Gridinsoft Logo

The rshx32.dll (Security Shell Extension) File Analysis

Updated 2 months ago
Checked by Malaware Check
rshx32.dll

Technical Analysis

File Name rshx32.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 22:00:46 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
133,632
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8660b44706bbc60fa1c5628ee29010d8
SHA1
d720ccfccd92d234aca09ed725100c4dd9850445
SHA256
6a5d0e25efe18453ff1bce6f057d2b1a05b249272d8b42feb41086fb4fb6aeef
SHA512
b3c2672921672ce6d628fa1dc070a7c657c6d7fb763be4d7325b50b7e1f1c74c9be01a28554ddeaa30e7ccdec5291b58c8d91a908b9a42cfafb6dff59141ee17
ImpHash
b92af250beba951a546c29566fc72985

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x180015660
Compilation Time 2016-01-12 10:05:18
Checksum 0x00024062 (Actual: 0x00024062)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path rshx32.pdb
Digital Signature No valid SignedData structure was found.
Imports 40 libraries
Exports 5 functions
Resources 3 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Security Shell Extension
FileVersion 10.0.19041.4355 (WinBuild.160101.0800)
InternalName rshx32.dll
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename rshx32.dll
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.4355
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 88,955 bytes 89,088 bytes 6.25 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6B12D4D4D9E2BE1BA8CFF01616072C76
.rdata 0x00017000 31,414 bytes 31,744 bytes 5.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E4EB075A418415F83DEF20D7FA88FC5E
.data 0x0001f000 4,832 bytes 2,560 bytes 2.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4C00E7E270AF259C83B62A10DC1F4A0E
.pdata 0x00021000 2,100 bytes 2,560 bytes 4.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 53B4D95D41037EE52623A4CD1E553E14
.didat 0x00022000 296 bytes 512 bytes 1.72 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 41E384319A83440F3875941DC8B2F05D
.rsrc 0x00023000 4,632 bytes 5,120 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 93EF76F09CB09B32037938394F1C4881
.reloc 0x00025000 876 bytes 1,024 bytes 4.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 407B739E7F933CAFF2DEA712C2045639

Resource Analysis

▼
Total Resources: 3 (4,370 bytes)
Resource Type Count Total Size Percentage
MUI 1 224 bytes
5.1%
REGINST 1 3,218 bytes
73.6%
RT_VERSION 1 928 bytes
21.2%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Security Shell Extension
File Version 10.0.19041.4355 (WinBuild.160101.0800)
Original Name rshx32.dll
Internal Name rshx32.dll
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware