kdesktopshellext.dll

Description: wpsdesktop shellext

Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.

Version: 12.1.0.23542

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0579d882c370fc8fa865788e311e1878

File Size: 839.5 KB

Uploaded At: Dec. 4, 2025, 6:13 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x22a0)
  • DllGetClassObject (Ordinal: 2, Address: 0x2320)
  • DllInstall (Ordinal: 3, Address: 0x24c0)
  • DllRegisterServer (Ordinal: 4, Address: 0x24f0)
  • DllUnregisterServer (Ordinal: 5, Address: 0x2da0)

Imported DLLs & Functions

KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x10097150)
  • AreFileApisANSI (Address: 0x1009716c)
  • CloseHandle (Address: 0x10097054)
  • CompareFileTime (Address: 0x100970c4)
  • CreateDirectoryW (Address: 0x100970c8)
  • CreateEventW (Address: 0x10097190)
  • CreateFileW (Address: 0x100970cc)
  • CreateToolhelp32Snapshot (Address: 0x1009710c)
  • DecodePointer (Address: 0x10097000)
  • DeleteCriticalSection (Address: 0x10097010)
  • DeleteFileW (Address: 0x100970c0)
  • DisableThreadLibraryCalls (Address: 0x10097014)
  • EncodePointer (Address: 0x1009701c)
  • EnterCriticalSection (Address: 0x10097038)
  • EnumSystemLocalesW (Address: 0x100971ec)
  • ExitProcess (Address: 0x100971cc)
  • ExpandEnvironmentStringsW (Address: 0x100970f0)
  • FindClose (Address: 0x100970d0)
  • FindFirstFileExW (Address: 0x10097164)
  • FindNextFileW (Address: 0x100970d4)
  • FindResourceExW (Address: 0x10097060)
  • FindResourceW (Address: 0x1009707c)
  • FlushFileBuffers (Address: 0x100971f8)
  • FormatMessageA (Address: 0x10097144)
  • FreeEnvironmentStringsW (Address: 0x10097214)
  • FreeLibrary (Address: 0x10097064)
  • FreeResource (Address: 0x10097068)
  • GetACP (Address: 0x10097204)
  • GetCommandLineA (Address: 0x1009720c)
  • GetCommandLineW (Address: 0x1009709c)
  • GetConsoleCP (Address: 0x100971fc)
  • GetConsoleMode (Address: 0x100971f0)
  • GetCPInfo (Address: 0x1009717c)
  • GetCurrentProcess (Address: 0x100970f8)
  • GetCurrentProcessId (Address: 0x100970fc)
  • GetCurrentThread (Address: 0x10097100)
  • GetCurrentThreadId (Address: 0x1009715c)
  • GetEnvironmentStringsW (Address: 0x10097210)
  • GetFileAttributesExW (Address: 0x10097050)
  • GetFileAttributesW (Address: 0x100970a0)
  • GetFileInformationByHandleEx (Address: 0x10097170)
  • GetFileSizeEx (Address: 0x100970d8)
  • GetFileType (Address: 0x100971d8)
  • GetLastError (Address: 0x10097008)
  • GetLocaleInfoW (Address: 0x100971e0)
  • GetLongPathNameW (Address: 0x1009711c)
  • GetModuleFileNameW (Address: 0x10097040)
  • GetModuleHandleExW (Address: 0x100971d0)
  • GetModuleHandleW (Address: 0x10097044)
  • GetOEMCP (Address: 0x10097208)
  • GetPrivateProfileIntW (Address: 0x100970b0)
  • GetPrivateProfileStringW (Address: 0x100970b4)
  • GetProcAddress (Address: 0x10097048)
  • GetProcessHeap (Address: 0x10097034)
  • GetStartupInfoW (Address: 0x100971a8)
  • GetStdHandle (Address: 0x100971d4)
  • GetStringTypeW (Address: 0x10097160)
  • GetSystemDirectoryW (Address: 0x1009705c)
  • GetSystemInfo (Address: 0x10097130)
  • GetSystemTime (Address: 0x100970e8)
