mswsock.dll

Description: Microsoft Windows Sockets 2.0 Service Provider

Version: 10.0.19041.5915

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7737de64a4d0e2dd42343cfb6720744d

File Size: 317.9 KB

Uploaded At: Dec. 1, 2025, 8:01 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

AcceptEx (Ordinal: 1, Address: 0x24d80)
EnumProtocolsA (Ordinal: 2, Address: 0x25170)
EnumProtocolsW (Ordinal: 3, Address: 0x251f0)
GetAcceptExSockaddrs (Ordinal: 4, Address: 0x24e70)
GetAddressByNameA (Ordinal: 5, Address: 0x26460)
GetAddressByNameW (Ordinal: 6, Address: 0x26640)
GetNameByTypeA (Ordinal: 7, Address: 0x26760)
GetNameByTypeW (Ordinal: 8, Address: 0x26840)
GetServiceA (Ordinal: 9, Address: 0x26ec0)
GetServiceW (Ordinal: 10, Address: 0x26f20)
GetSocketErrorMessageW (Ordinal: 11, Address: 0x27c60)
GetTypeByNameA (Ordinal: 12, Address: 0x26b00)
GetTypeByNameW (Ordinal: 13, Address: 0x26b60)
MigrateWinsockConfiguration (Ordinal: 14, Address: 0x2b780)
MigrateWinsockConfigurationEx (Ordinal: 15, Address: 0x2b7c0)
NPLoadNameSpaces (Ordinal: 16, Address: 0x28900)
NSPStartup (Ordinal: 17, Address: 0x220a0)
SetServiceA (Ordinal: 18, Address: 0x27820)
SetServiceW (Ordinal: 19, Address: 0x279b0)
StartWsdpService (Ordinal: 20, Address: 0x10910)
StopWsdpService (Ordinal: 21, Address: 0x10b00)
Tcpip4_WSHAddressToString (Ordinal: 22, Address: 0x2e470)
Tcpip4_WSHEnumProtocols (Ordinal: 23, Address: 0x2e4f0)
Tcpip4_WSHGetBroadcastSockaddr (Ordinal: 24, Address: 0x2e630)
Tcpip4_WSHGetProviderGuid (Ordinal: 25, Address: 0x2e680)
Tcpip4_WSHGetSockaddrType (Ordinal: 26, Address: 0x2e6d0)
Tcpip4_WSHGetSocketInformation (Ordinal: 27, Address: 0x2e760)
Tcpip4_WSHGetWSAProtocolInfo (Ordinal: 28, Address: 0x2e7b0)
Tcpip4_WSHGetWildcardSockaddr (Ordinal: 29, Address: 0x2e810)
Tcpip4_WSHGetWinsockMapping (Ordinal: 30, Address: 0x2e880)
Tcpip4_WSHIoctl (Ordinal: 31, Address: 0x2e8f0)
Tcpip4_WSHJoinLeaf (Ordinal: 32, Address: 0x2e900)
Tcpip4_WSHNotify (Ordinal: 33, Address: 0x2e9a0)
Tcpip4_WSHOpenSocket2 (Ordinal: 34, Address: 0x2e9f0)
Tcpip4_WSHOpenSocket (Ordinal: 35, Address: 0x2ec60)
Tcpip4_WSHSetSocketInformation (Ordinal: 36, Address: 0x2ec90)
Tcpip4_WSHStringToAddress (Ordinal: 37, Address: 0x2ecc0)
Tcpip6_WSHAddressToString (Ordinal: 38, Address: 0x2e470)
Tcpip6_WSHEnumProtocols (Ordinal: 39, Address: 0x2ed70)
Tcpip6_WSHGetProviderGuid (Ordinal: 40, Address: 0x2eeb0)
Tcpip6_WSHGetSockaddrType (Ordinal: 41, Address: 0x2ef00)
Tcpip6_WSHGetSocketInformation (Ordinal: 42, Address: 0x83b0)
Tcpip6_WSHGetWSAProtocolInfo (Ordinal: 43, Address: 0x2ef90)
Tcpip6_WSHGetWildcardSockaddr (Ordinal: 44, Address: 0x2e810)
Tcpip6_WSHGetWinsockMapping (Ordinal: 45, Address: 0x2eff0)
Tcpip6_WSHIoctl (Ordinal: 46, Address: 0x2e8f0)
Tcpip6_WSHJoinLeaf (Ordinal: 47, Address: 0x2f060)
Tcpip6_WSHNotify (Ordinal: 48, Address: 0x2f110)
Tcpip6_WSHOpenSocket2 (Ordinal: 49, Address: 0x9900)
Tcpip6_WSHOpenSocket (Ordinal: 50, Address: 0x2f160)
Tcpip6_WSHSetSocketInformation (Ordinal: 51, Address: 0x2ec90)
Tcpip6_WSHStringToAddress (Ordinal: 52, Address: 0x2f190)
TransmitFile (Ordinal: 53, Address: 0x25110)
WSARecvEx (Ordinal: 54, Address: 0x29280)
WSPStartup (Ordinal: 55, Address: 0x99c0)
dn_expand (Ordinal: 56, Address: 0x22460)
getnetbyname (Ordinal: 57, Address: 0x10db0)
inet_network (Ordinal: 58, Address: 0x10dd0)
rcmd (Ordinal: 59, Address: 0x10de0)
rexec (Ordinal: 60, Address: 0x10de0)
rresvport (Ordinal: 61, Address: 0x10e00)
s_perror (Ordinal: 62, Address: 0x282b0)
sethostname (Ordinal: 63, Address: 0x10e20)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x4e34a0a0)

