Windows.FileExplorer.Common.dll

Description: Windows.FileExplorer.Common

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: d545c769ab1b1743fefb5ac8eb7d7013

File Size: 284.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • (Ordinal: 2000, Address: 0x23b00)
  • (Ordinal: 2001, Address: 0x1bde0)
  • ApplyProviderSettings (Ordinal: 2002, Address: 0x2f7b0)
  • GatherProviderSettings (Ordinal: 2003, Address: 0x2f700)
  • RegisterChangeNotifications (Ordinal: 2004, Address: 0x2f860)
  • UnregisterChangeNotifications (Ordinal: 2005, Address: 0x2f880)
  • DllCanUnloadNow (Ordinal: 2006, Address: 0xc890)
  • DllGetClassObject (Ordinal: 2007, Address: 0xc870)
  • FECommon_BindToFilePlaceholderHandler (Ordinal: 2008, Address: 0xccf0)
  • FECommon_CSyncRootManager_CreateInstance (Ordinal: 2009, Address: 0xcb20)
  • FECommon_CreatePlaceholderFile (Ordinal: 2010, Address: 0xcc00)
  • FECommon_FilePlaceholder_BindToPrimaryStream (Ordinal: 2011, Address: 0xcbd0)
  • FECommon_FilePlaceholder_CreateInstance (Ordinal: 2012, Address: 0xccd0)
  • FECommon_GetPlaceholderStatesFromFileAttributesAndReparsePointTag (Ordinal: 2013, Address: 0xccb0)
  • FECommon_GetSkyDriveNetworkStates (Ordinal: 2014, Address: 0xcb40)
  • FECommon_GetStorageProviderDisplayName (Ordinal: 2015, Address: 0xcd10)
  • FECommon_GetStorageProviderInfoFromItem (Ordinal: 2016, Address: 0xcd70)
  • FECommon_PerformCloudFilePinAction (Ordinal: 2017, Address: 0xcd90)
  • FECommon_SetPlaceholderReparsePointAttribute2 (Ordinal: 2018, Address: 0xcc30)
  • FECommon_SetPlaceholderReparsePointAttribute (Ordinal: 2019, Address: 0xcc90)
  • FECommon_UpdateFilePlaceholderStates (Ordinal: 2020, Address: 0xcbb0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1004308c)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x10043098)
  • CoCreateFreeThreadedMarshaler (Address: 0x100430c4)
  • CoCreateInstance (Address: 0x1004309c)
  • CoCreateInstanceEx (Address: 0x10043094)
  • CoGetApartmentType (Address: 0x100430a0)
  • CoGetCallContext (Address: 0x100430a8)
  • CoGetMalloc (Address: 0x100430b0)
  • CoTaskMemAlloc (Address: 0x100430b8)
  • CoTaskMemFree (Address: 0x100430ac)
  • CoTaskMemRealloc (Address: 0x100430bc)
  • CoWaitForMultipleHandles (Address: 0x100430a4)
  • PropVariantClear (Address: 0x100430c0)
  • StringFromGUID2 (Address: 0x100430b4)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x100430cc)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100430d8)
  • IsDebuggerPresent (Address: 0x100430d4)
  • OutputDebugStringW (Address: 0x100430dc)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x100430e4)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x100430ec)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100430f8)
  • RaiseException (Address: 0x10043100)
  • SetLastError (Address: 0x100430fc)
  • SetUnhandledExceptionFilter (Address: 0x100430f4)
  • UnhandledExceptionFilter (Address: 0x10043104)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x10043110)
  • FindClose (Address: 0x10043124)
  • FindFirstFileW (Address: 0x1004310c)
  • GetFileInformationByHandle (Address: 0x10043114)
  • GetFileSizeEx (Address: 0x10043128)
  • SetEndOfFile (Address: 0x10043118)
  • SetFileInformationByHandle (Address: 0x1004311c)
  • SetFilePointerEx (Address: 0x10043120)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x10043130)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10043138)
  • DuplicateHandle (Address: 0x1004313c)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10043148)
  • HeapAlloc (Address: 0x1004314c)
  • HeapFree (Address: 0x10043144)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x10043158)
  • LocalFree (Address: 0x10043154)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x10043160)
api-ms-win-core-io-l1-1-0.dll
