rshx32.dll

Description: Security Shell Extension

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: c0d78a1f89626392a21d2abfa87ffa43

File Size: 110.0 KB

Uploaded At: Dec. 1, 2025, 8:03 a.m.

Views: 15

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x8fd0)
DllGetClassObject (Ordinal: 2, Address: 0x8ef0)
DllRegisterServer (Ordinal: 3, Address: 0x9000)
DllUnregisterServer (Ordinal: 4, Address: 0x9050)
_EditFSSecurity@32 (Ordinal: 5, Address: 0x64b0)

Imported DLLs & Functions

ADVAPI32.dll

FreeInheritedFromArray (Address: 0x52799008)
GetInheritanceSourceW (Address: 0x5279900c)
GetNamedSecurityInfoW (Address: 0x52799004)
SetNamedSecurityInfoW (Address: 0x52799010)
TreeSetNamedSecurityInfoW (Address: 0x52799000)

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x52799160)
CoUninitialize (Address: 0x5279915c)
StringFromGUID2 (Address: 0x52799164)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

ObjectStublessClient3 (Address: 0x5279916c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x52799178)
IsDebuggerPresent (Address: 0x52799174)
OutputDebugStringW (Address: 0x5279917c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x52799184)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x5279918c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x52799198)
SetLastError (Address: 0x52799194)
SetUnhandledExceptionFilter (Address: 0x527991a0)
UnhandledExceptionFilter (Address: 0x5279919c)

api-ms-win-core-file-l1-1-0.dll

GetDriveTypeW (Address: 0x527991ac)
GetFileAttributesExW (Address: 0x527991b0)
GetFileAttributesW (Address: 0x527991b8)
GetFullPathNameW (Address: 0x527991b4)
GetVolumeInformationW (Address: 0x527991a8)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x527991c0)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x527991c8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x527991d0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x527991d8)
HeapAlloc (Address: 0x527991dc)
HeapFree (Address: 0x527991e0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x527991e8)
LocalFree (Address: 0x527991ec)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x527991fc)
FreeLibrary (Address: 0x52799200)
GetModuleFileNameA (Address: 0x52799210)
GetModuleFileNameW (Address: 0x52799204)
GetModuleHandleExW (Address: 0x52799208)
GetModuleHandleW (Address: 0x52799218)
GetProcAddress (Address: 0x5279920c)
LoadResource (Address: 0x527991f4)
LoadStringW (Address: 0x52799214)
LockResource (Address: 0x527991f8)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x52799220)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x52799228)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x52799230)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x52799254)
GetCurrentProcess (Address: 0x52799240)
GetCurrentProcessId (Address: 0x5279923c)
GetCurrentThread (Address: 0x52799258)
GetCurrentThreadId (Address: 0x5279925c)
GetExitCodeThread (Address: 0x5279924c)
OpenProcessToken (Address: 0x52799248)
OpenThreadToken (Address: 0x52799238)
SetThreadToken (Address: 0x52799250)
TerminateProcess (Address: 0x52799244)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x52799264)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x5279926c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x5279927c)
RegOpenKeyExW (Address: 0x52799278)
RegQueryValueExW (Address: 0x52799274)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x52799284)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x527992a0)
CreateMutexExW (Address: 0x527992a4)
CreateSemaphoreExW (Address: 0x5279929c)
OpenSemaphoreW (Address: 0x527992ac)
ReleaseMutex (Address: 0x5279928c)
ReleaseSemaphore (Address: 0x527992a8)
SetEvent (Address: 0x52799298)
WaitForSingleObject (Address: 0x52799290)
WaitForSingleObjectEx (Address: 0x52799294)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x527992b4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x527992c0)
GetTickCount (Address: 0x527992bc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x527992cc)
CreateThreadpoolWork (Address: 0x527992c8)
SubmitThreadpoolWork (Address: 0x527992d0)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x52799300)
AdjustTokenPrivileges (Address: 0x527992dc)
DuplicateTokenEx (Address: 0x527992fc)
EqualSid (Address: 0x52799340)
GetLengthSid (Address: 0x52799334)
GetSecurityDescriptorControl (Address: 0x5279931c)
GetSecurityDescriptorDacl (Address: 0x52799324)
GetSecurityDescriptorGroup (Address: 0x527992f4)
GetSecurityDescriptorLength (Address: 0x5279930c)
GetSecurityDescriptorOwner (Address: 0x52799314)
GetSecurityDescriptorSacl (Address: 0x52799310)
GetSidSubAuthority (Address: 0x527992e0)
GetSidSubAuthorityCount (Address: 0x52799338)
InitializeAcl (Address: 0x527992ec)
InitializeSecurityDescriptor (Address: 0x527992d8)
IsValidAcl (Address: 0x527992f8)
IsValidSecurityDescriptor (Address: 0x5279932c)
IsValidSid (Address: 0x52799320)
MakeAbsoluteSD (Address: 0x527992e8)
MakeSelfRelativeSD (Address: 0x52799308)
MapGenericMask (Address: 0x52799328)
SetFileSecurityW (Address: 0x52799318)
SetSecurityDescriptorControl (Address: 0x52799330)
SetSecurityDescriptorDacl (Address: 0x52799304)
SetSecurityDescriptorGroup (Address: 0x527992f0)
SetSecurityDescriptorOwner (Address: 0x5279933c)
SetSecurityDescriptorSacl (Address: 0x527992e4)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x52799348)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x52799350)

