Windows.Cortana.OneCore.dll - Online Dependency Analysis & Download - DLLView

Windows.Cortana.OneCore.dll

Description: Windows.Cortana.OneCore

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6157

Architecture: 64-bit

Operating System: Windows NT

SHA256: 5c66eecbc363ccfbbf4cc8fca77e9232

File Size: 364.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x124f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x3720)
DllGetClassObject (Ordinal: 3, Address: 0x12540)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-1.dll

FindPackagesByPackageFamily (Address: 0x180047168)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180047178)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180047190)
IsDebuggerPresent (Address: 0x180047188)
OutputDebugStringW (Address: 0x180047198)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800471a8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800471b8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800471e8)
RaiseException (Address: 0x1800471c8)
SetLastError (Address: 0x1800471d0)
SetUnhandledExceptionFilter (Address: 0x1800471d8)
UnhandledExceptionFilter (Address: 0x1800471e0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x180047208)
DeleteFileW (Address: 0x180047218)
FindClose (Address: 0x180047210)
FindFirstFileW (Address: 0x180047200)
FindNextFileW (Address: 0x180047220)
GetFileAttributesW (Address: 0x1800471f8)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x180047230)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180047240)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180047250)
HeapAlloc (Address: 0x180047258)
HeapFree (Address: 0x180047260)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180047278)
LocalFree (Address: 0x180047270)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180047290)
InterlockedPushEntrySList (Address: 0x180047288)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800472a0)
GetModuleFileNameA (Address: 0x1800472a8)
GetModuleHandleExW (Address: 0x1800472b0)
GetModuleHandleW (Address: 0x1800472c0)
GetProcAddress (Address: 0x1800472b8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800472d8)
LocaleNameToLCID (Address: 0x1800472e0)
ResolveLocaleName (Address: 0x1800472d0)

api-ms-win-core-path-l1-1-0.dll

PathCchCombine (Address: 0x1800472f0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180047300)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180047318)
GetCurrentProcessId (Address: 0x180047320)
GetCurrentThread (Address: 0x180047340)
GetCurrentThreadId (Address: 0x180047330)
GetProcessId (Address: 0x180047328)
OpenProcessToken (Address: 0x180047338)
OpenThreadToken (Address: 0x180047350)
ProcessIdToSessionId (Address: 0x180047348)
TerminateProcess (Address: 0x180047310)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180047360)
OpenProcess (Address: 0x180047368)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180047378)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcesses (Address: 0x180047390)
K32EnumProcessModules (Address: 0x180047398)
K32GetModuleBaseNameW (Address: 0x180047388)
QueryFullProcessImageNameW (Address: 0x1800473a0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800473b0)
RegCreateKeyExW (Address: 0x1800473d0)
RegDeleteValueW (Address: 0x1800473c0)
RegEnumKeyExW (Address: 0x1800473b8)
RegGetValueW (Address: 0x1800473c8)
RegOpenKeyExW (Address: 0x1800473d8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800473f8)
RtlLookupFunctionEntry (Address: 0x1800473f0)
RtlVirtualUnwind (Address: 0x1800473e8)

api-ms-win-core-shutdown-l1-1-0.dll

InitiateSystemShutdownExW (Address: 0x180047408)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180047418)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x180047428)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180047448)
AcquireSRWLockShared (Address: 0x180047458)
CreateEventExW (Address: 0x1800474d0)
CreateEventW (Address: 0x180047450)
CreateMutexExW (Address: 0x180047478)
CreateSemaphoreExW (Address: 0x1800474c8)
DeleteCriticalSection (Address: 0x1800474a8)
EnterCriticalSection (Address: 0x1800474a0)
InitializeCriticalSectionAndSpinCount (Address: 0x180047438)
InitializeCriticalSectionEx (Address: 0x1800474b8)
InitializeSRWLock (Address: 0x1800474d8)
LeaveCriticalSection (Address: 0x180047490)
OpenSemaphoreW (Address: 0x180047460)
ReleaseMutex (Address: 0x180047488)
ReleaseSemaphore (Address: 0x1800474b0)
ReleaseSRWLockExclusive (Address: 0x180047470)
ReleaseSRWLockShared (Address: 0x180047468)
ResetEvent (Address: 0x180047480)
SetEvent (Address: 0x1800474c0)
WaitForSingleObject (Address: 0x180047498)
WaitForSingleObjectEx (Address: 0x180047440)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180047500)
InitOnceComplete (Address: 0x1800474f0)
InitOnceExecuteOnce (Address: 0x1800474f8)
Sleep (Address: 0x1800474e8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180047518)
GetTickCount (Address: 0x180047510)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180047530)
CreateThreadpoolTimer (Address: 0x180047538)
SetThreadpoolTimer (Address: 0x180047540)
WaitForThreadpoolTimerCallbacks (Address: 0x180047528)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180047550)
EncodePointer (Address: 0x180047558)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180047568)
RoOriginateError (Address: 0x180047570)
RoOriginateErrorW (Address: 0x180047578)
RoTransformError (Address: 0x180047580)
SetRestrictedErrorInfo (Address: 0x180047588)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1800475a8)
RoGetMatchingRestrictedErrorInfo (Address: 0x1800475a0)
RoOriginateLanguageException (Address: 0x1800475b0)
RoReportFailedDelegate (Address: 0x180047598)

