windows.internal.shellcommon.shareexperience.dll

Description: Share Experience

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6cc77147ff56e74c6f3095e2e9c3370a

File Size: 318.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2ec0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x2bf0)
  • DllGetClassObject (Ordinal: 3, Address: 0x2dd0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x18003e9e0)
  • CoCreateGuid (Address: 0x18003ea18)
  • CoCreateInstance (Address: 0x18003e9f8)
  • CoDecrementMTAUsage (Address: 0x18003ea08)
  • CoGetApartmentType (Address: 0x18003e9d8)
  • CoIncrementMTAUsage (Address: 0x18003e9e8)
  • CoRegisterClassObject (Address: 0x18003ea20)
  • CoRevokeClassObject (Address: 0x18003ea00)
  • CoTaskMemAlloc (Address: 0x18003e9f0)
  • CoTaskMemFree (Address: 0x18003ea10)
  • CoTaskMemRealloc (Address: 0x18003ea28)
  • CoWaitForMultipleHandles (Address: 0x18003ea30)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18003ea40)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18003ea60)
  • IsDebuggerPresent (Address: 0x18003ea50)
  • OutputDebugStringW (Address: 0x18003ea58)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18003ea70)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18003ea80)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18003ea98)
  • RaiseException (Address: 0x18003eab0)
  • SetLastError (Address: 0x18003ea90)
  • SetUnhandledExceptionFilter (Address: 0x18003eaa8)
  • UnhandledExceptionFilter (Address: 0x18003eaa0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18003eac0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18003eae0)
  • HeapAlloc (Address: 0x18003ead8)
  • HeapFree (Address: 0x18003ead0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18003eaf0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18003eb00)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18003eb30)
  • FindResourceExW (Address: 0x18003eb38)
  • GetModuleFileNameA (Address: 0x18003eb48)
  • GetModuleHandleExW (Address: 0x18003eb10)
  • GetModuleHandleW (Address: 0x18003eb28)
  • GetProcAddress (Address: 0x18003eb20)
  • LoadResource (Address: 0x18003eb40)
  • LockResource (Address: 0x18003eb18)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18003eb58)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18003eb70)
  • GetCurrentProcessId (Address: 0x18003eb78)
  • GetCurrentThreadId (Address: 0x18003eb68)
  • GetExitCodeThread (Address: 0x18003eb80)
  • TerminateProcess (Address: 0x18003eb88)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18003eb98)
  • OpenProcess (Address: 0x18003eba0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18003ebb0)
api-ms-win-core-psapi-l1-1-0.dll
  • K32EnumProcesses (Address: 0x18003ebd0)
  • K32EnumProcessModules (Address: 0x18003ebc0)
  • K32GetModuleBaseNameW (Address: 0x18003ebc8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18003ec00)
  • RegEnumKeyExW (Address: 0x18003ebe8)
  • RegGetValueW (Address: 0x18003ebf8)
  • RegOpenKeyExW (Address: 0x18003ebe0)
  • RegQueryInfoKeyW (Address: 0x18003ebf0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18003ec18)
  • RtlLookupFunctionEntry (Address: 0x18003ec10)
  • RtlVirtualUnwind (Address: 0x18003ec20)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18003ec30)
  • WideCharToMultiByte (Address: 0x18003ec38)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18003ec48)
  • AcquireSRWLockShared (Address: 0x18003eca0)
  • CreateEventExW (Address: 0x18003eca8)
  • CreateMutexExW (Address: 0x18003ecc0)
  • CreateSemaphoreExW (Address: 0x18003ec90)
  • DeleteCriticalSection (Address: 0x18003ecc8)
  • EnterCriticalSection (Address: 0x18003ecb8)
  • InitializeCriticalSectionEx (Address: 0x18003ecd0)
  • InitializeSRWLock (Address: 0x18003ec58)
  • LeaveCriticalSection (Address: 0x18003ec70)
  • OpenSemaphoreW (Address: 0x18003ec80)
  • ReleaseMutex (Address: 0x18003ec50)
  • ReleaseSemaphore (Address: 0x18003ec60)
  • ReleaseSRWLockExclusive (Address: 0x18003ec88)
  • ReleaseSRWLockShared (Address: 0x18003ec78)
  • SetEvent (Address: 0x18003ec98)
  • WaitForSingleObject (Address: 0x18003ecb0)
  • WaitForSingleObjectEx (Address: 0x18003ec68)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18003ecf8)
  • InitOnceComplete (Address: 0x18003ecf0)
  • InitOnceExecuteOnce (Address: 0x18003ece0)
  • Sleep (Address: 0x18003ece8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18003ed18)
  • GetTickCount (Address: 0x18003ed08)
  • GetTickCount64 (Address: 0x18003ed10)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18003ed30)
  • CreateThreadpoolTimer (Address: 0x18003ed28)
  • SetThreadpoolTimer (Address: 0x18003ed40)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18003ed38)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18003ed50)
  • EncodePointer (Address: 0x18003ed58)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoFailFastWithErrorContext (Address: 0x18003ed88)
  • RoOriginateError (Address: 0x18003ed80)
