Windows.FileExplorer.Common.dll

Description: Windows.FileExplorer.Common

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6c6b18306c001312f900cdf85cdc440e

File Size: 375.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 2000, Address: 0x26d80)
(Ordinal: 2001, Address: 0x1bca0)
ApplyProviderSettings (Ordinal: 2002, Address: 0x34940)
GatherProviderSettings (Ordinal: 2003, Address: 0x347e0)
RegisterChangeNotifications (Ordinal: 2004, Address: 0x34a80)
UnregisterChangeNotifications (Ordinal: 2005, Address: 0x34b70)
DllCanUnloadNow (Ordinal: 2006, Address: 0x7360)
DllGetClassObject (Ordinal: 2007, Address: 0x7270)
FECommon_BindToFilePlaceholderHandler (Ordinal: 2008, Address: 0x7ae0)
FECommon_CSyncRootManager_CreateInstance (Ordinal: 2009, Address: 0x76a0)
FECommon_CreatePlaceholderFile (Ordinal: 2010, Address: 0x7a00)
FECommon_FilePlaceholder_BindToPrimaryStream (Ordinal: 2011, Address: 0x7900)
FECommon_FilePlaceholder_CreateInstance (Ordinal: 2012, Address: 0x7ad0)
FECommon_GetPlaceholderStatesFromFileAttributesAndReparsePointTag (Ordinal: 2013, Address: 0x7ac0)
FECommon_GetSkyDriveNetworkStates (Ordinal: 2014, Address: 0x76b0)
FECommon_GetStorageProviderDisplayName (Ordinal: 2015, Address: 0x7af0)
FECommon_GetStorageProviderInfoFromItem (Ordinal: 2016, Address: 0x7b70)
FECommon_PerformCloudFilePinAction (Ordinal: 2017, Address: 0x7b80)
FECommon_SetPlaceholderReparsePointAttribute (Ordinal: 2018, Address: 0x7aa0)
FECommon_SetPlaceholderReparsePointAttribute2 (Ordinal: 2019, Address: 0x7a10)
FECommon_UpdateFilePlaceholderStates (Ordinal: 2020, Address: 0x77f0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18004b4c8)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x18004b528)
CoCreateFreeThreadedMarshaler (Address: 0x18004b538)
CoCreateInstance (Address: 0x18004b4f0)
CoCreateInstanceEx (Address: 0x18004b4d8)
CoGetApartmentType (Address: 0x18004b518)
CoGetCallContext (Address: 0x18004b520)
CoGetMalloc (Address: 0x18004b4e0)
CoTaskMemAlloc (Address: 0x18004b530)
CoTaskMemFree (Address: 0x18004b508)
CoTaskMemRealloc (Address: 0x18004b510)
CoWaitForMultipleHandles (Address: 0x18004b500)
PropVariantClear (Address: 0x18004b4e8)
StringFromGUID2 (Address: 0x18004b4f8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18004b548)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004b568)
IsDebuggerPresent (Address: 0x18004b560)
OutputDebugStringW (Address: 0x18004b558)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004b578)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004b588)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004b5a8)
RaiseException (Address: 0x18004b5b8)
SetLastError (Address: 0x18004b5a0)
SetUnhandledExceptionFilter (Address: 0x18004b5b0)
UnhandledExceptionFilter (Address: 0x18004b598)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18004b5e8)
FindClose (Address: 0x18004b5e0)
FindFirstFileW (Address: 0x18004b5d0)
GetFileInformationByHandle (Address: 0x18004b5c8)
GetFileSizeEx (Address: 0x18004b600)
SetEndOfFile (Address: 0x18004b5f0)
SetFileInformationByHandle (Address: 0x18004b5d8)
SetFilePointerEx (Address: 0x18004b5f8)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x18004b610)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004b628)
DuplicateHandle (Address: 0x18004b620)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004b640)
HeapAlloc (Address: 0x18004b648)
HeapFree (Address: 0x18004b638)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18004b658)
LocalFree (Address: 0x18004b660)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18004b670)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x18004b688)
DeviceIoControl (Address: 0x18004b690)
GetOverlappedResult (Address: 0x18004b680)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18004b6a0)
GetModuleHandleExW (Address: 0x18004b6b0)
GetModuleHandleW (Address: 0x18004b6a8)
GetProcAddress (Address: 0x18004b6b8)

