Windows.FileExplorer.Common.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 21
#2000 · 0x26d80
#2001 · 0x1bca0
ApplyProviderSettings
#2002 · 0x34940
GatherProviderSettings
#2003 · 0x347e0
RegisterChangeNotifications
#2004 · 0x34a80
UnregisterChangeNotifications
#2005 · 0x34b70
DllCanUnloadNow
#2006 · 0x7360
DllGetClassObject
#2007 · 0x7270
FECommon_BindToFilePlaceholderHandler
#2008 · 0x7ae0
FECommon_CSyncRootManager_CreateInstance
#2009 · 0x76a0
FECommon_CreatePlaceholderFile
#2010 · 0x7a00
FECommon_FilePlaceholder_BindToPrimaryStream
#2011 · 0x7900
FECommon_FilePlaceholder_CreateInstance
#2012 · 0x7ad0
FECommon_GetPlaceholderStatesFromFileAttributesAndReparsePointTag
#2013 · 0x7ac0
FECommon_GetSkyDriveNetworkStates
#2014 · 0x76b0
FECommon_GetStorageProviderDisplayName
#2015 · 0x7af0
FECommon_GetStorageProviderInfoFromItem
#2016 · 0x7b70
FECommon_PerformCloudFilePinAction
#2017 · 0x7b80
FECommon_SetPlaceholderReparsePointAttribute
#2018 · 0x7aa0
FECommon_SetPlaceholderReparsePointAttribute2
#2019 · 0x7a10
FECommon_UpdateFilePlaceholderStates
#2020 · 0x77f0
No function matches your filter.
Imported DLLs & functions 282
ApiSetQueryApiSetPresence
0x18004b4c8
CLSIDFromString
0x18004b528
CoCreateFreeThreadedMarshaler
0x18004b538
CoCreateInstance
0x18004b4f0
CoCreateInstanceEx
0x18004b4d8
CoGetApartmentType
0x18004b518
CoGetCallContext
0x18004b520
CoGetMalloc
0x18004b4e0
CoTaskMemAlloc
0x18004b530
CoTaskMemFree
0x18004b508
CoTaskMemRealloc
0x18004b510
CoWaitForMultipleHandles
0x18004b500
PropVariantClear
0x18004b4e8
StringFromGUID2
0x18004b4f8
RoGetAgileReference
0x18004b548
DebugBreak
0x18004b568
IsDebuggerPresent
0x18004b560
OutputDebugStringW
0x18004b558
DelayLoadFailureHook
0x18004b578
ResolveDelayLoadedAPI
0x18004b588
GetLastError
0x18004b5a8
RaiseException
0x18004b5b8
SetLastError
0x18004b5a0
SetUnhandledExceptionFilter
0x18004b5b0
UnhandledExceptionFilter
0x18004b598
CreateFileW
0x18004b5e8
FindClose
0x18004b5e0
FindFirstFileW
0x18004b5d0
GetFileInformationByHandle
0x18004b5c8
GetFileSizeEx
0x18004b600
SetEndOfFile
0x18004b5f0
SetFileInformationByHandle
0x18004b5d8
SetFilePointerEx
0x18004b5f8
GetFileInformationByHandleEx
0x18004b610
GetProcessHeap
0x18004b640
HeapAlloc
0x18004b648
HeapFree
0x18004b638
InitializeSListHead
0x18004b670
CancelIoEx
0x18004b688
DeviceIoControl
0x18004b690
GetOverlappedResult
0x18004b680
GetModuleFileNameA
0x18004b6a0
GetModuleHandleExW
0x18004b6b0
GetModuleHandleW
0x18004b6a8
GetProcAddress
0x18004b6b8
ExpandEnvironmentStringsW
0x18004b6f8
GetCurrentProcess
0x18004b730
GetCurrentProcessId
0x18004b740
GetCurrentThread
0x18004b708
GetCurrentThreadId
0x18004b738
GetProcessId
0x18004b720
OpenProcessToken
0x18004b710
OpenThreadToken
0x18004b718
TerminateProcess
0x18004b728
IsProcessorFeaturePresent
0x18004b750
OpenProcess
0x18004b758
QueryPerformanceCounter
0x18004b768
QueryFullProcessImageNameW
0x18004b778
RegCloseKey
0x18004b7c8
RegCreateKeyExW
0x18004b788
RegDeleteKeyExW
0x18004b790
RegDeleteTreeW
0x18004b798
RegDeleteValueW
0x18004b7b0
RegEnumKeyExW
0x18004b7e8
RegEnumValueW
0x18004b7d0
RegGetValueW
0x18004b7b8
RegNotifyChangeKeyValue
0x18004b7d8
RegOpenKeyExW
0x18004b7e0