api-ms-win-core-crt-l1-1-0.dll

_except_handler4_common (Address: 0x4e34a0a8)
_stricmp (Address: 0x4e34a0e8)
_vsnwprintf_s (Address: 0x4e34a0c4)
_wcsicmp (Address: 0x4e34a0d8)
_wcsnicmp (Address: 0x4e34a0bc)
atoi (Address: 0x4e34a0dc)
isdigit (Address: 0x4e34a0e0)
memcmp (Address: 0x4e34a0b0)
memcpy (Address: 0x4e34a0b4)
memmove (Address: 0x4e34a0b8)
memset (Address: 0x4e34a0ac)
strlen (Address: 0x4e34a0d4)
wcschr (Address: 0x4e34a0e4)
wcscpy_s (Address: 0x4e34a0c8)
wcslen (Address: 0x4e34a0d0)
wcsncat_s (Address: 0x4e34a0f0)
wcsncpy_s (Address: 0x4e34a0f4)
wcsstr (Address: 0x4e34a0c0)
wcstol (Address: 0x4e34a0cc)
wcstoul (Address: 0x4e34a0ec)

api-ms-win-core-crt-l2-1-0.dll

_initterm (Address: 0x4e34a104)
_initterm_e (Address: 0x4e34a108)
hgets (Address: 0x4e34a0fc)
hwprintf (Address: 0x4e34a100)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x4e34a110)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x4e34a118)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x4e34a120)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x4e34a128)
SetLastError (Address: 0x4e34a134)
SetUnhandledExceptionFilter (Address: 0x4e34a12c)
UnhandledExceptionFilter (Address: 0x4e34a130)

api-ms-win-core-file-l1-1-0.dll

CreateFileA (Address: 0x4e34a140)
SetFilePointer (Address: 0x4e34a13c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x4e34a14c)
DuplicateHandle (Address: 0x4e34a148)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x4e34a154)
HeapAlloc (Address: 0x4e34a15c)
HeapFree (Address: 0x4e34a158)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x4e34a164)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x4e34a174)
GetOverlappedResult (Address: 0x4e34a16c)
PostQueuedCompletionStatus (Address: 0x4e34a170)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x4e34a17c)
FreeLibraryAndExitThread (Address: 0x4e34a18c)
GetModuleFileNameW (Address: 0x4e34a190)
GetModuleHandleExA (Address: 0x4e34a184)
GetProcAddress (Address: 0x4e34a188)
LoadLibraryExW (Address: 0x4e34a180)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x4e34a198)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x4e34a1a4)
VirtualFree (Address: 0x4e34a1a0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x4e34a1b0)
ExpandEnvironmentStringsW (Address: 0x4e34a1b4)
GetEnvironmentVariableW (Address: 0x4e34a1ac)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x4e34a1bc)
GetCurrentProcess (Address: 0x4e34a1dc)
GetCurrentProcessId (Address: 0x4e34a1d8)
GetCurrentThread (Address: 0x4e34a1c8)
GetCurrentThreadId (Address: 0x4e34a1e0)
OpenProcessToken (Address: 0x4e34a1cc)
ResumeThread (Address: 0x4e34a1e4)
SetThreadPriority (Address: 0x4e34a1c4)
TerminateProcess (Address: 0x4e34a1e8)
TerminateThread (Address: 0x4e34a1ec)
TlsAlloc (Address: 0x4e34a1d0)
TlsFree (Address: 0x4e34a1f0)
TlsGetValue (Address: 0x4e34a1c0)
TlsSetValue (Address: 0x4e34a1d4)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x4e34a1f8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x4e34a200)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x4e34a208)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x4e34a220)
RegCreateKeyExW (Address: 0x4e34a210)
RegDeleteKeyExW (Address: 0x4e34a234)
RegEnumKeyExW (Address: 0x4e34a238)
RegOpenKeyExA (Address: 0x4e34a218)
RegOpenKeyExW (Address: 0x4e34a228)
RegQueryInfoKeyW (Address: 0x4e34a230)
RegQueryValueExA (Address: 0x4e34a21c)
RegQueryValueExW (Address: 0x4e34a214)
RegSetValueExA (Address: 0x4e34a22c)
RegSetValueExW (Address: 0x4e34a224)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x4e34a244)
WideCharToMultiByte (Address: 0x4e34a240)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x4e34a24c)