api-ms-win-core-localization-l1-2-0.dll

FindNLSStringEx (Address: 0x18004b6d0)
FormatMessageW (Address: 0x18004b6c8)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x18004b6e8)
PathCchRemoveFileSpec (Address: 0x18004b6e0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18004b6f8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004b730)
GetCurrentProcessId (Address: 0x18004b740)
GetCurrentThread (Address: 0x18004b708)
GetCurrentThreadId (Address: 0x18004b738)
GetProcessId (Address: 0x18004b720)
OpenProcessToken (Address: 0x18004b710)
OpenThreadToken (Address: 0x18004b718)
TerminateProcess (Address: 0x18004b728)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18004b750)
OpenProcess (Address: 0x18004b758)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004b768)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18004b778)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004b7c8)
RegCreateKeyExW (Address: 0x18004b788)
RegDeleteKeyExW (Address: 0x18004b790)
RegDeleteTreeW (Address: 0x18004b798)
RegDeleteValueW (Address: 0x18004b7b0)
RegEnumKeyExW (Address: 0x18004b7e8)
RegEnumValueW (Address: 0x18004b7d0)
RegGetValueW (Address: 0x18004b7b8)
RegNotifyChangeKeyValue (Address: 0x18004b7d8)
RegOpenKeyExW (Address: 0x18004b7e0)
RegQueryInfoKeyW (Address: 0x18004b7c0)
RegQueryValueExW (Address: 0x18004b7a0)
RegSetValueExW (Address: 0x18004b7a8)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x18004b7f8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004b818)
RtlLookupFunctionEntry (Address: 0x18004b810)
RtlVirtualUnwind (Address: 0x18004b808)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x18004b830)
PathFindNextComponentW (Address: 0x18004b848)
PathGetDriveNumberW (Address: 0x18004b828)
PathIsUNCW (Address: 0x18004b838)
PathParseIconLocationW (Address: 0x18004b850)
PathSkipRootW (Address: 0x18004b840)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x18004b868)
StrChrW (Address: 0x18004b860)
StrStrIW (Address: 0x18004b870)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18004b880)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x18004b890)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenW (Address: 0x18004b8a0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004b8d8)
AcquireSRWLockShared (Address: 0x18004b8b0)
CreateEventExW (Address: 0x18004b940)
CreateEventW (Address: 0x18004b928)
CreateMutexExW (Address: 0x18004b8c0)
CreateMutexW (Address: 0x18004b8f0)
CreateSemaphoreExW (Address: 0x18004b918)
DeleteCriticalSection (Address: 0x18004b938)
EnterCriticalSection (Address: 0x18004b968)
InitializeCriticalSection (Address: 0x18004b930)
InitializeCriticalSectionAndSpinCount (Address: 0x18004b8e8)
InitializeCriticalSectionEx (Address: 0x18004b960)
InitializeSRWLock (Address: 0x18004b910)
LeaveCriticalSection (Address: 0x18004b970)
OpenMutexW (Address: 0x18004b900)
OpenSemaphoreW (Address: 0x18004b8b8)
ReleaseMutex (Address: 0x18004b950)
ReleaseSemaphore (Address: 0x18004b908)
ReleaseSRWLockExclusive (Address: 0x18004b8c8)
ReleaseSRWLockShared (Address: 0x18004b8e0)
ResetEvent (Address: 0x18004b920)
SetEvent (Address: 0x18004b958)
WaitForMultipleObjectsEx (Address: 0x18004b948)
WaitForSingleObject (Address: 0x18004b8f8)
WaitForSingleObjectEx (Address: 0x18004b8d0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18004b998)
InitOnceComplete (Address: 0x18004b988)
InitOnceExecuteOnce (Address: 0x18004b990)
Sleep (Address: 0x18004b980)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18004b9b0)
GetTickCount (Address: 0x18004b9b8)
GetTickCount64 (Address: 0x18004b9a8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004ba00)
CloseThreadpoolWait (Address: 0x18004b9e8)
CreateThreadpoolTimer (Address: 0x18004b9f0)
CreateThreadpoolWait (Address: 0x18004b9d0)
SetThreadpoolTimer (Address: 0x18004b9f8)
SetThreadpoolWait (Address: 0x18004b9d8)
WaitForThreadpoolTimerCallbacks (Address: 0x18004b9c8)
WaitForThreadpoolWaitCallbacks (Address: 0x18004b9e0)

