Windows.UI.FileExplorer.dll

Description: Windows.UI.FileExplorer

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 05149f56ce7e377c0d2f94d5c2b9289e

File Size: 224.5 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2550)
  • DllGetClassObject (Ordinal: 2, Address: 0x2440)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1002a084)
  • CoCreateInstance (Address: 0x1002a074)
  • CoGetObjectContext (Address: 0x1002a080)
  • CoIncrementMTAUsage (Address: 0x1002a07c)
  • CoTaskMemAlloc (Address: 0x1002a06c)
  • CoTaskMemFree (Address: 0x1002a070)
  • PropVariantClear (Address: 0x1002a088)
  • StringFromGUID2 (Address: 0x1002a078)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1002a090)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1002a0a0)
  • IsDebuggerPresent (Address: 0x1002a098)
  • OutputDebugStringW (Address: 0x1002a09c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1002a0a8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1002a0b0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1002a0c0)
  • SetLastError (Address: 0x1002a0bc)
  • SetUnhandledExceptionFilter (Address: 0x1002a0c4)
  • UnhandledExceptionFilter (Address: 0x1002a0b8)
api-ms-win-core-file-l1-1-0.dll
  • GetFullPathNameW (Address: 0x1002a0cc)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1002a0d4)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002a0e0)
  • HeapAlloc (Address: 0x1002a0dc)
  • HeapFree (Address: 0x1002a0e4)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1002a0ec)
  • LocalFree (Address: 0x1002a0f0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1002a0f8)
  • InterlockedFlushSList (Address: 0x1002a0fc)
  • InterlockedPushEntrySList (Address: 0x1002a100)
api-ms-win-core-largeinteger-l1-1-0.dll
  • MulDiv (Address: 0x1002a108)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindStringOrdinal (Address: 0x1002a114)
  • GetModuleFileNameA (Address: 0x1002a11c)
  • GetModuleFileNameW (Address: 0x1002a124)
  • GetModuleHandleExW (Address: 0x1002a118)
  • GetModuleHandleW (Address: 0x1002a120)
  • GetProcAddress (Address: 0x1002a110)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002a12c)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • GetUserDefaultUILanguage (Address: 0x1002a134)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1002a144)
  • GetCurrentProcessId (Address: 0x1002a148)
  • GetCurrentThreadId (Address: 0x1002a13c)
  • TerminateProcess (Address: 0x1002a140)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1002a154)
  • OpenProcess (Address: 0x1002a150)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1002a15c)
api-ms-win-core-psapi-l1-1-0.dll
  • K32GetModuleFileNameExW (Address: 0x1002a164)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1002a16c)
  • RegGetValueW (Address: 0x1002a174)
  • RegOpenKeyExW (Address: 0x1002a178)
  • RegQueryInfoKeyW (Address: 0x1002a170)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x1002a180)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1002a188)
  • MultiByteToWideChar (Address: 0x1002a18c)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1002a1cc)
  • AcquireSRWLockShared (Address: 0x1002a1c0)
  • CreateMutexExW (Address: 0x1002a198)
  • CreateSemaphoreExW (Address: 0x1002a1bc)
  • DeleteCriticalSection (Address: 0x1002a194)
  • EnterCriticalSection (Address: 0x1002a1b8)
  • InitializeCriticalSectionEx (Address: 0x1002a1ac)
  • LeaveCriticalSection (Address: 0x1002a1b0)
  • OpenSemaphoreW (Address: 0x1002a1a0)
  • ReleaseMutex (Address: 0x1002a1c8)
  • ReleaseSemaphore (Address: 0x1002a1b4)
  • ReleaseSRWLockExclusive (Address: 0x1002a1c4)
  • ReleaseSRWLockShared (Address: 0x1002a19c)
  • WaitForSingleObject (Address: 0x1002a1a8)
  • WaitForSingleObjectEx (Address: 0x1002a1a4)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1002a1d8)
  • InitOnceComplete (Address: 0x1002a1dc)
  • InitOnceExecuteOnce (Address: 0x1002a1e0)
  • Sleep (Address: 0x1002a1d4)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1002a1e8)
  • GetTickCount (Address: 0x1002a1f0)
  • GetTickCount64 (Address: 0x1002a1ec)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1002a1fc)
  • CreateThreadpoolTimer (Address: 0x1002a204)
  • SetThreadpoolTimer (Address: 0x1002a200)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1002a1f8)
api-ms-win-core-url-l1-1-0.dll
  • PathIsURLW (Address: 0x1002a20c)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x1002a220)
  • RoFailFastWithErrorContext (Address: 0x1002a21c)
  • RoTransformError (Address: 0x1002a218)
