DesktopShellExt.dll

Description: DesktopHost Extensions

Version: 10.0.19041.6280

Architecture: 64-bit

Operating System: Windows NT

SHA256: 2164f266f150c5117a4706a81e9b554a

File Size: 211.0 KB

Uploaded At: Dec. 1, 2025, 7:25 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1ec0)
DllGetActivationFactory (Ordinal: 2, Address: 0x20180)
DllGetClassObject (Ordinal: 3, Address: 0x3f00)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180028a28)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180028a50)
CoIncrementMTAUsage (Address: 0x180028a40)
CoTaskMemAlloc (Address: 0x180028a38)
CoTaskMemFree (Address: 0x180028a48)
PropVariantClear (Address: 0x180028a60)
StringFromGUID2 (Address: 0x180028a58)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180028a70)
IsDebuggerPresent (Address: 0x180028a78)
OutputDebugStringW (Address: 0x180028a80)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180028a90)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180028aa0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180028ab0)
SetLastError (Address: 0x180028ac8)
SetUnhandledExceptionFilter (Address: 0x180028ac0)
UnhandledExceptionFilter (Address: 0x180028ab8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180028ad8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180028af8)
HeapAlloc (Address: 0x180028af0)
HeapFree (Address: 0x180028ae8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180028b08)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180028b18)
InterlockedPushEntrySList (Address: 0x180028b20)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180028b58)
GetModuleFileNameA (Address: 0x180028b50)
GetModuleFileNameW (Address: 0x180028b30)
GetModuleHandleExW (Address: 0x180028b40)
GetModuleHandleW (Address: 0x180028b38)
GetProcAddress (Address: 0x180028b48)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180028b68)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180028b78)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180028b90)
GetCurrentProcess (Address: 0x180028b88)
GetCurrentProcessId (Address: 0x180028bb0)
GetCurrentThreadId (Address: 0x180028b98)
GetExitCodeProcess (Address: 0x180028ba8)
GetProcessTimes (Address: 0x180028bb8)
TerminateProcess (Address: 0x180028ba0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180028bd0)
OpenProcess (Address: 0x180028bc8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180028be0)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x180028bf0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180028c08)
RegEnumValueW (Address: 0x180028c10)
RegGetValueW (Address: 0x180028c20)
RegOpenKeyExW (Address: 0x180028c00)
RegQueryValueExW (Address: 0x180028c18)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180028c40)
RtlLookupFunctionEntry (Address: 0x180028c30)
RtlVirtualUnwind (Address: 0x180028c38)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x180028c58)
PathRemoveBlanksW (Address: 0x180028c50)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpICW (Address: 0x180028c68)
StrCmpNIW (Address: 0x180028c70)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180028c80)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180028c90)
AcquireSRWLockShared (Address: 0x180028cc0)
CreateEventExW (Address: 0x180028cd8)
CreateMutexExW (Address: 0x180028cd0)
CreateSemaphoreExW (Address: 0x180028ca0)
DeleteCriticalSection (Address: 0x180028ce0)
EnterCriticalSection (Address: 0x180028d00)
InitializeCriticalSection (Address: 0x180028cc8)
InitializeCriticalSectionEx (Address: 0x180028d18)
LeaveCriticalSection (Address: 0x180028d08)
OpenEventW (Address: 0x180028ca8)
OpenSemaphoreW (Address: 0x180028cf0)
ReleaseMutex (Address: 0x180028d10)
ReleaseSemaphore (Address: 0x180028cb0)
ReleaseSRWLockExclusive (Address: 0x180028c98)
ReleaseSRWLockShared (Address: 0x180028cb8)
WaitForMultipleObjectsEx (Address: 0x180028ce8)
WaitForSingleObject (Address: 0x180028d20)
WaitForSingleObjectEx (Address: 0x180028cf8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180028d30)
InitOnceComplete (Address: 0x180028d40)
InitOnceExecuteOnce (Address: 0x180028d38)
Sleep (Address: 0x180028d48)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180028d58)
GetTickCount (Address: 0x180028d60)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180028d80)
CreateThreadpoolTimer (Address: 0x180028d78)
SetThreadpoolTimer (Address: 0x180028d70)
TrySubmitThreadpoolCallback (Address: 0x180028d90)
WaitForThreadpoolTimerCallbacks (Address: 0x180028d88)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180028da0)
EncodePointer (Address: 0x180028da8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180028dc8)
RoFailFastWithErrorContext (Address: 0x180028dc0)
RoOriginateError (Address: 0x180028db8)
RoOriginateErrorW (Address: 0x180028dd0)
SetRestrictedErrorInfo (Address: 0x180028dd8)