RegQueryInfoKeyW
0x18004b7c0
RegQueryValueExW
0x18004b7a0
RegSetValueExW
0x18004b7a8
RegSetKeyValueW
0x18004b7f8
RtlCaptureContext
0x18004b818
RtlLookupFunctionEntry
0x18004b810
RtlVirtualUnwind
0x18004b808
PathFileExistsW
0x18004b830
PathFindNextComponentW
0x18004b848
PathGetDriveNumberW
0x18004b828
PathIsUNCW
0x18004b838
PathParseIconLocationW
0x18004b850
PathSkipRootW
0x18004b840
QISearch
0x18004b868
StrChrW
0x18004b860
StrStrIW
0x18004b870
CompareStringOrdinal
0x18004b880
SHLoadIndirectString
0x18004b890
lstrlenW
0x18004b8a0
AcquireSRWLockExclusive
0x18004b8d8
AcquireSRWLockShared
0x18004b8b0
CreateEventExW
0x18004b940
CreateEventW
0x18004b928
CreateMutexExW
0x18004b8c0
CreateMutexW
0x18004b8f0
CreateSemaphoreExW
0x18004b918
DeleteCriticalSection
0x18004b938
EnterCriticalSection
0x18004b968
InitializeCriticalSection
0x18004b930
InitializeCriticalSectionAndSpinCount
0x18004b8e8
InitializeCriticalSectionEx
0x18004b960
InitializeSRWLock
0x18004b910
LeaveCriticalSection
0x18004b970
OpenMutexW
0x18004b900
OpenSemaphoreW
0x18004b8b8
ReleaseMutex
0x18004b950
ReleaseSemaphore
0x18004b908
ReleaseSRWLockExclusive
0x18004b8c8
ReleaseSRWLockShared
0x18004b8e0
ResetEvent
0x18004b920
SetEvent
0x18004b958
WaitForMultipleObjectsEx
0x18004b948
WaitForSingleObject
0x18004b8f8
WaitForSingleObjectEx
0x18004b8d0
InitOnceBeginInitialize
0x18004b998
InitOnceComplete
0x18004b988
InitOnceExecuteOnce
0x18004b990
Sleep
0x18004b980
GetSystemTimeAsFileTime
0x18004b9b0
GetTickCount
0x18004b9b8
GetTickCount64
0x18004b9a8
CloseThreadpoolTimer
0x18004ba00
CloseThreadpoolWait
0x18004b9e8
CreateThreadpoolTimer
0x18004b9f0
CreateThreadpoolWait
0x18004b9d0
SetThreadpoolTimer
0x18004b9f8
SetThreadpoolWait
0x18004b9d8
WaitForThreadpoolTimerCallbacks
0x18004b9c8
WaitForThreadpoolWaitCallbacks
0x18004b9e0
PathIsURLW
0x18004ba10
GetRestrictedErrorInfo
0x18004ba40
RoOriginateError
0x18004ba48
SetRestrictedErrorInfo
0x18004ba38
RoOriginateLanguageException
0x18004ba58
RoActivateInstance
0x18004ba68
RoGetActivationFactory
0x18004ba70
WindowsCreateString
0x18004ba88
WindowsCreateStringReference
0x18004ba80
WindowsDeleteString
0x18004ba98
WindowsGetStringRawBuffer
0x18004ba90
ceilf
0x18004baa8
__C_specific_handler
0x18004bb40
__CxxFrameHandler3
0x18004bb48
__CxxFrameHandler4
0x18004bbe8
__std_terminate
0x18004bbe0
_CxxThrowException
0x18004bb50
_o___std_exception_copy
0x18004bbc0
_o___std_exception_destroy
0x18004bbb8
_o___std_type_info_destroy_list
0x18004bbb0
_o___std_type_info_name
0x18004bba8
_o___stdio_common_vsnprintf_s
0x18004bba0
_o___stdio_common_vswprintf
0x18004bb98
_o__beginthreadex
0x18004bb90
_o__callnewh
0x18004bb88
_o__cexit
0x18004bb78
_o__configure_narrow_argv
0x18004bb70
_o__crt_atexit
0x18004bb68
_o__errno
0x18004bb60
_o__execute_onexit_table
0x18004bb58
_o__get_errno
0x18004bb80
_o__initialize_narrow_environment
0x18004bab8
_o__initialize_onexit_table
0x18004bac0
_o__invalid_parameter_noinfo
0x18004bac8
_o__invalid_parameter_noinfo_noreturn
0x18004bad0
_o__purecall
0x18004bad8
_o__register_onexit_function
0x18004bae0
_o__seh_filter_dll
0x18004bae8
_o__set_errno
0x18004baf0
_o__wtoi
0x18004bb00
_o_free
0x18004bb08
_o_iswalpha
