Windows.Cortana.OneCore.dll
v10.0.19041.6157
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x124f0
DllGetActivationFactory
#2 · 0x3720
DllGetClassObject
#3 · 0x12540
No function matches your filter.
Imported DLLs & functions 206
FindPackagesByPackageFamily
0x180047168
ApiSetQueryApiSetPresence
0x180047178
DebugBreak
0x180047190
IsDebuggerPresent
0x180047188
OutputDebugStringW
0x180047198
DelayLoadFailureHook
0x1800471a8
ResolveDelayLoadedAPI
0x1800471b8
GetLastError
0x1800471e8
RaiseException
0x1800471c8
SetLastError
0x1800471d0
SetUnhandledExceptionFilter
0x1800471d8
UnhandledExceptionFilter
0x1800471e0
CreateDirectoryW
0x180047208
DeleteFileW
0x180047218
FindClose
0x180047210
FindFirstFileW
0x180047200
FindNextFileW
0x180047220
GetFileAttributesW
0x1800471f8
CopyFileW
0x180047230
CloseHandle
0x180047240
GetProcessHeap
0x180047250
HeapAlloc
0x180047258
HeapFree
0x180047260
InitializeSListHead
0x180047290
InterlockedPushEntrySList
0x180047288
DisableThreadLibraryCalls
0x1800472a0
GetModuleFileNameA
0x1800472a8
GetModuleHandleExW
0x1800472b0
GetModuleHandleW
0x1800472c0
GetProcAddress
0x1800472b8
FormatMessageW
0x1800472d8
LocaleNameToLCID
0x1800472e0
ResolveLocaleName
0x1800472d0
PathCchCombine
0x1800472f0
ExpandEnvironmentStringsW
0x180047300
GetCurrentProcess
0x180047318
GetCurrentProcessId
0x180047320
GetCurrentThread
0x180047340
GetCurrentThreadId
0x180047330
GetProcessId
0x180047328
OpenProcessToken
0x180047338
OpenThreadToken
0x180047350
ProcessIdToSessionId
0x180047348
TerminateProcess
0x180047310
IsProcessorFeaturePresent
0x180047360
OpenProcess
0x180047368
QueryPerformanceCounter
0x180047378
K32EnumProcesses
0x180047390
K32EnumProcessModules
0x180047398
K32GetModuleBaseNameW
0x180047388
QueryFullProcessImageNameW
0x1800473a0
RegCloseKey
0x1800473b0
RegCreateKeyExW
0x1800473d0
RegDeleteValueW
0x1800473c0
RegEnumKeyExW
0x1800473b8
RegGetValueW
0x1800473c8
RegOpenKeyExW
0x1800473d8
RtlCaptureContext
0x1800473f8
RtlLookupFunctionEntry
0x1800473f0
RtlVirtualUnwind
0x1800473e8
InitiateSystemShutdownExW
0x180047408
CompareStringOrdinal
0x180047418
SHLoadIndirectString
0x180047428
AcquireSRWLockExclusive
0x180047448
AcquireSRWLockShared
0x180047458
CreateEventExW
0x1800474d0
CreateEventW
0x180047450
CreateMutexExW
0x180047478
CreateSemaphoreExW
0x1800474c8
DeleteCriticalSection
0x1800474a8
EnterCriticalSection
0x1800474a0
InitializeCriticalSectionAndSpinCount
0x180047438
InitializeCriticalSectionEx
0x1800474b8
InitializeSRWLock
0x1800474d8
LeaveCriticalSection
0x180047490
OpenSemaphoreW
0x180047460
ReleaseMutex
0x180047488
ReleaseSemaphore
0x1800474b0
ReleaseSRWLockExclusive
0x180047470
ReleaseSRWLockShared
0x180047468
ResetEvent
0x180047480
SetEvent
0x1800474c0
WaitForSingleObject
0x180047498
WaitForSingleObjectEx
0x180047440
InitOnceBeginInitialize
0x180047500
InitOnceComplete
0x1800474f0
InitOnceExecuteOnce
0x1800474f8
Sleep
0x1800474e8
CloseThreadpoolTimer
0x180047530
CreateThreadpoolTimer
0x180047538
SetThreadpoolTimer
0x180047540
WaitForThreadpoolTimerCallbacks
0x180047528
GetRestrictedErrorInfo
0x180047568
RoOriginateError
0x180047570
RoOriginateErrorW
0x180047578
RoTransformError
0x180047580
SetRestrictedErrorInfo
0x180047588
IsErrorPropagationEnabled
0x1800475a8
RoGetMatchingRestrictedErrorInfo
0x1800475a0
RoOriginateLanguageException
0x1800475b0
RoReportFailedDelegate
0x180047598
RoCreatePropertySetSerializer
0x1800475c0
