Windows.Cortana.Desktop.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0xf3f0
DllGetActivationFactory
#2 · 0xf170
DllGetClassObject
#3 · 0x2c4c0
No function matches your filter.
Imported DLLs & functions 256
GetPackageFamilyName
0x180073fc8
GetPackagesByPackageFamily
0x180073fc0
ApiSetQueryApiSetPresence
0x180073fd8
DebugBreak
0x180073ff8
IsDebuggerPresent
0x180073ff0
OutputDebugStringW
0x180073fe8
DelayLoadFailureHook
0x180074008
ResolveDelayLoadedAPI
0x180074018
GetLastError
0x180074048
RaiseException
0x180074038
SetLastError
0x180074040
SetUnhandledExceptionFilter
0x180074028
UnhandledExceptionFilter
0x180074030
CreateFileW
0x180074060
GetDiskFreeSpaceExW
0x180074070
GetDriveTypeW
0x180074078
GetLogicalDriveStringsW
0x180074080
GetLongPathNameW
0x180074058
GetTempFileNameW
0x180074068
GetTempPathW
0x180074090
GetProcessHeap
0x1800740c0
HeapAlloc
0x1800740c8
HeapFree
0x1800740b8
LocalFree
0x1800740d8
DisableThreadLibraryCalls
0x180074100
GetModuleFileNameA
0x1800740f8
GetModuleHandleExW
0x180074108
GetModuleHandleW
0x1800740e8
GetProcAddress
0x1800740f0
FormatMessageW
0x180074120
LocaleNameToLCID
0x180074128
ResolveLocaleName
0x180074118
PathAllocCombine
0x180074138
PathCchAppend
0x180074140
PathCchCombine
0x180074148
ExpandEnvironmentStringsW
0x180074158
GetCurrentProcess
0x180074190
GetCurrentProcessId
0x1800741a0
GetCurrentThread
0x180074180
GetCurrentThreadId
0x180074178
GetProcessId
0x180074170
OpenProcessToken
0x180074188
OpenThreadToken
0x180074198
TerminateProcess
0x180074168
OpenProcess
0x1800741b0
QueryPerformanceCounter
0x1800741c0
QueryFullProcessImageNameW
0x1800741d0
RegCloseKey
0x1800741f8
RegCreateKeyExW
0x1800741e8
RegGetValueW
0x180074200
RegOpenKeyExW
0x1800741f0
RegSetValueExW
0x1800741e0
RtlCaptureContext
0x180074238
RtlLookupFunctionEntry
0x180074230
RtlVirtualUnwind
0x180074228
PathCommonPrefixW
0x180074268
PathGetArgsW
0x180074258
PathStripPathW
0x180074248
PathUnquoteSpacesW
0x180074260
SHExpandEnvironmentStringsW
0x180074250
StrChrW
0x180074278
StrToIntW
0x180074288
StrTrimW
0x180074280
CompareStringOrdinal
0x1800742b0
GetStringTypeW
0x1800742a0
MultiByteToWideChar
0x180074298
WideCharToMultiByte
0x1800742a8
SHLoadIndirectString
0x1800742c0
lstrlenW
0x1800742d0
AcquireSRWLockExclusive
0x180074348
AcquireSRWLockShared
0x180074320
CreateEventExW
0x1800742f0
CreateMutexExW
0x180074338
CreateMutexW
0x180074328
CreateSemaphoreExW
0x180074318
DeleteCriticalSection
0x1800742e0
EnterCriticalSection
0x180074370
InitializeCriticalSectionEx
0x180074330
InitializeSRWLock
0x180074360
LeaveCriticalSection
0x180074368
OpenEventW
0x1800742f8
OpenSemaphoreW
0x180074358
ReleaseMutex
0x1800742e8
ReleaseSemaphore
0x180074350
ReleaseSRWLockExclusive
0x180074378
ReleaseSRWLockShared
0x180074340
SetEvent
0x180074300
WaitForSingleObject
0x180074310
WaitForSingleObjectEx
0x180074308
InitOnceBeginInitialize
0x180074390
InitOnceComplete
0x180074388
InitOnceExecuteOnce
0x1800743a8
Sleep
0x1800743a0
SleepConditionVariableSRW
0x1800743b0
WakeAllConditionVariable
0x180074398
GetSystemDirectoryW
0x1800743d0
GetSystemTimeAsFileTime
0x1800743c0
GetSystemWindowsDirectoryW
0x1800743c8
GetTickCount
0x1800743d8
GetSystemTimePreciseAsFileTime
0x1800743e8
CloseThreadpoolTimer
0x180074400
CreateThreadpoolTimer
0x180074410
SetThreadpoolTimer
0x1800743f8
WaitForThreadpoolTimerCallbacks
0x180074408
FileTimeToSystemTime
0x180074420
SystemTimeToFileTime
0x180074428
UrlGetPartW
0x180074438
GetRestrictedErrorInfo
0x180074480
RoOriginateError
0x180074468
RoOriginateErrorW
0x180074470
RoTransformError
0x180074478
SetRestrictedErrorInfo
0x180074460
IsErrorPropagationEnabled
0x180074498
RoGetMatchingRestrictedErrorInfo
0x180074490
RoReportFailedDelegate
