UpdateCoreExt.dll
v2.1002.408.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0xa3c30
DllGetClassObject
#2 · 0xa3bf0
DllInstall
#3 · 0xa3bc0
DllRegisterServer
#4 · 0xa3be0
DllUnregisterServer
#5 · 0xa3bd0
No function matches your filter.
Imported DLLs & functions 189
ADVAPI32.dll
17
AccessCheck
0x100bf024
DuplicateToken
0x100bf020
GetFileSecurityW
0x100bf01c
GetTokenInformation
0x100bf030
LsaNtStatusToWinError
0x100bf000
MapGenericMask
0x100bf018
OpenProcessToken
0x100bf02c
OpenThreadToken
0x100bf028
RegCloseKey
0x100bf038
RegDeleteKeyW
0x100bf010
RegDeleteValueW
0x100bf00c
RegEnumKeyExW
0x100bf008
RegEnumValueW
0x100bf034
RegOpenCurrentUser
0x100bf014
RegOpenKeyExW
0x100bf03c
RegQueryInfoKeyW
0x100bf004
RegQueryValueExW
0x100bf040
KERNEL32.dll
137
AreFileApisANSI
0x100bf1fc
CloseHandle
0x100bf0f4
CompareStringW
0x100bf1e4
CopyFileW
0x100bf0a0
CreateDirectoryW
0x100bf070
CreateEventA
0x100bf108
CreateEventW
0x100bf1d0
CreateFileW
0x100bf0f0
CreateMutexW
0x100bf0f8
CreateToolhelp32Snapshot
0x100bf16c
DecodePointer
0x100bf1a4
DeleteCriticalSection
0x100bf1a0
DeleteFileW
0x100bf074
DeviceIoControl
0x100bf088
EncodePointer
0x100bf144
EnterCriticalSection
0x100bf140
EnumSystemLocalesW
0x100bf244
ExitProcess
0x100bf22c
ExpandEnvironmentStringsW
0x100bf0a4
FindClose
0x100bf078
FindFirstFileExA
0x100bf264
FindFirstFileW
0x100bf07c
FindNextFileA
0x100bf268
FindNextFileW
0x100bf080
FindResourceExW
0x100bf128
FindResourceW
0x100bf12c
FlushFileBuffers
0x100bf254
FormatMessageA
0x100bf1f4
FormatMessageW
0x100bf0bc
FreeEnvironmentStringsW
0x100bf184
FreeLibrary
0x100bf0a8
GetACP
0x100bf248
GetCommandLineA
0x100bf190
GetCommandLineW
0x100bf18c
GetConsoleCP
0x100bf258
GetConsoleMode
0x100bf25c
GetCPInfo
0x100bf1f0
GetCurrentDirectoryW
0x100bf06c
GetCurrentProcess
0x100bf110
GetCurrentProcessId
0x100bf054
GetCurrentThread
0x100bf090
GetCurrentThreadId
0x100bf0fc
GetDateFormatW
0x100bf234
GetEnvironmentStringsW
0x100bf188
GetFileAttributesW
0x100bf0e8
GetFileSizeEx
0x100bf048
GetFileType
0x100bf250
GetFullPathNameW
0x100bf0c8
GetLastError
0x100bf168
GetLocaleInfoW
0x100bf1ec
GetModuleFileNameA
0x100bf0cc
GetModuleFileNameW
0x100bf0e4
GetModuleHandleA
0x100bf0d0
GetModuleHandleExW
0x100bf0ac
GetModuleHandleW
0x100bf0d4
GetOEMCP
0x100bf194
GetProcAddress
0x100bf0b0
GetProcessHeap
0x100bf148
GetProcessTimes
0x100bf114
GetStartupInfoW
0x100bf21c
GetStdHandle
0x100bf24c
GetStringTypeW
0x100bf1cc
GetSystemDirectoryW
0x100bf094
GetSystemInfo
0x100bf0c0
GetSystemTimeAsFileTime
0x100bf118
GetTempPathW
0x100bf058
GetTimeFormatW
0x100bf238
GetTimeZoneInformation
0x100bf230
GetUserDefaultLCID
0x100bf240
GetVersionExW
0x100bf0dc
GetWindowsDirectoryW
0x100bf098
HeapAlloc
0x100bf150
HeapDestroy
0x100bf14c
HeapFree
0x100bf160
HeapReAlloc
