I have been experimenting on windows 10 and I came across iphlpapi.dll in system32
The odd thing is that unlike the ip helper the api is it is tied to the shell and explorer.
So what does the api do and why is it tied to the shell?
It cannot be removed inside the OS because you would have to kill explorer and shell to do so.
But if removed, the OS hangs for a bit on the login/loading screen, in that loop windows circle loading animation. After loging in, everything seems fine but then the shell crashes after a few seconds.
I cannot make sense of it