  • CancelIoEx (Address: 0x10043170)
  • DeviceIoControl (Address: 0x10043168)
  • GetOverlappedResult (Address: 0x1004316c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • GetModuleFileNameA (Address: 0x10043180)
  • GetModuleHandleExW (Address: 0x10043178)
  • GetModuleHandleW (Address: 0x10043184)
  • GetProcAddress (Address: 0x1004317c)
api-ms-win-core-localization-l1-2-0.dll
  • FindNLSStringEx (Address: 0x10043190)
  • FormatMessageW (Address: 0x1004318c)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x10043198)
  • PathCchRemoveFileSpec (Address: 0x1004319c)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100431a4)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100431b4)
  • GetCurrentProcessId (Address: 0x100431c8)
  • GetCurrentThread (Address: 0x100431bc)
  • GetCurrentThreadId (Address: 0x100431ac)
  • GetProcessId (Address: 0x100431c0)
  • OpenProcessToken (Address: 0x100431b8)
  • OpenThreadToken (Address: 0x100431c4)
  • TerminateProcess (Address: 0x100431b0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x100431d0)
  • OpenProcess (Address: 0x100431d4)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100431dc)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x100431e4)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100431ec)
  • RegCreateKeyExW (Address: 0x10043214)
  • RegDeleteKeyExW (Address: 0x100431fc)
  • RegDeleteTreeW (Address: 0x10043204)
  • RegDeleteValueW (Address: 0x10043208)
  • RegEnumKeyExW (Address: 0x10043200)
  • RegEnumValueW (Address: 0x1004321c)
  • RegGetValueW (Address: 0x1004320c)
  • RegNotifyChangeKeyValue (Address: 0x100431f8)
  • RegOpenKeyExW (Address: 0x100431f0)
  • RegQueryInfoKeyW (Address: 0x10043218)
  • RegQueryValueExW (Address: 0x100431f4)
  • RegSetValueExW (Address: 0x10043210)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x10043224)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x1004322c)
  • PathFindNextComponentW (Address: 0x10043238)
  • PathGetDriveNumberW (Address: 0x1004323c)
  • PathIsUNCW (Address: 0x10043230)
  • PathParseIconLocationW (Address: 0x10043234)
  • PathSkipRootW (Address: 0x10043240)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • QISearch (Address: 0x10043250)
  • StrChrW (Address: 0x1004324c)
  • StrStrIW (Address: 0x10043248)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10043258)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x10043260)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrlenW (Address: 0x10043268)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100432bc)
  • AcquireSRWLockShared (Address: 0x10043270)
  • CreateEventExW (Address: 0x100432c0)
  • CreateEventW (Address: 0x100432a4)
  • CreateMutexExW (Address: 0x100432a8)
  • CreateMutexW (Address: 0x10043288)
  • CreateSemaphoreExW (Address: 0x100432a0)
  • DeleteCriticalSection (Address: 0x10043280)
  • EnterCriticalSection (Address: 0x10043278)
  • InitializeCriticalSection (Address: 0x100432c4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10043298)
  • InitializeCriticalSectionEx (Address: 0x1004329c)
  • InitializeSRWLock (Address: 0x100432b4)
  • LeaveCriticalSection (Address: 0x10043290)
  • OpenMutexW (Address: 0x1004327c)
  • OpenSemaphoreW (Address: 0x100432d0)
  • ReleaseMutex (Address: 0x10043284)
  • ReleaseSemaphore (Address: 0x10043294)
  • ReleaseSRWLockExclusive (Address: 0x100432b8)
  • ReleaseSRWLockShared (Address: 0x100432cc)
  • ResetEvent (Address: 0x100432ac)
  • SetEvent (Address: 0x100432b0)
  • WaitForMultipleObjectsEx (Address: 0x100432c8)
  • WaitForSingleObject (Address: 0x1004328c)
  • WaitForSingleObjectEx (Address: 0x10043274)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100432dc)
  • InitOnceComplete (Address: 0x100432e4)
  • InitOnceExecuteOnce (Address: 0x100432e0)
