wshelper.dll
Description: Winsock Net shell helper DLL for winsock
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.1
Architecture: 64-bit
Operating System: Windows NT
SHA256: 9b38b19e5369c0abe0c8654d0702b4cd
File Size: 22.5 KB
Uploaded At: Dec. 1, 2025, 7:45 a.m.
Views: 5
Exported Functions
- InitHelperDll (Ordinal: 1, Address: 0x1040)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoTaskMemFree (Address: 0x1800041d8)
- StringFromCLSID (Address: 0x1800041d0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800041e8)
- SetUnhandledExceptionFilter (Address: 0x1800041f0)
- UnhandledExceptionFilter (Address: 0x1800041f8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180004210)
- HeapAlloc (Address: 0x180004218)
- HeapFree (Address: 0x180004208)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180004228)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180004240)
- GetCurrentProcessId (Address: 0x180004248)
- GetCurrentThreadId (Address: 0x180004238)
- TerminateProcess (Address: 0x180004250)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180004260)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180004270)
- RegCreateKeyExA (Address: 0x180004298)
- RegEnumKeyExA (Address: 0x180004280)
- RegOpenKeyExA (Address: 0x1800042a8)
- RegOpenKeyExW (Address: 0x1800042b0)
- RegQueryValueExA (Address: 0x180004290)
- RegQueryValueExW (Address: 0x180004278)
- RegSetValueExA (Address: 0x1800042a0)
- RegSetValueExW (Address: 0x180004288)
api-ms-win-core-registry-l2-1-0.dll
- RegCopyTreeA (Address: 0x1800042c8)
- RegDeleteKeyA (Address: 0x1800042c0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800042e0)
- RtlLookupFunctionEntry (Address: 0x1800042e8)
- RtlVirtualUnwind (Address: 0x1800042d8)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1800042f8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x180004308)
- GetTickCount (Address: 0x180004310)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x180004320)
msvcrt.dll
- __C_specific_handler (Address: 0x180004330)
- __iob_func (Address: 0x180004380)
- _amsg_exit (Address: 0x180004350)
- _initterm (Address: 0x180004338)
- _XcptFilter (Address: 0x180004358)
- fprintf (Address: 0x180004370)
- free (Address: 0x180004348)
- malloc (Address: 0x180004340)
- memset (Address: 0x180004390)
- wcsstr (Address: 0x180004360)
- wcstok (Address: 0x180004368)
- wcstoul (Address: 0x180004378)
- wprintf (Address: 0x180004388)
MSWSOCK.dll
- MigrateWinsockConfiguration (Address: 0x180004128)
NETSH.EXE
- FreeString (Address: 0x180004158)
- MakeString (Address: 0x180004150)
- MatchEnumTag (Address: 0x180004160)
- MatchToken (Address: 0x180004168)
- PrintError (Address: 0x180004170)
- PrintMessageFromModule (Address: 0x180004138)
- RegisterContext (Address: 0x180004140)
- RegisterHelper (Address: 0x180004148)
wevtapi.dll
- EvtClose (Address: 0x1800043a8)
- EvtCreateRenderContext (Address: 0x1800043b0)
- EvtFormatMessage (Address: 0x1800043a0)
- EvtNext (Address: 0x1800043c8)
- EvtOpenPublisherMetadata (Address: 0x1800043b8)
- EvtQuery (Address: 0x1800043c0)
- EvtRender (Address: 0x1800043d0)
WS2_32.dll
- WahWriteLSPEvent (Address: 0x1800041b8)
- WSAEnumNameSpaceProvidersW (Address: 0x180004180)
- WSAStartup (Address: 0x1800041b0)
- WSCDeinstallProvider (Address: 0x180004198)
- WSCEnumNameSpaceProviders32 (Address: 0x1800041a0)
- WSCEnumProtocols (Address: 0x1800041c0)
- WSCEnumProtocols32 (Address: 0x1800041a8)
- WSCGetProviderPath (Address: 0x180004190)
- WSCGetProviderPath32 (Address: 0x180004188)