shellext.dll

v4.18.1907.16384 64-bit Windows NT Analyzed
Description
Microsoft Security Client Shell Extension
Authors
© Microsoft Corporation. All rights reserved.
File size
328.5 KB
Uploaded
2025-12-01 08:30
Views
46
SHA-256
691cf5b193f29b04464ee900829166d9

Exported functions 4

DllCanUnloadNow #1 · 0x46d0
DllGetClassObject #2 · 0x4710
DllRegisterServer #3 · 0x4850
DllUnregisterServer #4 · 0x49a0

Imported DLLs & functions 313

ADVAPI32.dll 55
AddAce 0x180034248
AdjustTokenPrivileges 0x1800341f0
AllocateAndInitializeSid 0x1800341a8
ChangeServiceConfigW 0x1800341c8
CheckTokenMembership 0x1800341b0
CloseServiceHandle 0x180034220
ControlService 0x1800341d0
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180034170
ConvertStringSidToSidW 0x1800342a8
CopySid 0x180034278
CreateProcessAsUserW 0x180034208
DuplicateTokenEx 0x180034198
EqualSid 0x180034238
FreeSid 0x180034210
GetAce 0x180034258
GetAclInformation 0x180034250
GetLengthSid 0x180034228
GetNamedSecurityInfoW 0x180034298
GetSecurityDescriptorControl 0x180034290
GetSecurityDescriptorDacl 0x180034270
GetSecurityDescriptorGroup 0x180034268
GetSecurityDescriptorLength 0x180034288
GetSecurityDescriptorOwner 0x180034260
GetSecurityDescriptorSacl 0x180034160
GetSidSubAuthority 0x1800341a0
GetSidSubAuthorityCount 0x180034190
GetTokenInformation 0x180034188
GetTraceEnableFlags 0x1800342c0
GetTraceEnableLevel 0x1800342c8
GetTraceLoggerHandle 0x1800342b8
InitializeAcl 0x180034240
InitiateSystemShutdownExW 0x1800341f8
IsValidSid 0x180034230
LookupPrivilegeNameW 0x180034200
LookupPrivilegeValueW 0x1800341e0
MakeSelfRelativeSD 0x180034280
OpenProcessToken 0x180034180
OpenSCManagerW 0x1800341b8
OpenServiceW 0x1800341c0
PrivilegeCheck 0x1800341e8
QueryServiceConfigW 0x1800342b0
QueryServiceStatus 0x1800341d8
RegCloseKey 0x1800342e0
RegCreateKeyExW 0x1800342f0
RegDeleteKeyW 0x180034168
RegDeleteValueW 0x180034310
RegEnumKeyExW 0x1800342f8
RegisterTraceGuidsW 0x1800342d0
RegOpenKeyExW 0x180034308
RegQueryInfoKeyW 0x1800342e8
RegQueryValueExW 0x180034178
RegSetValueExW 0x180034300
SetNamedSecurityInfoW 0x1800342a0
TraceMessage 0x180034218
UnregisterTraceGuids 0x1800342d8
CRYPT32.dll 1
CertVerifyCertificateChainPolicy 0x180034320
GDI32.dll 8
CreateCompatibleBitmap 0x180034340
CreateCompatibleDC 0x180034338
DeleteDC 0x180034360
DeleteObject 0x180034368
ExtTextOutW 0x180034358
GetObjectW 0x180034330
SelectObject 0x180034348
SetBkColor 0x180034350
KERNEL32.dll 112
AcquireSRWLockExclusive 0x1800346d0
CloseHandle 0x180034498
CopyFileW 0x180034650
CreateDirectoryW 0x180034668
CreateEventW 0x1800344a8
CreateFileMappingW 0x180034690
CreateFileW 0x180034588
CreateMutexW 0x180034640
CreateProcessW 0x180034488
CreateThread 0x180034550
CreateToolhelp32Snapshot 0x1800345f8
DecodePointer 0x1800346f0
DeleteCriticalSection 0x180034418
DeleteFileW 0x1800345b8
DisableThreadLibraryCalls 0x1800346a0
EncodePointer 0x1800346e8
EnterCriticalSection 0x180034470
FindClose 0x1800344d8
FindFirstFileW 0x1800345d0
FindNextFileW 0x1800345c8
FindResourceExW 0x180034430
FindResourceW 0x1800345e0
FreeLibrary 0x180034408
FreeResource 0x1800345d8
GetCurrentProcess 0x1800343c0
GetCurrentProcessId 0x1800343a8
GetCurrentThreadId 0x1800343a0