AUTHZ.dll

AuthzAccessCheck (Address: 0x5279901c)
AuthzComputeEffectivePermission (Address: 0x5279902c)
AuthzFreeContext (Address: 0x52799018)
AuthzFreeResourceManager (Address: 0x52799020)
AuthzInitializeContextFromSid (Address: 0x52799028)
AuthzInitializeRemoteResourceManager (Address: 0x52799024)
AuthzInitializeResourceManager (Address: 0x52799030)

COMCTL32.dll

DestroyPropertySheetPage (Address: 0x52799038)

KERNEL32.dll

GetComputerNameW (Address: 0x5279904c)
GlobalLock (Address: 0x52799044)
GlobalUnlock (Address: 0x52799050)
LocalSize (Address: 0x52799048)
lstrlenW (Address: 0x52799040)

msvcrt.dll

__dllonexit (Address: 0x52799368)
_amsg_exit (Address: 0x52799380)
_except_handler4_common (Address: 0x52799360)
_initterm (Address: 0x52799374)
_lock (Address: 0x52799370)
_onexit (Address: 0x52799364)
_unlock (Address: 0x5279936c)
_vsnwprintf (Address: 0x52799358)
_wcsicmp (Address: 0x52799390)
_wcsnicmp (Address: 0x5279938c)
_XcptFilter (Address: 0x52799384)
free (Address: 0x5279937c)
malloc (Address: 0x52799378)
memcpy (Address: 0x5279939c)
memcpy_s (Address: 0x52799398)
memmove (Address: 0x5279935c)
memset (Address: 0x527993a0)
wcschr (Address: 0x52799388)
wcsnlen (Address: 0x52799394)

ntdll.dll

NtClose (Address: 0x527993bc)
NtOpenFile (Address: 0x527993b0)
RtlDosPathNameToNtPathName_U (Address: 0x527993b8)
RtlFreeUnicodeString (Address: 0x527993a8)
RtlNtStatusToDosError (Address: 0x527993b4)
WinSqmIsOptedIn (Address: 0x527993c0)
WinSqmSetDWORD (Address: 0x527993ac)

OLEAUT32.dll

BSTR_UserFree (Address: 0x52799060)
BSTR_UserMarshal (Address: 0x52799068)
BSTR_UserSize (Address: 0x5279905c)
BSTR_UserUnmarshal (Address: 0x52799064)
SysAllocString (Address: 0x5279906c)
SysFreeString (Address: 0x52799058)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x527990a0)
CStdStubBuffer_Connect (Address: 0x52799074)
CStdStubBuffer_CountRefs (Address: 0x52799090)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x527990a8)
CStdStubBuffer_DebugServerRelease (Address: 0x52799084)
CStdStubBuffer_Disconnect (Address: 0x52799080)
CStdStubBuffer_Invoke (Address: 0x527990b4)
CStdStubBuffer_IsIIDSupported (Address: 0x52799078)
CStdStubBuffer_QueryInterface (Address: 0x5279908c)
IUnknown_AddRef_Proxy (Address: 0x527990ac)
IUnknown_QueryInterface_Proxy (Address: 0x5279907c)
IUnknown_Release_Proxy (Address: 0x5279909c)
NdrCStdStubBuffer_Release (Address: 0x527990b0)
NdrDllCanUnloadNow (Address: 0x52799098)
NdrDllGetClassObject (Address: 0x52799094)
NdrDllRegisterProxy (Address: 0x52799088)
NdrDllUnregisterProxy (Address: 0x527990b8)
NdrOleAllocate (Address: 0x527990bc)
NdrOleFree (Address: 0x527990a4)

SHELL32.dll

DragQueryFileW (Address: 0x527990d0)
SHBindToFolderIDListParent (Address: 0x527990cc)
SHBindToFolderIDListParentEx (Address: 0x527990d4)
SHBindToObject (Address: 0x527990c4)
SHChangeNotify (Address: 0x527990c8)

SHLWAPI.dll

PathAddBackslashW (Address: 0x527990e4)
PathFindFileNameW (Address: 0x527990fc)
PathIsRootW (Address: 0x527990f0)
PathIsUNCServerShareW (Address: 0x527990f8)
PathIsUNCW (Address: 0x527990e8)
PathRemoveBackslashW (Address: 0x527990f4)
PathRemoveFileSpecW (Address: 0x527990ec)
PathSetDlgItemPathW (Address: 0x527990dc)
StrChrW (Address: 0x52799100)
StrDupW (Address: 0x527990e0)
StrRetToBufW (Address: 0x52799104)

USER32.dll

DialogBoxParamW (Address: 0x52799148)
DispatchMessageW (Address: 0x52799130)
EndDialog (Address: 0x52799138)
GetAncestor (Address: 0x52799150)
GetLastActivePopup (Address: 0x52799124)
GetWindow (Address: 0x52799118)
GetWindowLongW (Address: 0x5279911c)
IsWindowVisible (Address: 0x5279913c)
LoadCursorW (Address: 0x52799114)
MessageBoxW (Address: 0x5279910c)
MsgWaitForMultipleObjectsEx (Address: 0x52799110)
PeekMessageW (Address: 0x52799128)
RegisterClipboardFormatW (Address: 0x5279914c)
SetCursor (Address: 0x52799120)
SetDlgItemTextW (Address: 0x52799134)
SetForegroundWindow (Address: 0x52799144)
SetProcessDPIAware (Address: 0x52799154)
ShowWindow (Address: 0x52799140)
TranslateMessage (Address: 0x5279912c)