__C_specific_handler
0x180047638
__CxxFrameHandler3
0x180047680
__CxxFrameHandler4
0x1800476c0
__std_terminate
0x1800476b8
_CxxThrowException
0x180047678
_o___std_exception_copy
0x1800476b0
_o___std_exception_destroy
0x1800476a8
_o___std_type_info_destroy_list
0x1800476a0
_o___stdio_common_vsnprintf_s
0x180047698
_o___stdio_common_vswprintf
0x180047690
_o__callnewh
0x180047670
_o__cexit
0x180047668
_o__configure_narrow_argv
0x180047660
_o__crt_atexit
0x180047658
_o__errno
0x180047650
_o__execute_onexit_table
0x180047648
_o__initialize_narrow_environment
0x1800475d0
_o__initialize_onexit_table
0x1800475d8
_o__invalid_parameter_noinfo
0x1800475e0
_o__invalid_parameter_noinfo_noreturn
0x1800475e8
_o__purecall
0x1800475f0
_o__register_onexit_function
0x1800475f8
_o__seh_filter_dll
0x180047600
_o__wcsicmp
0x180047610
_o_free
0x180047618
_o_malloc
0x180047620
_o_realloc
0x180047628
_o_terminate
0x180047630
memcmp
0x1800476c8
memcpy
0x1800476d0
memmove
0x180047608
strchr
0x180047688
wcsrchr
0x180047640
EventRegister
0x180047728
EventSetInformation
0x180047720
EventUnregister
0x180047718
EventWriteTransfer
0x180047710
PowerGetActiveScheme
0x180047740
PowerSettingRegisterNotification
0x180047758
PowerSettingUnregisterNotification
0x180047738
PowerWriteACValueIndex
0x180047748
PowerWriteDCValueIndex
0x180047750
LookupPrivilegeValueW
0x180047768
BuildTrusteeWithSidW
0x180047778
CloseServiceHandle
0x180047798
OpenSCManagerW
0x180047790
OpenServiceW
0x180047788
QueryServiceConfigW
0x1800477a8
QueryServiceStatus
0x1800477b8
SHCreateItemFromParsingName
0x1800477c8
_Wcscoll
0x180047818
_Wcsxfrm
0x1800477f8
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x180047840
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x180047810
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
0x180047858
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
0x1800477d8
?_Incref@facet@locale@std@@UEAAXXZ
0x180047848
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x1800477f0
?_Xbad_alloc@std@@YAXXZ
0x1800477e0
?_Xlength_error@std@@YAXPEBD@Z
0x180047880
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x180047800
??0_Locinfo@std@@QEAA@PEBD@Z
0x180047868
??0_Lockit@std@@QEAA@H@Z
0x180047878
??0facet@locale@std@@IEAA@_K@Z
0x180047838
??1_Locinfo@std@@QEAA@XZ
0x180047860
??1_Lockit@std@@QEAA@XZ
0x180047870
??1facet@locale@std@@MEAA@XZ
0x180047830
??Bid@locale@std@@QEAA_KXZ
0x180047850
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
0x180047808
?id@?$collate@G@std@@2V0locale@2@A
0x180047890
?id@?$ctype@G@std@@2V0locale@2@A
0x1800477e8
?is@?$ctype@G@std@@QEBA_NFG@Z
0x180047828
?tolower@?$ctype@G@std@@QEBAGG@Z
0x180047820
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
0x180047888
NtPowerInformation
0x1800478a8
NtQueryWnfStateData
0x1800478c0
RtlDeriveCapabilitySidsFromName
0x1800478a0
RtlEqualSid
0x1800478b0
RtlPublishWnfStateData
0x1800478b8
PowerApplySettingChanges
0x1800470c8
PowerClearUserAwayPrediction
0x1800470d8
PowerSetUserAwayPrediction
0x1800470e0
SetSuspendState
0x1800470d0
IUnknown_QueryService
0x180047108
SHCreateStreamOnFileEx
0x180047118
SHGetThreadRef
0x180047100
SHTaskPoolAllowThreadReuse
0x180047110
SHTaskPoolGetUniqueContext
0x1800470f0
SHTaskPoolQueueTask
0x1800470f8
PdcSignalClientPulse
0x180047130
PdcSignalClientRegister
0x180047128
PdcSignalClientUnregister
0x180047138
0x180047148
CreateXmlReader
0x180047158
No function matches your filter.