GetDiskFreeSpaceExW 0x180034608
GetDriveTypeW 0x1800344c0
GetExitCodeProcess 0x180034620
GetExitCodeThread 0x180034538
GetFileAttributesW 0x180034688
GetFileSize 0x180034570
GetFileSizeEx 0x180034568
GetLastError 0x180034440
GetLocaleInfoW 0x180034648
GetLocalTime 0x1800344f0
GetLongPathNameW 0x180034560
GetModuleFileNameW 0x180034468
GetModuleHandleW 0x180034410
GetNativeSystemInfo 0x180034500
GetPrivateProfileIntW 0x180034528
GetPrivateProfileStringW 0x180034530
GetProcAddress 0x180034420
GetProcessHeap 0x1800345a8
GetSystemDefaultLCID 0x180034670
GetSystemDefaultUILanguage 0x180034518
GetSystemDirectoryW 0x180034610
GetSystemTimeAsFileTime 0x180034398
GetTempFileNameW 0x180034658
GetTempPathW 0x180034660
GetThreadLocale 0x180034460
GetTickCount 0x180034378
GetUserDefaultUILanguage 0x1800344b0
GetVersionExW 0x1800344e8
GetVolumeInformationW 0x1800344d0
GetWindowsDirectoryW 0x180034618
GlobalFindAtomW 0x1800344e0
HeapAlloc 0x1800345b0
HeapDestroy 0x1800346c0
HeapFree 0x1800345a0
HeapReAlloc 0x1800346b8
HeapSize 0x1800346b0
InitializeCriticalSection 0x180034450
InitializeCriticalSectionAndSpinCount 0x180034680
IsWow64Process 0x180034630
K32GetModuleFileNameExW 0x180034598
LeaveCriticalSection 0x180034458
LoadLibraryExW 0x1800343f8
LoadResource 0x180034428
LocalFree 0x180034628
LockResource 0x1800344a0
lstrcmpiW 0x180034400
MapViewOfFile 0x180034698
MoveFileExW 0x180034678
MoveFileW 0x180034558
MultiByteToWideChar 0x180034448
OpenProcess 0x180034600
OutputDebugStringA 0x180034380
Process32FirstW 0x1800345f0
Process32NextW 0x1800345e8
ProcessIdToSessionId 0x180034510
QueryPerformanceCounter 0x1800343b0
RaiseException 0x180034438
ReadFile 0x180034580
ReleaseMutex 0x180034638
ReleaseSRWLockExclusive 0x1800346c8
RemoveDirectoryW 0x1800345c0
ResetEvent 0x180034540
RtlCaptureContext 0x1800343e8
RtlLookupFunctionEntry 0x1800343e0
RtlVirtualUnwind 0x1800343d8
SearchPathW 0x180034390
SetErrorMode 0x1800344c8
SetEvent 0x180034548
SetLastError 0x180034508
SetThreadLocale 0x180034478
SetUnhandledExceptionFilter 0x1800343c8
SizeofResource 0x180034480
Sleep 0x1800343f0
SleepConditionVariableSRW 0x1800346e0
SwitchToThread 0x1800344b8
SystemTimeToFileTime 0x1800344f8
TerminateProcess 0x1800343b8
UnhandledExceptionFilter 0x1800343d0
UnmapViewOfFile 0x180034388
VerifyVersionInfoW 0x180034590
VirtualLock 0x1800346a8
WaitForSingleObject 0x180034490
WakeAllConditionVariable 0x1800346d8
WriteFile 0x180034578
WritePrivateProfileStringW 0x180034520
msvcrt.dll 47
__C_specific_handler 0x180034b28
__CxxFrameHandler3 0x180034b30
__dllonexit 0x180034a50
_amsg_exit 0x180034a88
_CxxThrowException 0x180034aa8
_errno 0x180034a78
_initterm 0x180034a80
_lock 0x180034a60
_onexit 0x180034a48
_purecall 0x180034b08
_unlock 0x180034a58
_vscwprintf 0x1800349d0
_vsnprintf 0x180034a30
_vsnwprintf 0x180034a08
_wchmod 0x180034a20
_wcsicmp 0x180034a18
_wcsnicmp 0x1800349f0
_XcptFilter 0x180034a90
??0exception@@QEAA@AEBQEBD@Z 0x180034ab0
??0exception@@QEAA@AEBQEBDH@Z 0x180034ad8
??0exception@@QEAA@AEBV0@@Z 0x180034ad0
??0exception@@QEAA@XZ 0x180034ab8
??1exception@@UEAA@XZ 0x180034ae0
??1type_info@@UEAA@XZ 0x180034a40
?terminate@@YAXXZ 0x180034a68
?what@exception@@UEBAPEBDXZ 0x180034ae8