  • GetSystemTimeAsFileTime (Address: 0x10097174)
  • GetSystemWow64DirectoryW (Address: 0x100970a4)
  • GetUserDefaultLCID (Address: 0x100971e8)
  • GetUserDefaultUILanguage (Address: 0x100970bc)
  • GlobalAlloc (Address: 0x10097080)
  • GlobalFree (Address: 0x1009708c)
  • GlobalLock (Address: 0x10097088)
  • GlobalUnlock (Address: 0x10097084)
  • HeapAlloc (Address: 0x10097024)
  • HeapDestroy (Address: 0x10097020)
  • HeapFree (Address: 0x1009702c)
  • HeapReAlloc (Address: 0x10097028)
  • HeapSize (Address: 0x10097030)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1009700c)
  • InitializeCriticalSectionEx (Address: 0x10097154)
  • InitializeSListHead (Address: 0x100971a4)
  • InitializeSRWLock (Address: 0x10097148)
  • InterlockedFlushSList (Address: 0x100971b4)
  • InterlockedPushEntrySList (Address: 0x100971b0)
  • IsDebuggerPresent (Address: 0x10097180)
  • IsProcessorFeaturePresent (Address: 0x100971a0)
  • IsValidCodePage (Address: 0x10097200)
  • IsValidLocale (Address: 0x100971e4)
  • LCMapStringEx (Address: 0x10097178)
  • LCMapStringW (Address: 0x100971dc)
  • LeaveCriticalSection (Address: 0x1009703c)
  • LoadLibraryExA (Address: 0x1009713c)
  • LoadLibraryExW (Address: 0x1009706c)
  • LoadLibraryW (Address: 0x100970a8)
  • LoadResource (Address: 0x10097070)
  • LocalFree (Address: 0x10097140)
  • LockResource (Address: 0x10097074)
  • lstrcmpiW (Address: 0x10097090)
  • lstrlenW (Address: 0x100970ac)
  • MultiByteToWideChar (Address: 0x10097098)
  • OpenMutexW (Address: 0x10097058)
  • OpenProcess (Address: 0x10097108)
  • OutputDebugStringA (Address: 0x10097120)
  • OutputDebugStringW (Address: 0x10097018)
  • Process32FirstW (Address: 0x10097110)
  • Process32NextW (Address: 0x10097114)
  • ProcessIdToSessionId (Address: 0x10097104)
  • QueryPerformanceCounter (Address: 0x10097124)
  • QueryPerformanceFrequency (Address: 0x10097128)
  • RaiseException (Address: 0x10097004)
  • ReadConsoleW (Address: 0x100971f4)
  • ReadFile (Address: 0x100970dc)
  • ReleaseSRWLockExclusive (Address: 0x1009714c)
  • ResetEvent (Address: 0x10097188)
  • RtlUnwind (Address: 0x100971ac)
  • SetEndOfFile (Address: 0x10097168)
  • SetEvent (Address: 0x10097184)
  • SetFilePointerEx (Address: 0x100970e0)
  • SetLastError (Address: 0x10097118)
  • SetStdHandle (Address: 0x1009712c)
  • SetUnhandledExceptionFilter (Address: 0x10097198)
  • SizeofResource (Address: 0x10097078)
  • Sleep (Address: 0x100970f4)
  • SystemTimeToFileTime (Address: 0x100970ec)
  • TerminateProcess (Address: 0x1009719c)
  • TlsAlloc (Address: 0x100971b8)
  • TlsFree (Address: 0x100971c4)
  • TlsGetValue (Address: 0x100971bc)
  • TlsSetValue (Address: 0x100971c0)
  • TryEnterCriticalSection (Address: 0x10097158)
  • UnhandledExceptionFilter (Address: 0x10097194)
  • VerifyVersionInfoW (Address: 0x10097094)
  • VerSetConditionMask (Address: 0x1009704c)
  • VirtualAlloc (Address: 0x100971c8)
  • VirtualProtect (Address: 0x10097134)
  • VirtualQuery (Address: 0x10097138)
  • WaitForSingleObjectEx (Address: 0x1009718c)
  • WideCharToMultiByte (Address: 0x100970b8)
  • WriteConsoleW (Address: 0x10097218)
  • WriteFile (Address: 0x100970e4)