Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

5.2.3790.4318 (srv03_sp2_gdr.080620-1216) 0.30%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.30%
5.1.2600.5649 (xpsp_sp3_qfe.080728-1259) 3.88%
5.1.2600.5649 (xpsp_sp3_qfe.080728-1259) 0.30%
5.1.2600.5649 (xpsp_sp3_qfe.080728-1259) 0.30%
5.1.2600.5625 (xpsp_sp3_qfe.080620-1309) 5.07%
5.1.2600.5625 (xpsp_sp3_qfe.080620-1309) 0.90%
5.1.2600.5625 (xpsp_sp3_qfe.080620-1309) 0.30%
5.1.2600.5625 (xpsp_sp3_qfe.080620-1309) 1.19%
5.1.2600.5625 (xpsp_sp3_qfe.080620-1309) 1.49%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 52.24%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 2.99%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.30%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.30%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 2.39%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.60%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 2.39%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.60%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.30%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.90%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 1.79%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 0.30%
5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 1.19%
5.1.2600.5512 (xpsp.080413-0852) 2.99%
5.1.2600.5512 (xpsp.080413-0852) 0.30%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetUserNameA, RegCloseKey, RegQueryValueExA, RegOpenKeyExA, RegQueryValueExW, RegOpenKeyExW, RegEnumKeyExW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW, RegSetValueExA, SetServiceStatus, DeregisterEventSource, RegNotifyChangeKeyValue, RegCreateKeyExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AddAccessAllowedAce, InitializeAcl, GetLengthSid, RegisterEventSourceA, ReportEventA, RegDeleteValueW, RegOpenCurrentUser, RegQueryInfoKeyA, RegEnumValueW, OpenSCManagerA, OpenServiceA, StartServiceA, QueryServiceStatus, CloseServiceHandle, RegisterServiceCtrlHandlerA, RevertToSelf
kernel32.dll
LocalAlloc, LocalFree, FormatMessageA, ReadFile, WriteFile, SetConsoleMode, GetConsoleMode, CreateFileA, ExpandEnvironmentStringsA, QueryPerformanceCounter, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, DelayLoadFailureHook, GetComputerNameExA, WriteProcessMemory, GetCurrentThreadId, IsBadWritePtr, IsBadCodePtr, ResetEvent, SwitchToThread, HeapCreate, HeapAlloc, CreateFileMappingA, MapViewOfFile, GetProcessHeap, HeapDestroy, HeapFree, UnmapViewOfFile, VirtualFree, GetSystemInfo, FormatMessageW, lstrcmpW, TerminateThread, CreateEventW, ResumeThread, SetEvent, lstrlenW, lstrcpyW, VirtualAlloc, CreateEventA, WaitForMultipleObjects, MultiByteToWideChar, LCMapStringW, WideCharToMultiByte, GetOverlappedResult, OpenProcess, GetCurrentProcess, DuplicateHandle, IsBadReadPtr, WaitForSingleObject, GetTickCount, InterlockedExchange, CreateThread, InterlockedExchangeAdd, GetCurrentThread, SetThreadPriority, GetCurrentProcessId, FreeLibraryAndExitThread, GetProcAddress, FreeLibrary, InterlockedCompareExchange, LoadLibraryA, GetLastError, Sleep, SetLastError, LeaveCriticalSection, EnterCriticalSection, GetModuleFileNameA, LoadLibraryW, ExpandEnvironmentStringsW, InterlockedDecrement, GetEnvironmentVariableA, CloseHandle, InitializeCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, PostQueuedCompletionStatus, CreateIoCompletionPort, InterlockedIncrement, SleepEx, OutputDebugStringA
msvcrt.dll
DllMain
ntdll.dll
NtSetIoCompletion, NtRemoveIoCompletion, NtClose, NtSetInformationFile, NtCreateEvent, NtSetInformationObject, NtCreateIoCompletion, RtlFreeHeap, RtlRegisterSecureMemoryCacheCallback, RtlAllocateHeap, DbgPrint, NtOpenKey, RtlInitUnicodeString, RtlQueryRegistryValues, RtlGetNtProductType, NtDeviceIoControlFile, NtCreateFile, NtCancelIoFile, RtlInitializeCriticalSectionAndSpinCount, RtlDeleteCriticalSection, NtSetEvent, RtlRaiseStatus, NtWaitForSingleObject, NtDelayExecution, NtLoadDriver, RtlAdjustPrivilege, RtlImpersonateSelf, NtQuerySystemTime, NtAlertThread, NtQueueApcThread, NtClearEvent, NtReadFile, NtWaitForMultipleObjects, RtlNtStatusToDosError, NtQueryEvent, RtlUnicodeStringToAnsiString, RtlFreeUnicodeString, RtlAnsiStringToUnicodeString, RtlInitAnsiString, RtlFreeAnsiString, RtlDestroyHeap, RtlCreateHeap, RtlDeregisterWaitEx, RtlQueueWorkItem, RtlRegisterWait, NtCreateWaitablePort, NtRequestWaitReplyPort, NtConnectPort, NtReplyPort, RtlIpv6StringToAddressA, RtlIpv6StringToAddressW, RtlInitString, NtQueryValueKey, NtDuplicateObject, NtResetEvent, NtAcceptConnectPort, NtReplyWaitReceivePortEx, NtCompleteConnectPort
rpcrt4.dll
UuidFromStringW, UuidCreate, UuidToStringW, RpcStringFreeW
ws2_32.dll
WSAProviderConfigChange, WSARecv, WSCInstallProvider, WSCUpdateProvider, WSCDeinstallProvider, WSAEnumProtocolsW, WSAIoctl, WSCEnumProtocols, WSCGetProviderPath, WSASocketW
ws2help.dll
WahEnumerateHandleContexts, WahRemoveHandleContext, WahReferenceContextByHandle, WahInsertHandleContext, WahDestroyHandleContextTable, WahCreateHandleContextTable
Export table
AcceptEx
dn_expand
EnumProtocolsA
EnumProtocolsW
GetAcceptExSockaddrs
GetAddressByNameA
GetAddressByNameW
GetNameByTypeA
GetNameByTypeW
getnetbyname
GetServiceA
GetServiceW
GetTypeByNameA
GetTypeByNameW
inet_network
MigrateWinsockConfiguration
NPLoadNameSpaces
NSPStartup
rcmd
rexec
rresvport
s_perror
ServiceMain
sethostname
SetServiceA
SetServiceW
StartWsdpService
StopWsdpService
SvchostPushServiceGlobals
TransmitFile
WSARecvEx
WSPStartup