0x1800744a0
RoActivateInstance
0x1800744b8
RoGetActivationFactory
0x1800744b0
WindowsCompareStringOrdinal
0x180074518
WindowsCreateString
0x1800744e0
WindowsCreateStringReference
0x1800744f8
WindowsDeleteString
0x180074508
WindowsDuplicateString
0x180074500
WindowsGetStringLen
0x1800744d0
WindowsGetStringRawBuffer
0x180074510
WindowsIsStringEmpty
0x1800744d8
WindowsStringHasEmbeddedNull
0x1800744e8
WindowsSubstring
0x1800744c8
WindowsSubstringWithSpecifiedLength
0x1800744f0
EventActivityIdControl
0x180074540
EventRegister
0x180074548
EventSetInformation
0x180074528
EventUnregister
0x180074530
EventWriteTransfer
0x180074538
GetSystemMetrics
0x180074558
EnableWindow
0x1800745b8
EnumWindows
0x180074588
FindWindowExW
0x180074580
FindWindowW
0x1800745a0
GetPropW
0x180074590
GetWindow
0x180074570
GetWindowLongPtrW
0x1800745b0
GetWindowTextW
0x180074578
PostMessageW
0x1800745c0
SendNotifyMessageW
0x1800745a8
SetForegroundWindow
0x180074598
ShowWindow
0x180074568
IUnknown_GetSite
0x1800745e0
IUnknown_QueryService
0x1800745d8
IUnknown_SetSite
0x1800745d0
SHRegGetValueW
0x180074608
SHCreateMemStream
0x180074620
SHCreateStreamOnFileEx
0x180074618
CreateRandomAccessStreamOverStream
0x180074630
SHTaskPoolAllowThreadReuse
0x180074640
SHTaskPoolGetUniqueContext
0x180074650
SHTaskPoolQueueTask
0x180074648
SHGetThreadRef
0x180074660
SHUnicodeToAnsi
0x180074670
SHCreateItemFromIDList
0x180074688
SHCreateItemFromParsingName
0x180074690
SHGetIDListFromObject
0x180074698
SHGetNameFromIDList
0x180074680
0x1800746b8
AssocCreate
0x1800746c8
AssocQueryStringW
0x1800746a8
IUnknown_GetWindow
0x1800746b0
PathRemoveArgsW
0x1800746c0
msvcrt.dll
62
___lc_codepage_func
0x180074860
___lc_collate_cp_func
0x180074848
___lc_handle_func
0x180074840
___mb_cur_max_func
0x180074870
__C_specific_handler
0x180074710
__crtCompareStringW
0x1800748a8
__crtLCMapStringW
0x1800748b0
__CxxFrameHandler3
0x1800746d8
__dllonexit
0x1800746f0
__pctype_func
0x180074858
_amsg_exit
0x180074730
_callnewh
0x180074880
_CxxThrowException
0x180074820
_errno
0x180074838
_get_errno
0x1800747c8
_initterm
0x180074718
_ismbblead
0x180074878
_lock
0x180074700
_onexit
0x1800746e8
_purecall
0x180074760
_set_errno
0x1800747c0
_unlock
0x1800746f8
_vsnprintf_s
0x180074740
_vsnwprintf
0x180074778
_wcsdup
0x1800748a0
_wcsicmp
0x180074800
_wcsnicmp
0x1800747b8
_wsetlocale
0x1800748b8
_XcptFilter
0x180074738
??_V@YAXPEAX@Z
0x180074780
??0bad_cast@@QEAA@AEBV0@@Z
0x1800747d8
??0bad_cast@@QEAA@PEBD@Z
0x1800747d0
??0exception@@QEAA@AEBQEBD@Z
0x180074798
??0exception@@QEAA@AEBQEBDH@Z
0x180074888
??0exception@@QEAA@AEBV0@@Z
0x180074748
??0exception@@QEAA@XZ
0x180074750
??1bad_cast@@UEAA@XZ
0x1800747e0
??1exception@@UEAA@XZ
0x180074758
??1type_info@@UEAA@XZ
0x1800746e0
??3@YAXPEAX@Z
0x180074768
?terminate@@YAXXZ
0x180074708
?what@exception@@UEBAPEBDXZ
0x1800747f0
abort
0x180074890
calloc
0x180074868
free
0x180074728
iswspace
0x1800747b0
malloc
0x180074720
memcmp
0x180074850
memcpy
0x180074828
memcpy_s
0x180074770
memmove
0x180074830
memmove_s
0x180074788
memset
0x180074898
realloc
0x180074790
setlocale
0x180074818
strchr
0x1800747e8
wcschr
0x1800747a8
wcscmp
0x1800748c0
wcscspn
0x180074808
wcsncmp
0x1800747a0
wcsncpy_s
0x1800747f8
wcsrchr
0x180074810
SysAllocString
0x180073f48
SysFreeString
0x180073f38
SysStringLen
0x180073f30
VariantClear
0x180073f40
VariantInit
0x180073f50
USER32.dll
11
CreatePopupMenu
0x180073fa0
DestroyIcon
0x180073f70
DestroyMenu
0x180073f90
ExitWindowsEx
0x180073fb0
GetDC
0x180073f60
GetMenuDefaultItem
0x180073f98
GetWindowDisplayAffinity
0x180073f78
GetWindowTextLengthW
0x180073f68
LockWorkStation
0x180073f80
ReleaseDC
0x180073fa8
SendInput
0x180073f88
No function matches your filter.