wshrm.dll
- File Path:
C:\Windows\system32\wshrm.dll
- Description: Windows Sockets Helper DLL for PGM
Hashes
| Type |
Hash |
| MD5 |
41701A88D14E6D05FA8048FEB1B6EBD1 |
| SHA1 |
AB2411FE87F185F49D20DFA4635527C299165970 |
| SHA256 |
C2AD7240F83F0389BC978DA4F06340A5A6C420C9863BBF56E87921259C9B5919 |
| SHA384 |
526B7E396C5E150D559A45EFE28CD06AA7A4DE7C74DE1D868B848F28EB652F80C434011017FF4105A9B840C382DA9F99 |
| SHA512 |
BF069B5BE4F28B22F2C5F1EF2CEADD079B817EC92CBE8C94160B3B136DC0FCA6798A9C511D0324098A1C343CA9E9E1F69D289D78C96D955EECE10DE4C9EBDBB2 |
| SSDEEP |
192:L5dhG8eHFSulEa/ocJlFxaGcvsZmbnXphivOO5RK3au19sOtkJqSqLdO6lPlgnP0:k1SulEao8FxaxvdDbjsOtaQqnNWjiW |
| IMP |
1B5FF7212A1B98059799B6F461AB1C25 |
| PESHA1 |
FF6C80E6DE2DC86A1B6292C7F75C480C76812D6C |
| PE256 |
89440FACF28C45E113B7D3E96F849E8A8C233F93032296D6F6F1964CCDC6C582 |
DLL Exports:
| Function Name |
Ordinal |
Type |
WSHJoinLeaf |
11 |
Exported Function |
WSHNotify |
12 |
Exported Function |
WSHGetWSAProtocolInfo |
7 |
Exported Function |
WSHIoctl |
10 |
Exported Function |
WSHSetSocketInformation |
15 |
Exported Function |
WSHStringToAddress |
16 |
Exported Function |
WSHOpenSocket |
13 |
Exported Function |
WSHOpenSocket2 |
14 |
Exported Function |
WSHGetBroadcastSockaddr |
3 |
Exported Function |
WSHGetProviderGuid |
4 |
Exported Function |
WSHAddressToString |
1 |
Exported Function |
WSHEnumProtocols |
2 |
Exported Function |
WSHGetWildcardSockaddr |
8 |
Exported Function |
WSHGetWinsockMapping |
9 |
Exported Function |
WSHGetSockaddrType |
5 |
Exported Function |
WSHGetSocketInformation |
6 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: wshrm.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/66
- VirusTotal Link: https://www.virustotal.com/gui/file/c2ad7240f83f0389bc978da4f06340a5a6c420c9863bbf56e87921259c9b5919/detection/
MIT License. Copyright (c) 2020-2021 Strontic.