Windows.FileExplorer.Common.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 21
#2000 · 0x23b00
#2001 · 0x1bde0
ApplyProviderSettings
#2002 · 0x2f7b0
GatherProviderSettings
#2003 · 0x2f700
RegisterChangeNotifications
#2004 · 0x2f860
UnregisterChangeNotifications
#2005 · 0x2f880
DllCanUnloadNow
#2006 · 0xc890
DllGetClassObject
#2007 · 0xc870
FECommon_BindToFilePlaceholderHandler
#2008 · 0xccf0
FECommon_CSyncRootManager_CreateInstance
#2009 · 0xcb20
FECommon_CreatePlaceholderFile
#2010 · 0xcc00
FECommon_FilePlaceholder_BindToPrimaryStream
#2011 · 0xcbd0
FECommon_FilePlaceholder_CreateInstance
#2012 · 0xccd0
FECommon_GetPlaceholderStatesFromFileAttributesAndReparsePointTag
#2013 · 0xccb0
FECommon_GetSkyDriveNetworkStates
#2014 · 0xcb40
FECommon_GetStorageProviderDisplayName
#2015 · 0xcd10
FECommon_GetStorageProviderInfoFromItem
#2016 · 0xcd70
FECommon_PerformCloudFilePinAction
#2017 · 0xcd90
FECommon_SetPlaceholderReparsePointAttribute2
#2018 · 0xcc30
FECommon_SetPlaceholderReparsePointAttribute
#2019 · 0xcc90
FECommon_UpdateFilePlaceholderStates
#2020 · 0xcbb0
No function matches your filter.
Imported DLLs & functions 278
ApiSetQueryApiSetPresence
0x1004308c
CLSIDFromString
0x10043098
CoCreateFreeThreadedMarshaler
0x100430c4
CoCreateInstance
0x1004309c
CoCreateInstanceEx
0x10043094
CoGetApartmentType
0x100430a0
CoGetCallContext
0x100430a8
CoGetMalloc
0x100430b0
CoTaskMemAlloc
0x100430b8
CoTaskMemFree
0x100430ac
CoTaskMemRealloc
0x100430bc
CoWaitForMultipleHandles
0x100430a4
PropVariantClear
0x100430c0
StringFromGUID2
0x100430b4
RoGetAgileReference
0x100430cc
DebugBreak
0x100430d8
IsDebuggerPresent
0x100430d4
OutputDebugStringW
0x100430dc
DelayLoadFailureHook
0x100430e4
ResolveDelayLoadedAPI
0x100430ec
GetLastError
0x100430f8
RaiseException
0x10043100
SetLastError
0x100430fc
SetUnhandledExceptionFilter
0x100430f4
UnhandledExceptionFilter
0x10043104
CreateFileW
0x10043110
FindClose
0x10043124
FindFirstFileW
0x1004310c
GetFileInformationByHandle
0x10043114
GetFileSizeEx
0x10043128
SetEndOfFile
0x10043118
SetFileInformationByHandle
0x1004311c
SetFilePointerEx
0x10043120
GetFileInformationByHandleEx
0x10043130
GetProcessHeap
0x10043148
HeapAlloc
0x1004314c
HeapFree
0x10043144
InitializeSListHead
0x10043160
CancelIoEx
0x10043170
DeviceIoControl
0x10043168
GetOverlappedResult
0x1004316c
GetModuleFileNameA
0x10043180
GetModuleHandleExW
0x10043178
GetModuleHandleW
0x10043184
GetProcAddress
0x1004317c
ExpandEnvironmentStringsW
0x100431a4
GetCurrentProcess
0x100431b4
GetCurrentProcessId
0x100431c8
GetCurrentThread
0x100431bc
GetCurrentThreadId
0x100431ac
GetProcessId
0x100431c0
OpenProcessToken
0x100431b8
OpenThreadToken
0x100431c4
TerminateProcess
0x100431b0
IsProcessorFeaturePresent
0x100431d0
OpenProcess
0x100431d4
QueryPerformanceCounter
0x100431dc
QueryFullProcessImageNameW
0x100431e4
RegCloseKey
0x100431ec
RegCreateKeyExW
0x10043214
RegDeleteKeyExW
0x100431fc
RegDeleteTreeW
0x10043204
RegDeleteValueW
0x10043208
RegEnumKeyExW
0x10043200
RegEnumValueW
0x1004321c