api-ms-win-core-synch-l1-1-0.dll

CreateEventA (Address: 0x4e34a258)
CreateEventW (Address: 0x4e34a268)
DeleteCriticalSection (Address: 0x4e34a284)
EnterCriticalSection (Address: 0x4e34a278)
InitializeCriticalSection (Address: 0x4e34a27c)
InitializeCriticalSectionAndSpinCount (Address: 0x4e34a25c)
LeaveCriticalSection (Address: 0x4e34a274)
OpenEventW (Address: 0x4e34a280)
SetEvent (Address: 0x4e34a264)
SleepEx (Address: 0x4e34a270)
WaitForMultipleObjectsEx (Address: 0x4e34a260)
WaitForSingleObject (Address: 0x4e34a254)
WaitForSingleObjectEx (Address: 0x4e34a26c)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x4e34a28c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x4e34a298)
GetTickCount (Address: 0x4e34a294)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x4e34a2a4)
EncodePointer (Address: 0x4e34a2a0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x4e34a2ac)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x4e34a2b4)
EtwGetTraceEnableLevel (Address: 0x4e34a2c0)
EtwGetTraceLoggerHandle (Address: 0x4e34a2b8)
EtwRegisterTraceGuidsW (Address: 0x4e34a2c4)
EtwTraceMessageVa (Address: 0x4e34a328)
EtwUnregisterTraceGuids (Address: 0x4e34a2dc)
NtAlertThread (Address: 0x4e34a390)
NtCancelIoFile (Address: 0x4e34a35c)
NtClearEvent (Address: 0x4e34a3a8)
NtClose (Address: 0x4e34a348)
NtCreateEvent (Address: 0x4e34a2d4)
NtCreateFile (Address: 0x4e34a36c)
NtCreateIoCompletion (Address: 0x4e34a374)
NtDelayExecution (Address: 0x4e34a354)
NtDeviceIoControlFile (Address: 0x4e34a39c)
NtLoadDriver (Address: 0x4e34a330)
NtOpenKey (Address: 0x4e34a34c)
NtQueryEvent (Address: 0x4e34a320)
NtQueryInformationFile (Address: 0x4e34a314)
NtQuerySystemTime (Address: 0x4e34a2e4)
NtQueryValueKey (Address: 0x4e34a380)
NtQueueApcThread (Address: 0x4e34a38c)
NtReadFile (Address: 0x4e34a398)
NtRemoveIoCompletion (Address: 0x4e34a33c)
NtSetEvent (Address: 0x4e34a3a0)
NtSetInformationFile (Address: 0x4e34a30c)
NtSetInformationObject (Address: 0x4e34a370)
NtSetInformationThread (Address: 0x4e34a32c)
NtSetIoCompletion (Address: 0x4e34a338)
NtWaitForMultipleObjects (Address: 0x4e34a378)
NtWaitForSingleObject (Address: 0x4e34a394)
RtlAdjustPrivilege (Address: 0x4e34a334)
RtlAllocateHeap (Address: 0x4e34a384)
RtlAnsiStringToUnicodeString (Address: 0x4e34a2f8)
RtlAppendUnicodeStringToString (Address: 0x4e34a2d8)
RtlDeleteCriticalSection (Address: 0x4e34a358)
RtlDestroyHeap (Address: 0x4e34a2bc)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x4e34a318)
RtlFreeAnsiString (Address: 0x4e34a2ec)
RtlFreeHeap (Address: 0x4e34a3ac)
RtlFreeUnicodeString (Address: 0x4e34a304)
RtlGetNtProductType (Address: 0x4e34a3b0)
RtlImpersonateSelf (Address: 0x4e34a340)
RtlInitAnsiString (Address: 0x4e34a2f4)
RtlInitializeCriticalSectionAndSpinCount (Address: 0x4e34a2fc)
RtlInitString (Address: 0x4e34a37c)
RtlInitUnicodeString (Address: 0x4e34a350)
RtlIntegerToUnicodeString (Address: 0x4e34a2cc)
RtlIpv4AddressToStringExW (Address: 0x4e34a2d0)
RtlIpv4AddressToStringW (Address: 0x4e34a310)
RtlIpv4StringToAddressExW (Address: 0x4e34a2e8)
RtlIpv4StringToAddressW (Address: 0x4e34a364)
RtlIpv6AddressToStringExW (Address: 0x4e34a2c8)
RtlIpv6StringToAddressExW (Address: 0x4e34a2e0)
RtlIpv6StringToAddressW (Address: 0x4e34a360)
RtlNtStatusToDosError (Address: 0x4e34a3a4)
RtlQueryRegistryValuesEx (Address: 0x4e34a368)
RtlRaiseStatus (Address: 0x4e34a344)
RtlRegisterSecureMemoryCacheCallback (Address: 0x4e34a308)
RtlStringFromGUID (Address: 0x4e34a2f0)
RtlUnicodeStringToAnsiString (Address: 0x4e34a300)
RtlUTF8ToUnicodeN (Address: 0x4e34a31c)
ShipAssert (Address: 0x4e34a324)
WinSqmIsOptedIn (Address: 0x4e34a388)