0x18004bb10
_o_iswspace
0x18004bb18
_o_malloc
0x18004bb20
_o_realloc
0x18004bb28
_o_terminate
0x18004bb30
_o_toupper
0x18004bb38
memcmp
0x18004bbf0
memcpy
0x18004bbf8
memmove
0x18004baf8
strchr
0x18004bbc8
wcschr
0x18004bbd0
wcsrchr
0x18004bbd8
EventActivityIdControl
0x18004bc38
EventProviderEnabled
0x18004bc60
EventRegister
0x18004bc50
EventSetInformation
0x18004bc40
EventUnregister
0x18004bc48
EventWriteTransfer
0x18004bc58
CheckTokenMembership
0x18004bc70
CopySid
0x18004bc80
GetLengthSid
0x18004bc88
GetTokenInformation
0x18004bc78
IsValidSid
0x18004bc90
ConvertSidToStringSidW
0x18004bca8
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18004bca0
GetPersistedRegistryLocationW
0x18004bcb8
_Cnd_do_broadcast_at_thread_exit
0x18004bd48
_Mtx_destroy_in_situ
0x18004bd20
_Mtx_init_in_situ
0x18004bd90
_Mtx_lock
0x18004bdb8
_Mtx_unlock
0x18004bda8
_Thrd_detach
0x18004bda0
_Wcscoll
0x18004bd68
_Wcsxfrm
0x18004bd70
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x18004bd38
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x18004bd50
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
0x18004bcf0
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
0x18004bce0
?_Incref@facet@locale@std@@UEAAXXZ
0x18004bd60
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x18004bcd0
?_Throw_C_error@std@@YAXH@Z
0x18004bdb0
?_Throw_Cpp_error@std@@YAXH@Z
0x18004bd78
?_Xbad_alloc@std@@YAXXZ
0x18004bcd8
?_Xlength_error@std@@YAXPEBD@Z
0x18004bdc0
?_Xout_of_range@std@@YAXPEBD@Z
0x18004bd58
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x18004bcf8
??0_Locinfo@std@@QEAA@PEBD@Z
0x18004bd18
??0_Lockit@std@@QEAA@H@Z
0x18004bd10
??0facet@locale@std@@IEAA@_K@Z
0x18004bd88
??1_Locinfo@std@@QEAA@XZ
0x18004bd30
??1_Lockit@std@@QEAA@XZ
0x18004bd28
??1facet@locale@std@@MEAA@XZ
0x18004bd80
??Bid@locale@std@@QEAA_KXZ
0x18004bcc8
?id@?$collate@G@std@@2V0locale@2@A
0x18004bce8
?id@?$ctype@G@std@@2V0locale@2@A
0x18004bd98
?is@?$ctype@G@std@@QEBA_NFG@Z
0x18004bd40
?tolower@?$ctype@G@std@@QEBAGG@Z
0x18004bd00
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
0x18004bd08
ntdll.dll
10
NtQueryInformationToken
0x18004be10
NtQueryWnfStateData
0x18004bdd8
RtlAllocateHeap
0x18004be08
RtlCompareUnicodeString
0x18004bdf0
RtlFreeHeap
0x18004be00
RtlGetPersistedStateLocation
0x18004be18
RtlInitUnicodeString
0x18004bde8
RtlIsPartialPlaceholder
0x18004bde0
RtlNtStatusToDosErrorNoTeb
0x18004bdf8
RtlPublishWnfStateData
0x18004bdd0
SHCORE.dll
17
0x18004b3e8
0x18004b3f0
0x18004b408
0x18004b410
0x18004b420
0x18004b428
0x18004b430
0x18004b440
CreateStreamOverRandomAccessStream
0x18004b438
IStream_Reset
0x18004b418
IUnknown_GetSite
0x18004b3c8
IUnknown_QueryService
0x18004b3d0
IUnknown_Set
0x18004b3f8
SHDeleteValueW
0x18004b3e0
SHEnumKeyExW
0x18004b400
SHQueryInfoKeyW
0x18004b3d8
SHTaskPoolQueueTask
0x18004b448
0x18004b468
0x18004b470
0x18004b480
0x18004b498
0x18004b4a0
0x18004b4a8
ILFree
0x18004b488
ILIsEqual
0x18004b458
SHCreateItemFromParsingName
0x18004b4b8
SHGetIDListFromObject
0x18004b460
SHGetKnownFolderPath
0x18004b478
SHParseDisplayName
0x18004b4b0
STORAGE_PathIsEqualOrSubFolderOfKnownFolders
0x18004b490
No function matches your filter.