RegGetValueW
0x1004320c
RegNotifyChangeKeyValue
0x100431f8
RegOpenKeyExW
0x100431f0
RegQueryInfoKeyW
0x10043218
RegQueryValueExW
0x100431f4
RegSetValueExW
0x10043210
RegSetKeyValueW
0x10043224
PathFileExistsW
0x1004322c
PathFindNextComponentW
0x10043238
PathGetDriveNumberW
0x1004323c
PathIsUNCW
0x10043230
PathParseIconLocationW
0x10043234
PathSkipRootW
0x10043240
QISearch
0x10043250
StrChrW
0x1004324c
StrStrIW
0x10043248
CompareStringOrdinal
0x10043258
SHLoadIndirectString
0x10043260
lstrlenW
0x10043268
AcquireSRWLockExclusive
0x100432bc
AcquireSRWLockShared
0x10043270
CreateEventExW
0x100432c0
CreateEventW
0x100432a4
CreateMutexExW
0x100432a8
CreateMutexW
0x10043288
CreateSemaphoreExW
0x100432a0
DeleteCriticalSection
0x10043280
EnterCriticalSection
0x10043278
InitializeCriticalSection
0x100432c4
InitializeCriticalSectionAndSpinCount
0x10043298
InitializeCriticalSectionEx
0x1004329c
InitializeSRWLock
0x100432b4
LeaveCriticalSection
0x10043290
OpenMutexW
0x1004327c
OpenSemaphoreW
0x100432d0
ReleaseMutex
0x10043284
ReleaseSemaphore
0x10043294
ReleaseSRWLockExclusive
0x100432b8
ReleaseSRWLockShared
0x100432cc
ResetEvent
0x100432ac
SetEvent
0x100432b0
WaitForMultipleObjectsEx
0x100432c8
WaitForSingleObject
0x1004328c
WaitForSingleObjectEx
0x10043274
InitOnceBeginInitialize
0x100432dc
InitOnceComplete
0x100432e4
InitOnceExecuteOnce
0x100432e0
Sleep
0x100432d8
GetSystemTimeAsFileTime
0x100432f4
GetTickCount
0x100432ec
GetTickCount64
0x100432f0
CloseThreadpoolTimer
0x100432fc
CloseThreadpoolWait
0x10043300
CreateThreadpoolTimer
0x10043318
CreateThreadpoolWait
0x10043314
SetThreadpoolTimer
0x1004330c
SetThreadpoolWait
0x10043304
WaitForThreadpoolTimerCallbacks
0x10043308
WaitForThreadpoolWaitCallbacks
0x10043310
PathIsURLW
0x10043320
GetRestrictedErrorInfo
0x10043338
RoOriginateError
0x1004333c
SetRestrictedErrorInfo
0x10043334
RoOriginateLanguageException
0x10043344
WindowsCreateString
0x10043364
WindowsCreateStringReference
0x10043360
WindowsDeleteString
0x10043358
WindowsGetStringRawBuffer
0x1004335c
__CxxFrameHandler3
0x10043404
__std_terminate
0x10043400
_CxxThrowException
0x100433bc
_except_handler4_common
0x100433b8
_o___std_exception_copy
0x100433f4
_o___std_exception_destroy
0x100433f0
_o___std_type_info_destroy_list
0x100433ec
_o___std_type_info_name
0x100433e8
_o___stdio_common_vsnprintf_s
0x100433e4
_o___stdio_common_vswprintf
0x100433e0
_o__beginthreadex
0x100433d8
_o__callnewh
0x100433d4
_o__cexit
0x100433d0
_o__configure_narrow_argv
0x100433cc
_o__crt_atexit
0x100433c8
_o__errno
0x100433c4
_o__execute_onexit_table
0x100433c0
_o__get_errno
0x1004336c
_o__initialize_narrow_environment
0x10043370
_o__initialize_onexit_table
0x10043374
_o__invalid_parameter_noinfo
0x10043378
_o__invalid_parameter_noinfo_noreturn
0x1004337c
_o__purecall
0x10043380
_o__register_onexit_function
0x10043384
_o__seh_filter_dll
0x10043388
_o__set_errno
0x1004338c
_o__wtoi
0x10043394
_o_ceil
0x10043398
_o_free
0x1004339c
_o_iswalpha
0x100433a0
_o_iswspace
0x100433a4
_o_malloc