api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x1800475c0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180047638)
__CxxFrameHandler3 (Address: 0x180047680)
__CxxFrameHandler4 (Address: 0x1800476c0)
__std_terminate (Address: 0x1800476b8)
_CxxThrowException (Address: 0x180047678)
_o___std_exception_copy (Address: 0x1800476b0)
_o___std_exception_destroy (Address: 0x1800476a8)
_o___std_type_info_destroy_list (Address: 0x1800476a0)
_o___stdio_common_vsnprintf_s (Address: 0x180047698)
_o___stdio_common_vswprintf (Address: 0x180047690)
_o__callnewh (Address: 0x180047670)
_o__cexit (Address: 0x180047668)
_o__configure_narrow_argv (Address: 0x180047660)
_o__crt_atexit (Address: 0x180047658)
_o__errno (Address: 0x180047650)
_o__execute_onexit_table (Address: 0x180047648)
_o__initialize_narrow_environment (Address: 0x1800475d0)
_o__initialize_onexit_table (Address: 0x1800475d8)
_o__invalid_parameter_noinfo (Address: 0x1800475e0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1800475e8)
_o__purecall (Address: 0x1800475f0)
_o__register_onexit_function (Address: 0x1800475f8)
_o__seh_filter_dll (Address: 0x180047600)
_o__wcsicmp (Address: 0x180047610)
_o_free (Address: 0x180047618)
_o_malloc (Address: 0x180047620)
_o_realloc (Address: 0x180047628)
_o_terminate (Address: 0x180047630)
memcmp (Address: 0x1800476c8)
memcpy (Address: 0x1800476d0)
memmove (Address: 0x180047608)
strchr (Address: 0x180047688)
wcsrchr (Address: 0x180047640)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800476e8)
_initterm_e (Address: 0x1800476e0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180047700)
wcscmp (Address: 0x1800476f8)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180047728)
EventSetInformation (Address: 0x180047720)
EventUnregister (Address: 0x180047718)
EventWriteTransfer (Address: 0x180047710)

api-ms-win-power-setting-l1-1-0.dll

PowerGetActiveScheme (Address: 0x180047740)
PowerSettingRegisterNotification (Address: 0x180047758)
PowerSettingUnregisterNotification (Address: 0x180047738)
PowerWriteACValueIndex (Address: 0x180047748)
PowerWriteDCValueIndex (Address: 0x180047750)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupPrivilegeValueW (Address: 0x180047768)

api-ms-win-security-trustee-l1-1-0.dll

BuildTrusteeWithSidW (Address: 0x180047778)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180047798)
OpenSCManagerW (Address: 0x180047790)
OpenServiceW (Address: 0x180047788)

api-ms-win-service-management-l2-1-0.dll

QueryServiceConfigW (Address: 0x1800477a8)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x1800477b8)

api-ms-win-shell-namespace-l1-1-0.dll

SHCreateItemFromParsingName (Address: 0x1800477c8)

msvcp_win.dll

_Wcscoll (Address: 0x180047818)
_Wcsxfrm (Address: 0x1800477f8)
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180047840)
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180047810)
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180047858)
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800477d8)
?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180047848)
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800477f0)
?_Xbad_alloc@std@@YAXXZ (Address: 0x1800477e0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180047880)
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180047800)
??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180047868)
??0_Lockit@std@@QEAA@H@Z (Address: 0x180047878)
??0facet@locale@std@@IEAA@_K@Z (Address: 0x180047838)
??1_Locinfo@std@@QEAA@XZ (Address: 0x180047860)
??1_Lockit@std@@QEAA@XZ (Address: 0x180047870)
??1facet@locale@std@@MEAA@XZ (Address: 0x180047830)
??Bid@locale@std@@QEAA_KXZ (Address: 0x180047850)
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ (Address: 0x180047808)
?id@?$collate@G@std@@2V0locale@2@A (Address: 0x180047890)
?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1800477e8)
?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x180047828)
?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x180047820)
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x180047888)

ntdll.dll

NtPowerInformation (Address: 0x1800478a8)
NtQueryWnfStateData (Address: 0x1800478c0)
RtlDeriveCapabilitySidsFromName (Address: 0x1800478a0)
RtlEqualSid (Address: 0x1800478b0)
RtlPublishWnfStateData (Address: 0x1800478b8)

POWRPROF.dll

PowerApplySettingChanges (Address: 0x1800470c8)
PowerClearUserAwayPrediction (Address: 0x1800470d8)
PowerSetUserAwayPrediction (Address: 0x1800470e0)
SetSuspendState (Address: 0x1800470d0)

SHCORE.dll

IUnknown_QueryService (Address: 0x180047108)
SHCreateStreamOnFileEx (Address: 0x180047118)
SHGetThreadRef (Address: 0x180047100)
SHTaskPoolAllowThreadReuse (Address: 0x180047110)
SHTaskPoolGetUniqueContext (Address: 0x1800470f0)
SHTaskPoolQueueTask (Address: 0x1800470f8)

UMPDC.dll

PdcSignalClientPulse (Address: 0x180047130)
PdcSignalClientRegister (Address: 0x180047128)
PdcSignalClientUnregister (Address: 0x180047138)

Windows.Storage.dll

(Address: 0x180047148)

XmlLite.dll

CreateXmlReader (Address: 0x180047158)