeoInfoW

LoadLibraryW

ReadConsoleInputA

GetPrivateProfileStructW

GetBinaryTypeW

GetTempPathW

OpenMutexW

GetLastError

SetLastError

InterlockedIncrement

VirtualAlloc

GetProcessWorkingSetSize

LocalAlloc

GetNumberFormatW

AddAtomW

SetCommMask

FoldStringW

BuildCommDCBA

LCMapStringW

WriteConsoleOutputCharacterA

GetProcAddress

SetLocaleInfoA

LCMapStringA

InterlockedDecrement

Sleep

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

GetCommandLineA

GetStartupInfoA

RaiseException

RtlUnwind

HeapFree

HeapAlloc

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

GetCurrentThreadId

HeapSize

ExitProcess

WriteFile

GetStdHandle

GetModuleFileNameA

FreeEnvironmentStringsA

GetEnvironmentStrings

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStringsW

SetHandleCount

GetFileType

HeapCreate

VirtualFree

QueryPerformanceCounter

GetCurrentProcessId

GetSystemTimeAsFileTime

HeapReAlloc

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

GetLocaleInfoA

GetStringTypeA

MultiByteToWideChar

GetStringTypeW

LoadLibraryA

InitializeCriticalSectionAndSpinCount

user32

LoadMenuA

GetListBoxInfo

advapi32

ReportEventA

BackupEventLogA

winhttp

WinHttpCheckPlatform

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.vawe
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.yofas
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 4KB - Virtual size: 256B

.rsrc Size: 13.1MB - Virtual size: 13.1MB

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 4KB - Virtual size: 256B

.rsrc Size: 7.4MB - Virtual size: 7.4MB

78b7610691593063689a0d8735c28490

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-registry-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-winrt-error-l1-1-0

oleaut32

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-localization-l1-2-3

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-path-l1-1-0

sspicli

api-ms-win-core-registry-l1-1-1

api-ms-win-security-base-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-security-lsalookup-l1-1-2

shcore

gdi32

propsys

ntdll

mrmcorer

d2d1

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-rtcore-ntuser-window-l1-1-0

api-ms-win-shell-namespace-l1-1-0

api-ms-win-core-shlwapi-obsolete-l1-1-0

api-ms-win-appmodel-runtime-l1-1-1

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

msvcp_win

wincorlib

ext-ms-win-rtcore-ntuser-sysparams-l1-1-0

ext-ms-win-shell-shell32-l1-2-0

ext-ms-win-shell-shell32-l1-2-1

ext-ms-win-ntuser-gui-l1-1-0

ext-ms-win-ole32-bindctx-l1-1-0

ext-ms-win-ntuser-keyboard-l1-1-0

.rdata
Size: 4KB - Virtual size: 256B

.rsrc
Size: 13.1MB - Virtual size: 13.1MB

.rdata
Size: 4KB - Virtual size: 256B

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

.text
Size: 5.8MB - Virtual size: 5.8MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 549KB - Virtual size: 560KB

.pdata
Size: 350KB - Virtual size: 349KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 148KB - Virtual size: 148KB

33:00:00:03:8b:79:45:c1:8b:0e:b6:87:ec:00:00:00:00:03:8b
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

1c:71:48:c6:06:cf:b4:5c:c3:13:4d:c3:15:80:d2:4d:5d:06:68:5c:54:2a:e5:38:62:4e:6b:a9:dd:d2:db:f1
Signer

07/02/2023, 20:52
Valid: false

.text
Size: 20KB - Virtual size: 17KB

.imrsiv
Size: - Virtual size: 4B

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 984B

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 4KB - Virtual size: 72B