api-ms-win-core-url-l1-1-0.dll

PathIsURLW (Address: 0x18004ba10)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18004ba28)
EncodePointer (Address: 0x18004ba20)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18004ba40)
RoOriginateError (Address: 0x18004ba48)
SetRestrictedErrorInfo (Address: 0x18004ba38)

api-ms-win-core-winrt-error-l1-1-1.dll

RoOriginateLanguageException (Address: 0x18004ba58)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18004ba68)
RoGetActivationFactory (Address: 0x18004ba70)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x18004ba88)
WindowsCreateStringReference (Address: 0x18004ba80)
WindowsDeleteString (Address: 0x18004ba98)
WindowsGetStringRawBuffer (Address: 0x18004ba90)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x18004baa8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18004bb40)
__CxxFrameHandler3 (Address: 0x18004bb48)
__CxxFrameHandler4 (Address: 0x18004bbe8)
__std_terminate (Address: 0x18004bbe0)
_CxxThrowException (Address: 0x18004bb50)
_o___std_exception_copy (Address: 0x18004bbc0)
_o___std_exception_destroy (Address: 0x18004bbb8)
_o___std_type_info_destroy_list (Address: 0x18004bbb0)
_o___std_type_info_name (Address: 0x18004bba8)
_o___stdio_common_vsnprintf_s (Address: 0x18004bba0)
_o___stdio_common_vswprintf (Address: 0x18004bb98)
_o__beginthreadex (Address: 0x18004bb90)
_o__callnewh (Address: 0x18004bb88)
_o__cexit (Address: 0x18004bb78)
_o__configure_narrow_argv (Address: 0x18004bb70)
_o__crt_atexit (Address: 0x18004bb68)
_o__errno (Address: 0x18004bb60)
_o__execute_onexit_table (Address: 0x18004bb58)
_o__get_errno (Address: 0x18004bb80)
_o__initialize_narrow_environment (Address: 0x18004bab8)
_o__initialize_onexit_table (Address: 0x18004bac0)
_o__invalid_parameter_noinfo (Address: 0x18004bac8)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18004bad0)
_o__purecall (Address: 0x18004bad8)
_o__register_onexit_function (Address: 0x18004bae0)
_o__seh_filter_dll (Address: 0x18004bae8)
_o__set_errno (Address: 0x18004baf0)
_o__wtoi (Address: 0x18004bb00)
_o_free (Address: 0x18004bb08)
_o_iswalpha (Address: 0x18004bb10)
_o_iswspace (Address: 0x18004bb18)
_o_malloc (Address: 0x18004bb20)
_o_realloc (Address: 0x18004bb28)
_o_terminate (Address: 0x18004bb30)
_o_toupper (Address: 0x18004bb38)
memcmp (Address: 0x18004bbf0)
memcpy (Address: 0x18004bbf8)
memmove (Address: 0x18004baf8)
strchr (Address: 0x18004bbc8)
wcschr (Address: 0x18004bbd0)
wcsrchr (Address: 0x18004bbd8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18004bc08)
_initterm_e (Address: 0x18004bc10)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18004bc20)
wcsncmp (Address: 0x18004bc28)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18004bc38)
EventProviderEnabled (Address: 0x18004bc60)
EventRegister (Address: 0x18004bc50)
EventSetInformation (Address: 0x18004bc40)
EventUnregister (Address: 0x18004bc48)
EventWriteTransfer (Address: 0x18004bc58)

