WsUpgrade.dll

  • File Path: C:\Windows\system32\migration\WsUpgrade.dll
  • Description: Winsock Upgrade Plugin

Hashes

Type Hash
MD5 A375F096C21FE8678DA36F7EA5163661
SHA1 4153B59E638992E4D47275995747F89C4F27AC54
SHA256 21BF554FD8D8892A75C5E724429E8D3175DDB4FD7BAC3C2BCDBEAE647D0DA2BD
SHA384 2AAFCCEA8672010E1E75E7EC9AA702BFEABA81641F8654F1D122B35D2A6A07A6D1A6D30D3611AA468AF185C12200AD9A
SHA512 CE91A0A3D9B290C5AB78DF1ED3390D45199DF39C720AD742122AA0099BE6A96AB0D44E93E9F1C8F742BD3F7E0F42AA1E710FA5A11EB670E8FDDC57847007E339
SSDEEP 3072:OMlJexZZXylfnpdi7GtrgIDfuuL2rcheaNQbmOhCiMfxNR6Xjm8Ah8:OMlJ8nAJggScfOfMt6
IMP 470DD0E71D4A4B8BE787046BBF7D109B
PESHA1 7EB2AEF8A4F52CFCF141ECB7A52F72876FFBD059
PE256 0A69A349485FD5C2C3FBB0B840FD25710812AF50FB21CE5E63FEB01A3DFF5FFA

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DllMain 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wsupgrade.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/21bf554fd8d8892a75c5e724429e8d3175ddb4fd7bac3c2bcdbeae647d0da2bd/detection/

MIT License. Copyright (c) 2020 Strontic.