wship6.dll

  • File Path: C:\Windows\system32\wship6.dll
  • Description: Winsock2 Helper DLL (TL/IPv6)

Hashes

Type Hash
MD5 AB16FFBBA1BDBE37646067E4A6B1682A
SHA1 63B9CA4589BABDF201D273F744F88BB804A842A4
SHA256 3B36C7F68017B490BC4B288A25CD04D260B10827B090CD7D8EC51FD5980126A3
SHA384 A45C433C4D4814187BF8CF04A371B6B027CA0D7CD2FB19D43E4E5B3C25A35D05359A099DAA488345CF439112168BE0E0
SHA512 63A96B785D4AE556FF90A8229B51E22AAE256FF4497EA368C0DD057326A61D6D1EDDE56F1C8E6139B36B2A8265AD3775E41CA53C604EDD591475AE6261960E71
SSDEEP 96:SCa8ZZsI0SkIR279qffiVHkFO6uGUeyT4Hrq4GQ2TdEW9qWw:HausfSJAafYHkFOn/6HGQ26W9qW
IMP 7950D3E450C85468259854DF6349EEE2
PESHA1 222EEB05D8451FCE2496E8C87B7D0B604F0AF367
PE256 1895F95222274FB6DC5ACA5B7F232A2CF3CBB72DD47E8DA9DFDBAE97C729CCB5

DLL Exports:

Function Name Ordinal Type
WSHNotify 11 Exported Function
WSHJoinLeaf 10 Exported Function
WSHIoctl 9 Exported Function
WSHOpenSocket 12 Exported Function
WSHStringToAddress 15 Exported Function
WSHSetSocketInformation 14 Exported Function
WSHOpenSocket2 13 Exported Function
WSHGetWSAProtocolInfo 6 Exported Function
WSHGetProviderGuid 3 Exported Function
WSHEnumProtocols 2 Exported Function
WSHAddressToString 1 Exported Function
WSHGetSockaddrType 4 Exported Function
WSHGetWinsockMapping 8 Exported Function
WSHGetWildcardSockaddr 7 Exported Function
WSHGetSocketInformation 5 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wship6.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/3b36c7f68017b490bc4b288a25cd04d260b10827b090cd7d8ec51fd5980126a3/detection/

MIT License. Copyright (c) 2020-2021 Strontic.