mswsock.dll

Microsoft Windows Sockets 2.0 Service Provider by Microsoft

Remove mswsock.dll
Version:   5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
MD5:   4e74af063c3271fbea20dd940cfd1184
SHA1:   f4d8d9b3492e0fb5ebeeb30f1fab75340bb09edb
SHA256:   122d43e61578b6d014c4c0029d952e532f71b795379892667fc8147962f4fa79
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

mswsock.dll is loaded as dynamic link library that runs in the context of a process. This version is installed on Windows XP.

DetailsDetails

File name:mswsock.dll
Publisher:Microsoft Corporation
Product name:Microsoft Windows Sockets 2.0 Service Provider
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\mswsock.dll
File version:5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Product version:5.1.2600.2180
Size:239.5 KB (245,248 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'
  • Shared name is 'Nla'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

Distribution by countryDistribution by country

United States installs about 46.84% of Microsoft Windows Sockets 2.0 Service Provider.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 42.78%
Intel 12.83%
Toshiba 7.49%
Compaq 7.49%
American Megatrends 6.42%
GIGABYTE 5.35%
Hewlett-Packard 5.35%
Sahara 3.21%
ASUS 3.21%
Gateway 2.14%
Acer 1.60%
Lenovo 1.07%
Sony 1.07%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE