DfsShlEx.dll

Description: Distributed File System shell extension

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: e5eebd458f40da8170ac757306bb92c7

File Size: 77.0 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 11

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x4cb0)
DllGetClassObject (Ordinal: 2, Address: 0x4cd0)
DllRegisterServer (Ordinal: 3, Address: 0x4e00)
DllUnregisterServer (Ordinal: 4, Address: 0x4f00)

Imported DLLs & Functions

ADVAPI32.dll

RegCloseKey (Address: 0x18000d080)
RegCreateKeyExW (Address: 0x18000d090)
RegDeleteValueW (Address: 0x18000d0a0)
RegEnumKeyExW (Address: 0x18000d068)
RegOpenKeyExW (Address: 0x18000d070)
RegQueryInfoKeyW (Address: 0x18000d088)
RegQueryValueExW (Address: 0x18000d078)
RegSetValueExW (Address: 0x18000d098)

dfscli.dll

NetDfsGetClientInfo (Address: 0x18000d358)
NetDfsSetClientInfo (Address: 0x18000d360)

GDI32.dll

DeleteObject (Address: 0x18000d0b0)
GetObjectW (Address: 0x18000d0b8)

KERNEL32.dll

ActivateActCtx (Address: 0x18000d1c8)
CreateActCtxW (Address: 0x18000d1c0)
DeactivateActCtx (Address: 0x18000d210)
DecodePointer (Address: 0x18000d128)
DeleteCriticalSection (Address: 0x18000d1b0)
DisableThreadLibraryCalls (Address: 0x18000d230)
EncodePointer (Address: 0x18000d138)
EnterCriticalSection (Address: 0x18000d1d8)
FindActCtxSectionStringW (Address: 0x18000d208)
FindResourceExW (Address: 0x18000d248)
FlushInstructionCache (Address: 0x18000d118)
FormatMessageW (Address: 0x18000d170)
FreeLibrary (Address: 0x18000d1a0)
GetCurrentProcess (Address: 0x18000d150)
GetCurrentProcessId (Address: 0x18000d0d8)
GetCurrentThreadId (Address: 0x18000d178)
GetDriveTypeW (Address: 0x18000d188)
GetFileAttributesW (Address: 0x18000d180)
GetLastError (Address: 0x18000d228)
GetModuleFileNameW (Address: 0x18000d1f0)
GetModuleHandleExW (Address: 0x18000d1e0)
GetModuleHandleW (Address: 0x18000d1a8)
GetProcAddress (Address: 0x18000d258)
GetProcessHeap (Address: 0x18000d120)
GetSystemTimeAsFileTime (Address: 0x18000d0d0)
GetTickCount (Address: 0x18000d0c8)
HeapAlloc (Address: 0x18000d130)
HeapFree (Address: 0x18000d160)
InitializeCriticalSection (Address: 0x18000d200)
InterlockedPopEntrySList (Address: 0x18000d108)
InterlockedPushEntrySList (Address: 0x18000d110)
LeaveCriticalSection (Address: 0x18000d1f8)
LoadLibraryExA (Address: 0x18000d140)
LoadLibraryExW (Address: 0x18000d190)
LoadLibraryW (Address: 0x18000d240)
LoadResource (Address: 0x18000d250)
LocalFree (Address: 0x18000d168)
lstrcmpiW (Address: 0x18000d198)
MultiByteToWideChar (Address: 0x18000d220)
OutputDebugStringA (Address: 0x18000d1e8)
QueryActCtxW (Address: 0x18000d218)
QueryPerformanceCounter (Address: 0x18000d0e0)
RaiseException (Address: 0x18000d238)
SetLastError (Address: 0x18000d1d0)
SetUnhandledExceptionFilter (Address: 0x18000d0f0)
SizeofResource (Address: 0x18000d1b8)
Sleep (Address: 0x18000d100)
TerminateProcess (Address: 0x18000d0e8)
UnhandledExceptionFilter (Address: 0x18000d0f8)
VirtualAlloc (Address: 0x18000d148)
VirtualFree (Address: 0x18000d158)