  • Sleep (Address: 0x100432d8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x100432f4)
  • GetTickCount (Address: 0x100432ec)
  • GetTickCount64 (Address: 0x100432f0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100432fc)
  • CloseThreadpoolWait (Address: 0x10043300)
  • CreateThreadpoolTimer (Address: 0x10043318)
  • CreateThreadpoolWait (Address: 0x10043314)
  • SetThreadpoolTimer (Address: 0x1004330c)
  • SetThreadpoolWait (Address: 0x10043304)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10043308)
  • WaitForThreadpoolWaitCallbacks (Address: 0x10043310)
api-ms-win-core-url-l1-1-0.dll
  • PathIsURLW (Address: 0x10043320)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x10043328)
  • EncodePointer (Address: 0x1004332c)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x10043338)
  • RoOriginateError (Address: 0x1004333c)
  • SetRestrictedErrorInfo (Address: 0x10043334)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoOriginateLanguageException (Address: 0x10043344)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1004334c)
  • RoGetActivationFactory (Address: 0x10043350)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x10043364)
  • WindowsCreateStringReference (Address: 0x10043360)
  • WindowsDeleteString (Address: 0x10043358)
  • WindowsGetStringRawBuffer (Address: 0x1004335c)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x10043404)
  • __std_terminate (Address: 0x10043400)
  • _CxxThrowException (Address: 0x100433bc)
  • _except_handler4_common (Address: 0x100433b8)
  • _o___std_exception_copy (Address: 0x100433f4)
  • _o___std_exception_destroy (Address: 0x100433f0)
  • _o___std_type_info_destroy_list (Address: 0x100433ec)
  • _o___std_type_info_name (Address: 0x100433e8)
  • _o___stdio_common_vsnprintf_s (Address: 0x100433e4)
  • _o___stdio_common_vswprintf (Address: 0x100433e0)
  • _o__beginthreadex (Address: 0x100433d8)
  • _o__callnewh (Address: 0x100433d4)
  • _o__cexit (Address: 0x100433d0)
  • _o__configure_narrow_argv (Address: 0x100433cc)
  • _o__crt_atexit (Address: 0x100433c8)
  • _o__errno (Address: 0x100433c4)
  • _o__execute_onexit_table (Address: 0x100433c0)
  • _o__get_errno (Address: 0x1004336c)
  • _o__initialize_narrow_environment (Address: 0x10043370)
  • _o__initialize_onexit_table (Address: 0x10043374)
  • _o__invalid_parameter_noinfo (Address: 0x10043378)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1004337c)
  • _o__purecall (Address: 0x10043380)
  • _o__register_onexit_function (Address: 0x10043384)
  • _o__seh_filter_dll (Address: 0x10043388)
  • _o__set_errno (Address: 0x1004338c)
  • _o__wtoi (Address: 0x10043394)
  • _o_ceil (Address: 0x10043398)
  • _o_free (Address: 0x1004339c)
  • _o_iswalpha (Address: 0x100433a0)
  • _o_iswspace (Address: 0x100433a4)
  • _o_malloc (Address: 0x100433a8)
  • _o_realloc (Address: 0x100433ac)
  • _o_terminate (Address: 0x100433b0)
  • _o_toupper (Address: 0x100433b4)
  • memcmp (Address: 0x10043408)
  • memcpy (Address: 0x1004340c)
  • memmove (Address: 0x10043390)
  • strchr (Address: 0x100433dc)
  • wcschr (Address: 0x100433f8)
  • wcsrchr (Address: 0x100433fc)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x10043414)
  • _initterm_e (Address: 0x10043418)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x10043420)
  • wcsncmp (Address: 0x10043424)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1004342c)
  • EventProviderEnabled (Address: 0x10043440)
  • EventRegister (Address: 0x10043438)
  • EventSetInformation (Address: 0x10043430)
  • EventUnregister (Address: 0x10043434)
  • EventWriteTransfer (Address: 0x1004343c)
api-ms-win-security-base-l1-1-0.dll
  • CheckTokenMembership (Address: 0x10043458)
  • CopySid (Address: 0x1004344c)
  • GetLengthSid (Address: 0x10043450)
  • GetTokenInformation (Address: 0x10043448)
