wshrm.dll

  • File Path: C:\Windows\SysWOW64\wshrm.dll
  • Description: Windows Sockets Helper DLL for PGM

Hashes

Type Hash
MD5 561AD23692E5967AC5A724CB6C1A669D
SHA1 627C20245C33CF8232D91523C3F388D781B64F7D
SHA256 ED2248C25F31286EF382F841E5B6A7CF19E3E915EBA18E8B074B2E78F1375B55
SHA384 1BA59A4AA852A279E73CB6F4811D2A8AAAF555E30B2EAC87A5F08C794F24B70726D748B3F68CF29A63011BDF5469BEF5
SHA512 5BBFF0C1400F2D9DB9484F48FA781ADD4465A6A18C7FA7BA8570D8C20C9F6152D3D808F10014A0713C4E64A0984245DB0BB399059190808CDCB71A163CF99068
SSDEEP 384:rGciEv4LC78VjrQ+ra8eYoQGE9WjiWEO:6c/v4LvVGRYoQg
IMP 3F1C57ABE3EE9C9D5B2982D6771C175B
PESHA1 D619FC1D7B10DD415455F773B666A28B50C5B320
PE256 1D975077151B62ECDDD878701897949C598DC36B1207D4A4CD0C7186A3BB02AA

DLL Exports:

Function Name Ordinal Type
WSHJoinLeaf 11 Exported Function
WSHNotify 12 Exported Function
WSHGetWSAProtocolInfo 7 Exported Function
WSHIoctl 10 Exported Function
WSHSetSocketInformation 15 Exported Function
WSHStringToAddress 16 Exported Function
WSHOpenSocket 14 Exported Function
WSHOpenSocket2 13 Exported Function
WSHGetBroadcastSockaddr 3 Exported Function
WSHGetProviderGuid 4 Exported Function
WSHAddressToString 1 Exported Function
WSHEnumProtocols 2 Exported Function
WSHGetWildcardSockaddr 8 Exported Function
WSHGetWinsockMapping 9 Exported Function
WSHGetSockaddrType 5 Exported Function
WSHGetSocketInformation 6 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wshrm.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/ed2248c25f31286ef382f841e5b6a7cf19e3e915eba18e8b074b2e78f1375b55/detection/

MIT License. Copyright (c) 2020-2021 Strontic.