api-ms-win-core-winrt-error-l1-1-1.dll

RoOriginateLanguageException (Address: 0x180028de8)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180028df8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180028e40)
WindowsCreateStringReference (Address: 0x180028e30)
WindowsDeleteString (Address: 0x180028e18)
WindowsDeleteStringBuffer (Address: 0x180028e08)
WindowsGetStringRawBuffer (Address: 0x180028e28)
WindowsIsStringEmpty (Address: 0x180028e10)
WindowsPreallocateStringBuffer (Address: 0x180028e48)
WindowsPromoteStringBuffer (Address: 0x180028e20)
WindowsStringHasEmbeddedNull (Address: 0x180028e38)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x180028e58)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180028ed0)
__CxxFrameHandler3 (Address: 0x180028f48)
__CxxFrameHandler4 (Address: 0x180028f38)
__std_terminate (Address: 0x180028f30)
_CxxThrowException (Address: 0x180028f50)
_o___std_exception_copy (Address: 0x180028f20)
_o___std_exception_destroy (Address: 0x180028f18)
_o___std_type_info_destroy_list (Address: 0x180028f10)
_o___stdio_common_vsnprintf_s (Address: 0x180028f08)
_o___stdio_common_vswprintf (Address: 0x180028f00)
_o__callnewh (Address: 0x180028ef0)
_o__cexit (Address: 0x180028ee8)
_o__configure_narrow_argv (Address: 0x180028ee0)
_o__crt_atexit (Address: 0x180028f28)
_o__errno (Address: 0x180028ef8)
_o__execute_onexit_table (Address: 0x180028ed8)
_o__initialize_narrow_environment (Address: 0x180028e68)
_o__initialize_onexit_table (Address: 0x180028e70)
_o__invalid_parameter_noinfo (Address: 0x180028e78)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180028e80)
_o__purecall (Address: 0x180028e88)
_o__register_onexit_function (Address: 0x180028e90)
_o__seh_filter_dll (Address: 0x180028e98)
_o__wtoi (Address: 0x180028ea8)
_o_free (Address: 0x180028eb0)
_o_malloc (Address: 0x180028eb8)
_o_terminate (Address: 0x180028ec0)
_o_toupper (Address: 0x180028ec8)
memcmp (Address: 0x180028f40)
memcpy (Address: 0x180028f58)
memmove (Address: 0x180028ea0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180028f70)
_initterm_e (Address: 0x180028f68)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180028f80)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180028fb0)
EventProviderEnabled (Address: 0x180028fb8)
EventRegister (Address: 0x180028fa8)
EventSetInformation (Address: 0x180028fa0)
EventUnregister (Address: 0x180028f90)
EventWriteTransfer (Address: 0x180028f98)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

FindWindowW (Address: 0x180028fd8)
GetWindowThreadProcessId (Address: 0x180028fc8)
PostMessageW (Address: 0x180028fd0)

api-ms-win-shcore-registry-l1-1-0.dll

SHRegGetValueW (Address: 0x180028fe8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolQueueTask (Address: 0x180028ff8)

api-ms-win-shlwapi-winrt-storage-l1-1-1.dll

PathRemoveArgsW (Address: 0x180029008)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180029018)

ntdll.dll

NtQueryWnfStateData (Address: 0x180029028)
RtlSubscribeWnfStateChangeNotification (Address: 0x180029030)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180029038)

OLEAUT32.dll

SysFreeString (Address: 0x180028a18)