  • IsValidSid (Address: 0x10043454)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x10043460)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10043464)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1004346c)
msvcp_win.dll
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x100434bc)
  • _Mtx_destroy_in_situ (Address: 0x1004349c)
  • _Mtx_init_in_situ (Address: 0x100434d4)
  • _Mtx_lock (Address: 0x100434e8)
  • _Mtx_unlock (Address: 0x100434e0)
  • _Thrd_detach (Address: 0x100434dc)
  • _Wcscoll (Address: 0x100434a4)
  • _Wcsxfrm (Address: 0x100434a8)
  • ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x100434c4)
  • ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1004347c)
  • ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x1004348c)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x10043474)
  • ?_Incref@facet@locale@std@@UAEXXZ (Address: 0x100434a0)
  • ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x10043480)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x100434e4)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x100434c8)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x10043484)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100434f0)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100434c0)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x100434cc)
  • ??0_Locinfo@std@@QAE@PBD@Z (Address: 0x100434ec)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x10043490)
  • ??0facet@locale@std@@IAE@I@Z (Address: 0x100434b8)
  • ??1_Locinfo@std@@QAE@XZ (Address: 0x100434b4)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x100434b0)
  • ??1facet@locale@std@@MAE@XZ (Address: 0x100434ac)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x100434d8)
  • ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x10043488)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x10043478)
  • ?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x100434d0)
  • ?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x10043494)
  • ?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x10043498)
ntdll.dll
  • NtQueryInformationToken (Address: 0x10043518)
  • NtQueryWnfStateData (Address: 0x100434fc)
  • RtlAllocateHeap (Address: 0x10043514)
  • RtlCompareUnicodeString (Address: 0x1004350c)
  • RtlFreeHeap (Address: 0x10043508)
  • RtlGetPersistedStateLocation (Address: 0x1004351c)
  • RtlInitUnicodeString (Address: 0x10043504)
  • RtlIsPartialPlaceholder (Address: 0x10043500)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x10043510)
  • RtlPublishWnfStateData (Address: 0x100434f8)
OLEAUT32.dll
  • SysFreeString (Address: 0x10043004)
  • SysStringLen (Address: 0x10043000)
SHCORE.dll
  • (Address: 0x1004300c)
  • (Address: 0x10043010)
  • (Address: 0x10043014)
  • (Address: 0x1004301c)
  • (Address: 0x10043020)
  • (Address: 0x10043028)
  • (Address: 0x1004302c)
  • (Address: 0x10043034)
  • CreateStreamOverRandomAccessStream (Address: 0x1004304c)
  • IStream_Reset (Address: 0x10043024)
  • IUnknown_GetSite (Address: 0x10043048)
  • IUnknown_QueryService (Address: 0x10043040)
  • IUnknown_Set (Address: 0x10043044)
  • SHDeleteValueW (Address: 0x10043038)
  • SHEnumKeyExW (Address: 0x10043030)
  • SHQueryInfoKeyW (Address: 0x1004303c)
  • SHTaskPoolQueueTask (Address: 0x10043018)
Windows.Storage.dll
  • (Address: 0x10043054)
  • (Address: 0x1004305c)
  • (Address: 0x10043070)
  • (Address: 0x10043074)
  • (Address: 0x10043078)
  • (Address: 0x10043084)
  • ILFree (Address: 0x10043064)
  • ILIsEqual (Address: 0x10043068)
  • SHCreateItemFromParsingName (Address: 0x10043080)
  • SHGetIDListFromObject (Address: 0x10043060)
  • SHGetKnownFolderPath (Address: 0x10043058)
  • SHParseDisplayName (Address: 0x1004307c)
  • STORAGE_PathIsEqualOrSubFolderOfKnownFolders (Address: 0x1004306c)