bsearch 0x180034a38
calloc 0x180034ac0
free 0x180034b00
iswalpha 0x1800349e0
malloc 0x180034af8
memcpy 0x180034aa0
memcpy_s 0x180034b20
memmove 0x180034a98
memmove_s 0x180034ac8
memset 0x180034b38
realloc 0x180034a70
swprintf_s 0x180034a28
vswprintf_s 0x1800349d8
wcscat_s 0x180034b10
wcschr 0x180034a00
wcscpy_s 0x180034b18
wcsncmp 0x1800349f8
wcsncpy_s 0x180034af0
wcsrchr 0x1800349e8
wcsstr 0x180034a10
wcstoul 0x1800349c8
ntdll.dll 2
RtlGetVersion 0x180034b48
RtlNtStatusToDosError 0x180034b50
ole32.dll 7
CoCreateGuid 0x180034b88
CoCreateInstance 0x180034b70
CoTaskMemAlloc 0x180034b80
CoTaskMemFree 0x180034b68
CoTaskMemRealloc 0x180034b90
ReleaseStgMedium 0x180034b60
StringFromGUID2 0x180034b78
OLEAUT32.dll 13
LoadTypeLib 0x180034730
RegisterTypeLib 0x180034720
SysAllocString 0x180034718
SysAllocStringByteLen 0x180034700
SysAllocStringLen 0x180034740
SysFreeString 0x180034728
SysStringByteLen 0x180034760
SysStringLen 0x180034710
UnRegisterTypeLib 0x180034738
VarBstrCat 0x180034748
VariantClear 0x180034758
VariantInit 0x180034750
VarUI4FromStr 0x180034708
SHELL32.dll 6
DragQueryFileW 0x180034780
SHChangeNotify 0x180034770
ShellExecuteW 0x180034778
SHGetFolderPathW 0x180034788
SHGetPathFromIDListW 0x180034790
SHGetSpecialFolderLocation 0x180034798
SHLWAPI.dll 9
PathAppendW 0x1800347d0
PathCombineW 0x1800347e0
PathFileExistsW 0x1800347e8
PathFindFileNameW 0x1800347c0
PathIsDirectoryW 0x1800347b0
PathIsRelativeW 0x1800347b8
PathIsRootW 0x1800347c8
PathMatchSpecW 0x1800347a8
PathRemoveFileSpecW 0x1800347d8
USER32.dll 34
AdjustWindowRectEx 0x180034898
AllowSetForegroundWindow 0x180034838
CharNextW 0x180034808
CreateDialogParamW 0x180034900
DestroyIcon 0x180034830
DestroyWindow 0x1800348f0
DrawIconEx 0x180034810
FindWindowExW 0x180034848
FindWindowW 0x1800348c8
GetActiveWindow 0x180034878
GetDC 0x180034868
GetDesktopWindow 0x180034860
GetIconInfo 0x180034858
GetLastActivePopup 0x180034840
GetSysColor 0x180034870
GetSystemMetrics 0x180034850
GetWindowThreadProcessId 0x180034820
InsertMenuW 0x180034888
IsDialogMessageW 0x1800348a8
KillTimer 0x1800348b0
LoadIconW 0x1800348f8
LoadImageW 0x180034800
LoadStringW 0x1800348e0
MessageBoxW 0x180034828
PostMessageW 0x1800348d8
PostThreadMessageW 0x1800348a0
ReleaseDC 0x180034880
SendMessageW 0x180034818
SetForegroundWindow 0x1800348c0
SetMenuItemBitmaps 0x180034890
SetTimer 0x1800348b8
SetWindowTextW 0x1800348d0
ShowWindow 0x1800348e8
UnregisterClassA 0x1800347f8
USERENV.dll 3
CreateEnvironmentBlock 0x180034918
DestroyEnvironmentBlock 0x180034910
UnloadUserProfile 0x180034920
VERSION.dll 3
GetFileVersionInfoSizeW 0x180034930
GetFileVersionInfoW 0x180034938
VerQueryValueW 0x180034940
WINTRUST.dll 9
CryptCATAdminAcquireContext 0x180034990
CryptCATAdminCalcHashFromFileHandle 0x180034968
CryptCATAdminEnumCatalogFromHash 0x180034980
CryptCATAdminReleaseCatalogContext 0x180034958
CryptCATAdminReleaseContext 0x180034970
CryptCATCatalogInfoFromContext 0x180034978
WinVerifyTrust 0x180034988
WTHelperGetProvSignerFromChain 0x180034960
WTHelperProvDataFromStateData 0x180034950
WTSAPI32.dll 4
WTSEnumerateSessionsW 0x1800349b0
WTSFreeMemory 0x1800349b8
WTSQuerySessionInformationW 0x1800349a0
WTSQueryUserToken 0x1800349a8