api-ms-win-security-base-l1-1-0.dll

CheckTokenMembership (Address: 0x18004bc70)
CopySid (Address: 0x18004bc80)
GetLengthSid (Address: 0x18004bc88)
GetTokenInformation (Address: 0x18004bc78)
IsValidSid (Address: 0x18004bc90)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18004bca8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18004bca0)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18004bcb8)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18004bd48)
_Mtx_destroy_in_situ (Address: 0x18004bd20)
_Mtx_init_in_situ (Address: 0x18004bd90)
_Mtx_lock (Address: 0x18004bdb8)
_Mtx_unlock (Address: 0x18004bda8)
_Thrd_detach (Address: 0x18004bda0)
_Wcscoll (Address: 0x18004bd68)
_Wcsxfrm (Address: 0x18004bd70)
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18004bd38)
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18004bd50)
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18004bcf0)
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18004bce0)
?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18004bd60)
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18004bcd0)
?_Throw_C_error@std@@YAXH@Z (Address: 0x18004bdb0)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18004bd78)
?_Xbad_alloc@std@@YAXXZ (Address: 0x18004bcd8)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004bdc0)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004bd58)
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18004bcf8)
??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18004bd18)
??0_Lockit@std@@QEAA@H@Z (Address: 0x18004bd10)
??0facet@locale@std@@IEAA@_K@Z (Address: 0x18004bd88)
??1_Locinfo@std@@QEAA@XZ (Address: 0x18004bd30)
??1_Lockit@std@@QEAA@XZ (Address: 0x18004bd28)
??1facet@locale@std@@MEAA@XZ (Address: 0x18004bd80)
??Bid@locale@std@@QEAA_KXZ (Address: 0x18004bcc8)
?id@?$collate@G@std@@2V0locale@2@A (Address: 0x18004bce8)
?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x18004bd98)
?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x18004bd40)
?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x18004bd00)
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x18004bd08)

ntdll.dll

NtQueryInformationToken (Address: 0x18004be10)
NtQueryWnfStateData (Address: 0x18004bdd8)
RtlAllocateHeap (Address: 0x18004be08)
RtlCompareUnicodeString (Address: 0x18004bdf0)
RtlFreeHeap (Address: 0x18004be00)
RtlGetPersistedStateLocation (Address: 0x18004be18)
RtlInitUnicodeString (Address: 0x18004bde8)
RtlIsPartialPlaceholder (Address: 0x18004bde0)
RtlNtStatusToDosErrorNoTeb (Address: 0x18004bdf8)
RtlPublishWnfStateData (Address: 0x18004bdd0)

OLEAUT32.dll

SysFreeString (Address: 0x18004b3b0)
SysStringLen (Address: 0x18004b3b8)

SHCORE.dll

(Address: 0x18004b3e8)
(Address: 0x18004b3f0)
(Address: 0x18004b408)
(Address: 0x18004b410)
(Address: 0x18004b420)
(Address: 0x18004b428)
(Address: 0x18004b430)
(Address: 0x18004b440)
CreateStreamOverRandomAccessStream (Address: 0x18004b438)
IStream_Reset (Address: 0x18004b418)
IUnknown_GetSite (Address: 0x18004b3c8)
IUnknown_QueryService (Address: 0x18004b3d0)
IUnknown_Set (Address: 0x18004b3f8)
SHDeleteValueW (Address: 0x18004b3e0)
SHEnumKeyExW (Address: 0x18004b400)
SHQueryInfoKeyW (Address: 0x18004b3d8)
SHTaskPoolQueueTask (Address: 0x18004b448)

Windows.Storage.dll

(Address: 0x18004b468)
(Address: 0x18004b470)
(Address: 0x18004b480)
(Address: 0x18004b498)
(Address: 0x18004b4a0)
(Address: 0x18004b4a8)
ILFree (Address: 0x18004b488)
ILIsEqual (Address: 0x18004b458)
SHCreateItemFromParsingName (Address: 0x18004b4b8)
SHGetIDListFromObject (Address: 0x18004b460)
SHGetKnownFolderPath (Address: 0x18004b478)
SHParseDisplayName (Address: 0x18004b4b0)
STORAGE_PathIsEqualOrSubFolderOfKnownFolders (Address: 0x18004b490)