  • SetRestrictedErrorInfo (Address: 0x1002a214)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoOriginateLanguageException (Address: 0x1002a228)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1002a230)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x1002a24c)
  • WindowsCreateStringReference (Address: 0x1002a254)
  • WindowsDeleteString (Address: 0x1002a248)
  • WindowsDeleteStringBuffer (Address: 0x1002a250)
  • WindowsDuplicateString (Address: 0x1002a244)
  • WindowsGetStringRawBuffer (Address: 0x1002a240)
  • WindowsPreallocateStringBuffer (Address: 0x1002a238)
  • WindowsPromoteStringBuffer (Address: 0x1002a23c)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1002a290)
  • __std_terminate (Address: 0x1002a294)
  • _CxxThrowException (Address: 0x1002a2d4)
  • _except_handler4_common (Address: 0x1002a2d8)
  • _o___std_exception_copy (Address: 0x1002a2d0)
  • _o___std_exception_destroy (Address: 0x1002a2cc)
  • _o___std_type_info_destroy_list (Address: 0x1002a2c8)
  • _o___stdio_common_vsnprintf_s (Address: 0x1002a2c4)
  • _o___stdio_common_vsprintf_s (Address: 0x1002a2c0)
  • _o___stdio_common_vswprintf (Address: 0x1002a2bc)
  • _o__callnewh (Address: 0x1002a2b0)
  • _o__cexit (Address: 0x1002a2ac)
  • _o__configure_narrow_argv (Address: 0x1002a2b8)
  • _o__crt_atexit (Address: 0x1002a2b4)
  • _o__errno (Address: 0x1002a2a8)
  • _o__execute_onexit_table (Address: 0x1002a2a4)
  • _o__initialize_narrow_environment (Address: 0x1002a25c)
  • _o__initialize_onexit_table (Address: 0x1002a260)
  • _o__invalid_parameter_noinfo (Address: 0x1002a264)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1002a268)
  • _o__purecall (Address: 0x1002a26c)
  • _o__register_onexit_function (Address: 0x1002a270)
  • _o__seh_filter_dll (Address: 0x1002a274)
  • _o_ceil (Address: 0x1002a278)
  • _o_free (Address: 0x1002a27c)
  • _o_iswspace (Address: 0x1002a280)
  • _o_malloc (Address: 0x1002a284)
  • _o_terminate (Address: 0x1002a288)
  • _o_toupper (Address: 0x1002a28c)
  • memcmp (Address: 0x1002a298)
  • memcpy (Address: 0x1002a29c)
  • memmove (Address: 0x1002a2a0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1002a2e4)
  • _initterm_e (Address: 0x1002a2e0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1002a2f4)
  • strlen (Address: 0x1002a2f8)
  • wcslen (Address: 0x1002a2f0)
  • wcsncmp (Address: 0x1002a2ec)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1002a308)
  • EventProviderEnabled (Address: 0x1002a314)
  • EventRegister (Address: 0x1002a310)
  • EventSetInformation (Address: 0x1002a30c)
  • EventUnregister (Address: 0x1002a304)
  • EventWriteTransfer (Address: 0x1002a300)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1002a31c)
COMCTL32.dll
  • (Address: 0x1002a000)
  • (Address: 0x1002a004)
  • (Address: 0x1002a008)
msvcp_win.dll
  • _Mtx_destroy_in_situ (Address: 0x1002a328)
  • _Mtx_init_in_situ (Address: 0x1002a324)
  • _Mtx_lock (Address: 0x1002a354)
  • _Mtx_unlock (Address: 0x1002a32c)
  • ?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x1002a348)
  • ?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x1002a34c)
  • ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x1002a340)
  • ?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x1002a358)
  • ?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x1002a350)
  • ?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x1002a35c)
  • ?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x1002a334)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x1002a330)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1002a33c)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1002a338)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1002a344)
ntdll.dll
  • RtlNtStatusToDosError (Address: 0x1002a364)
  • RtlQueryWnfStateData (Address: 0x1002a368)
OLEACC.dll
  • CreateStdAccessibleObject (Address: 0x1002a014)
  • LresultFromObject (Address: 0x1002a010)
OLEAUT32.dll
  • SysAllocString (Address: 0x1002a01c)
  • SysFreeString (Address: 0x1002a020)
  • SysStringLen (Address: 0x1002a024)
  • VariantInit (Address: 0x1002a028)
PROPSYS.dll
  • PropVariantToUInt32 (Address: 0x1002a030)
RPCRT4.dll
  • UuidCreate (Address: 0x1002a038)
SHCORE.dll
  • (Address: 0x1002a044)
  • (Address: 0x1002a040)
SHELL32.dll
  • (Address: 0x1002a050)
  • (Address: 0x1002a04c)
  • SHCreateItemFromParsingName (Address: 0x1002a054)
  • SHParseDisplayName (Address: 0x1002a058)
SHLWAPI.dll
  • (Address: 0x1002a064)
  • PathIsUNCW (Address: 0x1002a060)