msvcrt.dll

__C_specific_handler (Address: 0x18000d470)
__CxxFrameHandler3 (Address: 0x18000d478)
__dllonexit (Address: 0x18000d3f8)
_amsg_exit (Address: 0x18000d3c0)
_callnewh (Address: 0x18000d370)
_CxxThrowException (Address: 0x18000d3a0)
_errno (Address: 0x18000d3d0)
_initterm (Address: 0x18000d3c8)
_lock (Address: 0x18000d480)
_onexit (Address: 0x18000d408)
_purecall (Address: 0x18000d448)
_unlock (Address: 0x18000d3f0)
_vsnwprintf (Address: 0x18000d420)
_wcsdup (Address: 0x18000d418)
_XcptFilter (Address: 0x18000d3b8)
??_V@YAXPEAX@Z (Address: 0x18000d468)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18000d378)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18000d380)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18000d388)
??1exception@@UEAA@XZ (Address: 0x18000d390)
??1type_info@@UEAA@XZ (Address: 0x18000d410)
??3@YAXPEAX@Z (Address: 0x18000d400)
?terminate@@YAXXZ (Address: 0x18000d3e0)
?what@exception@@UEBAPEBDXZ (Address: 0x18000d398)
calloc (Address: 0x18000d3e8)
free (Address: 0x18000d440)
malloc (Address: 0x18000d438)
memcpy (Address: 0x18000d3a8)
memcpy_s (Address: 0x18000d460)
memmove (Address: 0x18000d3b0)
memset (Address: 0x18000d488)
realloc (Address: 0x18000d3d8)
wcscat_s (Address: 0x18000d450)
wcscpy_s (Address: 0x18000d458)
wcsncpy_s (Address: 0x18000d430)
wcsnlen (Address: 0x18000d428)

netutils.dll

NetApiBufferFree (Address: 0x18000d498)

ntdll.dll

NtClose (Address: 0x18000d4a8)
NtCreateFile (Address: 0x18000d4e8)
NtFsControlFile (Address: 0x18000d4c8)
NtOpenFile (Address: 0x18000d4c0)
NtQueryInformationFile (Address: 0x18000d4b8)
RtlCaptureContext (Address: 0x18000d4e0)
RtlInitUnicodeString (Address: 0x18000d4b0)
RtlLookupFunctionEntry (Address: 0x18000d4d8)
RtlNtStatusToDosError (Address: 0x18000d4f0)
RtlVirtualUnwind (Address: 0x18000d4d0)

ole32.dll

CoCreateInstance (Address: 0x18000d508)
CoGetObject (Address: 0x18000d510)
CoTaskMemAlloc (Address: 0x18000d500)
CoTaskMemFree (Address: 0x18000d528)
CoTaskMemRealloc (Address: 0x18000d520)
ReleaseStgMedium (Address: 0x18000d518)
StringFromGUID2 (Address: 0x18000d530)

OLEAUT32.dll

LoadTypeLib (Address: 0x18000d280)
RegisterTypeLib (Address: 0x18000d270)
SysAllocString (Address: 0x18000d268)
SysAllocStringLen (Address: 0x18000d288)
SysFreeString (Address: 0x18000d278)
SysStringLen (Address: 0x18000d298)
VarBstrCat (Address: 0x18000d290)
VarUI4FromStr (Address: 0x18000d2a0)

SHELL32.dll

DragQueryFileW (Address: 0x18000d2b0)

USER32.dll

CharNextW (Address: 0x18000d340)
EnableWindow (Address: 0x18000d320)
GetActiveWindow (Address: 0x18000d2f0)
GetDlgItem (Address: 0x18000d308)
GetParent (Address: 0x18000d310)
GetSystemMetrics (Address: 0x18000d2e0)
GetWindowRect (Address: 0x18000d2e8)
LoadCursorW (Address: 0x18000d328)
LoadImageW (Address: 0x18000d318)
LoadStringW (Address: 0x18000d348)
MessageBoxW (Address: 0x18000d2c8)
SendDlgItemMessageW (Address: 0x18000d300)
SendMessageW (Address: 0x18000d2d8)
SetCursor (Address: 0x18000d330)
SetDlgItemTextW (Address: 0x18000d2f8)
SetWindowLongPtrW (Address: 0x18000d2d0)
ShowCursor (Address: 0x18000d338)
UnregisterClassA (Address: 0x18000d2c0)