0x100433a8
_o_realloc
0x100433ac
_o_terminate
0x100433b0
_o_toupper
0x100433b4
memcmp
0x10043408
memcpy
0x1004340c
memmove
0x10043390
strchr
0x100433dc
wcschr
0x100433f8
wcsrchr
0x100433fc
EventActivityIdControl
0x1004342c
EventProviderEnabled
0x10043440
EventRegister
0x10043438
EventSetInformation
0x10043430
EventUnregister
0x10043434
EventWriteTransfer
0x1004343c
CheckTokenMembership
0x10043458
CopySid
0x1004344c
GetLengthSid
0x10043450
GetTokenInformation
0x10043448
IsValidSid
0x10043454
ConvertSidToStringSidW
0x10043460
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x10043464
GetPersistedRegistryLocationW
0x1004346c
_Cnd_do_broadcast_at_thread_exit
0x100434bc
_Mtx_destroy_in_situ
0x1004349c
_Mtx_init_in_situ
0x100434d4
_Mtx_lock
0x100434e8
_Mtx_unlock
0x100434e0
_Thrd_detach
0x100434dc
_Wcscoll
0x100434a4
_Wcsxfrm
0x100434a8
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
0x100434c4
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x1004347c
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
0x1004348c
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x10043474
?_Incref@facet@locale@std@@UAEXXZ
0x100434a0
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
0x10043480
?_Throw_C_error@std@@YAXH@Z
0x100434e4
?_Throw_Cpp_error@std@@YAXH@Z
0x100434c8
?_Xbad_alloc@std@@YAXXZ
0x10043484
?_Xlength_error@std@@YAXPBD@Z
0x100434f0
?_Xout_of_range@std@@YAXPBD@Z
0x100434c0
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x100434cc
??0_Locinfo@std@@QAE@PBD@Z
0x100434ec
??0_Lockit@std@@QAE@H@Z
0x10043490
??0facet@locale@std@@IAE@I@Z
0x100434b8
??1_Locinfo@std@@QAE@XZ
0x100434b4
??1_Lockit@std@@QAE@XZ
0x100434b0
??1facet@locale@std@@MAE@XZ
0x100434ac
??Bid@locale@std@@QAEIXZ
0x100434d8
?id@?$collate@G@std@@2V0locale@2@A
0x10043488
?id@?$ctype@G@std@@2V0locale@2@A
0x10043478
?is@?$ctype@G@std@@QBE_NFG@Z
0x100434d0
?tolower@?$ctype@G@std@@QBEGG@Z
0x10043494
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
0x10043498
ntdll.dll
10
NtQueryInformationToken
0x10043518
NtQueryWnfStateData
0x100434fc
RtlAllocateHeap
0x10043514
RtlCompareUnicodeString
0x1004350c
RtlFreeHeap
0x10043508
RtlGetPersistedStateLocation
0x1004351c
RtlInitUnicodeString
0x10043504
RtlIsPartialPlaceholder
0x10043500
RtlNtStatusToDosErrorNoTeb
0x10043510
RtlPublishWnfStateData
0x100434f8
SHCORE.dll
17
0x1004300c
0x10043010
0x10043014
0x1004301c
0x10043020
0x10043028
0x1004302c
0x10043034
CreateStreamOverRandomAccessStream
0x1004304c
IStream_Reset
0x10043024
IUnknown_GetSite
0x10043048
IUnknown_QueryService
0x10043040
IUnknown_Set
0x10043044
SHDeleteValueW
0x10043038
SHEnumKeyExW
0x10043030
SHQueryInfoKeyW
0x1004303c
SHTaskPoolQueueTask
0x10043018
0x10043054
0x1004305c
0x10043070
0x10043074
0x10043078
0x10043084
ILFree
0x10043064
ILIsEqual
0x10043068
SHCreateItemFromParsingName
0x10043080
SHGetIDListFromObject
0x10043060
SHGetKnownFolderPath
0x10043058
SHParseDisplayName
0x1004307c
STORAGE_PathIsEqualOrSubFolderOfKnownFolders
0x1004306c
No function matches your filter.