RPCRT4.dll

RpcStringFreeW (Address: 0x4e34a000)
UuidCreate (Address: 0x4e34a00c)
UuidFromStringW (Address: 0x4e34a008)
UuidToStringW (Address: 0x4e34a004)

WS2_32.dll

closesocket (Address: 0x4e34a014)
gethostname (Address: 0x4e34a060)
getnameinfo (Address: 0x4e34a03c)
getservbyname (Address: 0x4e34a050)
getservbyport (Address: 0x4e34a054)
htons (Address: 0x4e34a040)
inet_addr (Address: 0x4e34a064)
ntohs (Address: 0x4e34a028)
setsockopt (Address: 0x4e34a074)
WahCreateHandleContextTable (Address: 0x4e34a084)
WahDestroyHandleContextTable (Address: 0x4e34a070)
WahEnumerateHandleContexts (Address: 0x4e34a05c)
WahInsertHandleContext (Address: 0x4e34a02c)
WahReferenceContextByHandle (Address: 0x4e34a030)
WahRemoveHandleContext (Address: 0x4e34a06c)
WPUGetProviderPathEx (Address: 0x4e34a08c)
WSACleanup (Address: 0x4e34a058)
WSAEnumProtocolsW (Address: 0x4e34a048)
WSAGetLastError (Address: 0x4e34a020)
WSAIoctl (Address: 0x4e34a044)
WSAIsBlocking (Address: 0x4e34a098)
WSAProviderConfigChange (Address: 0x4e34a024)
WSARecv (Address: 0x4e34a068)
WSASetLastError (Address: 0x4e34a04c)
WSASocketW (Address: 0x4e34a018)
WSAStartup (Address: 0x4e34a01c)
WSCDeinstallProviderEx (Address: 0x4e34a088)
WSCEnumProtocols (Address: 0x4e34a038)
WSCEnumProtocolsEx (Address: 0x4e34a078)
WSCGetProviderPath (Address: 0x4e34a034)
WSCInstallProviderEx (Address: 0x4e34a080)
WSCUpdateProvider (Address: 0x4e34a07c)
WSCUpdateProviderEx (Address: 0x4e34a094)
WSCWriteProviderOrderEx (Address: 0x4e34a090)