  • RoOriginateErrorW (Address: 0x18003ed70)
  • RoTransformError (Address: 0x18003ed78)
  • SetRestrictedErrorInfo (Address: 0x18003ed68)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18003eda0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18003ed98)
  • RoReportFailedDelegate (Address: 0x18003eda8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18003edb8)
  • RoGetActivationFactory (Address: 0x18003edc0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x18003edd0)
  • WindowsCreateStringReference (Address: 0x18003edd8)
  • WindowsDeleteString (Address: 0x18003ee08)
  • WindowsDuplicateString (Address: 0x18003ede8)
  • WindowsGetStringRawBuffer (Address: 0x18003edf0)
  • WindowsIsStringEmpty (Address: 0x18003edf8)
  • WindowsStringHasEmbeddedNull (Address: 0x18003ee00)
  • WindowsSubstringWithSpecifiedLength (Address: 0x18003ede0)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18003eec0)
  • __CxxFrameHandler3 (Address: 0x18003ef10)
  • __CxxFrameHandler4 (Address: 0x18003ef58)
  • __std_terminate (Address: 0x18003ef50)
  • _CxxThrowException (Address: 0x18003ef18)
  • _o___std_exception_copy (Address: 0x18003ef48)
  • _o___std_exception_destroy (Address: 0x18003ef40)
  • _o___std_type_info_destroy_list (Address: 0x18003ef38)
  • _o___stdio_common_vsnprintf_s (Address: 0x18003ef30)
  • _o___stdio_common_vsprintf_s (Address: 0x18003ef28)
  • _o___stdio_common_vswprintf (Address: 0x18003ef20)
  • _o__callnewh (Address: 0x18003eef0)
  • _o__cexit (Address: 0x18003eee8)
  • _o__configure_narrow_argv (Address: 0x18003eee0)
  • _o__crt_atexit (Address: 0x18003eed8)
  • _o__errno (Address: 0x18003eed0)
  • _o__execute_onexit_table (Address: 0x18003eec8)
  • _o__get_errno (Address: 0x18003ee18)
  • _o__initialize_narrow_environment (Address: 0x18003ee20)
  • _o__initialize_onexit_table (Address: 0x18003ee28)
  • _o__invalid_parameter_noinfo (Address: 0x18003ee30)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18003ee38)
  • _o__purecall (Address: 0x18003ee40)
  • _o__register_onexit_function (Address: 0x18003ee48)
  • _o__seh_filter_dll (Address: 0x18003ee50)
  • _o__set_errno (Address: 0x18003ee58)
  • _o__wcsicmp (Address: 0x18003ee68)
  • _o__wcslwr_s (Address: 0x18003ee70)
  • _o_free (Address: 0x18003ee78)
  • _o_malloc (Address: 0x18003ee80)
  • _o_realloc (Address: 0x18003ee88)
  • _o_strncpy_s (Address: 0x18003ee90)
  • _o_strtol (Address: 0x18003ee98)
  • _o_terminate (Address: 0x18003eea0)
  • _o_toupper (Address: 0x18003eea8)
  • _o_wcscpy_s (Address: 0x18003eeb0)
  • _o_wcstok_s (Address: 0x18003eeb8)
  • memcmp (Address: 0x18003ef60)
  • memcpy (Address: 0x18003ef68)
  • memmove (Address: 0x18003ee60)
  • strchr (Address: 0x18003eef8)
  • strrchr (Address: 0x18003ef00)
  • wcsrchr (Address: 0x18003ef08)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18003ef80)
  • _initterm_e (Address: 0x18003ef78)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18003ef98)
  • wcscmp (Address: 0x18003ef90)
  • wcscspn (Address: 0x18003efa0)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18003efb0)
  • EventProviderEnabled (Address: 0x18003efd8)
  • EventRegister (Address: 0x18003efd0)
  • EventSetInformation (Address: 0x18003efb8)
  • EventUnregister (Address: 0x18003efc0)
  • EventWriteTransfer (Address: 0x18003efc8)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • EnumWindows (Address: 0x18003f000)
  • GetForegroundWindow (Address: 0x18003efe8)
  • GetWindowThreadProcessId (Address: 0x18003eff0)
  • IsWindowVisible (Address: 0x18003eff8)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolGetUniqueContext (Address: 0x18003f010)
  • SHTaskPoolQueueTask (Address: 0x18003f018)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHCreateThreadWithHandle (Address: 0x18003f028)
combase.dll
  • (Address: 0x18003f040)
  • (Address: 0x18003f038)
msvcp_win.dll
  • ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z (Address: 0x18003f058)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18003f078)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18003f080)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18003f060)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z (Address: 0x18003f070)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18003f050)
  • ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z (Address: 0x18003f090)
  • ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ (Address: 0x18003f088)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x18003f098)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x18003f0a8)
  • ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x18003f0a0)
  • ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z (Address: 0x18003f068)
ntdll.dll
  • RtlIsMultiUsersInSessionSku (Address: 0x18003f0c0)
  • RtlNtStatusToDosError (Address: 0x18003f0b8)
  • ZwQueryWnfStateData (Address: 0x18003f0c8)
RPCRT4.dll
  • UuidCreate (Address: 0x18003e9b8)
USER32.dll
  • SwitchToThisWindow (Address: 0x18003e9c8)