0x100bf154
HeapSize
0x100bf15c
InitializeCriticalSectionAndSpinCount
0x100bf08c
InitializeCriticalSectionEx
0x100bf164
InitializeSListHead
0x100bf208
InterlockedFlushSList
0x100bf228
InterlockedPushEntrySList
0x100bf224
IsDebuggerPresent
0x100bf200
IsProcessorFeaturePresent
0x100bf218
IsValidCodePage
0x100bf198
IsValidLocale
0x100bf23c
LCMapStringW
0x100bf1e8
LeaveCriticalSection
0x100bf13c
LoadLibraryExW
0x100bf0d8
LoadLibraryW
0x100bf0b4
LoadResource
0x100bf130
LocalAlloc
0x100bf0c4
LocalFree
0x100bf0b8
LockResource
0x100bf134
lstrcmpW
0x100bf09c
MoveFileExW
0x100bf1ac
MultiByteToWideChar
0x100bf064
OpenEventA
0x100bf1b0
OpenJobObjectW
0x100bf1c0
OpenProcess
0x100bf170
OutputDebugStringW
0x100bf10c
Process32FirstW
0x100bf0e0
Process32NextW
0x100bf1a8
ProcessIdToSessionId
0x100bf1c4
QueryInformationJobObject
0x100bf1bc
QueryPerformanceCounter
0x100bf120
QueryPerformanceFrequency
0x100bf11c
RaiseException
0x100bf19c
ReadConsoleW
0x100bf178
ReadFile
0x100bf260
ReleaseMutex
0x100bf04c
RemoveDirectoryW
0x100bf0ec
ResetEvent
0x100bf204
RtlUnwind
0x100bf220
SetEnvironmentVariableA
0x100bf180
SetEvent
0x100bf104
SetFileAttributesW
0x100bf084
SetFilePointerEx
0x100bf1f8
SetInformationJobObject
0x100bf1b8
SetLastError
0x100bf068
SetStdHandle
0x100bf17c
SetUnhandledExceptionFilter
0x100bf210
SizeofResource
0x100bf138
Sleep
0x100bf1c8
SystemTimeToFileTime
0x100bf1b4
TerminateProcess
0x100bf214
TlsAlloc
0x100bf1d4
TlsFree
0x100bf1e0
TlsGetValue
0x100bf1d8
TlsSetValue
0x100bf1dc
UnhandledExceptionFilter
0x100bf20c
VerifyVersionInfoW
0x100bf05c
VerSetConditionMask
0x100bf060
WaitForSingleObject
0x100bf050
WaitForSingleObjectEx
0x100bf100
WideCharToMultiByte
0x100bf124
WriteConsoleW
0x100bf174
WriteFile
0x100bf158
CoCreateInstance
0x100bf314
OLEAUT32.dll
17
LoadRegTypeLib
0x100bf294
LoadTypeLib
0x100bf290
SafeArrayCopy
0x100bf278
SafeArrayCreate
0x100bf270
SafeArrayDestroy
0x100bf28c
SafeArrayGetLBound
0x100bf284
SafeArrayGetUBound
0x100bf288
SafeArrayGetVartype
0x100bf274
SafeArrayLock
0x100bf280
SafeArrayUnlock
0x100bf27c
SysAllocString
0x100bf2a8
SysAllocStringLen
0x100bf298
SysFreeString
0x100bf2ac
SysStringLen
0x100bf2a4
VariantChangeType
0x100bf2b0
VariantClear
0x100bf29c
VariantInit
0x100bf2a0
CM_Get_DevNode_Status
0x100bf2dc
SetupDiDestroyDeviceInfoList
0x100bf2c8
SetupDiGetDeviceInstanceIdW
0x100bf2cc
SetupDiGetDeviceRegistryPropertyW
0x100bf2d4
SetupDiOpenDevRegKey
0x100bf2d0
SetupDiSetSelectedDevice
0x100bf2d8
SetupDiSetSelectedDriverW
0x100bf2c4
SetupGetFieldCount
0x100bf2e0
SetupGetStringFieldW
0x100bf2e4
SHGetFolderPathW
0x100bf2ec
PathFindFileNameW
0x100bf2f4
UnloadUserProfile
0x100bf2fc
GetFileVersionInfoSizeW
0x100bf304
GetFileVersionInfoW
0x100bf30c
VerQueryValueW
0x100bf308
No function matches your filter.