mprdim.dll
v10.0.19041.6456
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x1f500
SvchostPushServiceGlobals
#2 · 0x1f180
No function matches your filter.
Imported DLLs & functions 256
ADSICloseDSObject
0x10062168
ADSICreateDSObject
0x10062164
ADSIGetObjectAttributes
0x10062160
ADSIOpenDSObject
0x1006216c
ADSISetObjectAttributes
0x10062170
DebugBreak
0x10062188
IsDebuggerPresent
0x1006218c
OutputDebugStringW
0x10062184
DelayLoadFailureHook
0x10062194
ResolveDelayLoadedAPI
0x1006219c
GetLastError
0x100621a4
SetLastError
0x100621ac
SetUnhandledExceptionFilter
0x100621b0
UnhandledExceptionFilter
0x100621a8
GetProcessHeap
0x100621c4
HeapAlloc
0x100621d8
HeapCreate
0x100621d0
HeapDestroy
0x100621c8
HeapFree
0x100621cc
HeapReAlloc
0x100621d4
FreeLibrary
0x10062200
GetModuleFileNameA
0x100621f8
GetModuleHandleExW
0x100621ec
GetModuleHandleW
0x100621f4
GetProcAddress
0x100621fc
LoadLibraryExW
0x100621f0
FormatMessageW
0x10062208
ExpandEnvironmentStringsW
0x10062210
GetCurrentProcess
0x10062228
GetCurrentProcessId
0x10062224
GetCurrentThreadId
0x1006222c
TerminateProcess
0x10062220
TlsGetValue
0x10062218
TlsSetValue
0x1006221c
OpenProcess
0x10062234
QueryPerformanceCounter
0x1006223c
MultiByteToWideChar
0x10062244
AcquireSRWLockExclusive
0x10062274
AcquireSRWLockShared
0x10062264
CreateEventW
0x10062254
CreateMutexExW
0x1006228c
CreateSemaphoreExW
0x10062260
DeleteCriticalSection
0x1006224c
EnterCriticalSection
0x10062258
InitializeCriticalSection
0x10062290
InitializeCriticalSectionEx
0x10062288
InitializeSRWLock
0x1006225c
LeaveCriticalSection
0x10062270
OpenSemaphoreW
0x10062278
ReleaseMutex
0x10062268
ReleaseSemaphore
0x1006226c
ReleaseSRWLockExclusive
0x10062280
ReleaseSRWLockShared
0x10062284
SetEvent
0x1006227c
WaitForSingleObject
0x10062250
WaitForSingleObjectEx
0x10062294
Sleep
0x1006229c
GetSystemDirectoryW
0x100622a8
GetSystemTimeAsFileTime
0x100622ac
GetTickCount
0x100622a4
GetTickCount64
0x100622b0
CloseThreadpool
0x100622c0
CloseThreadpoolCleanupGroup
0x100622c8
CloseThreadpoolCleanupGroupMembers
0x100622cc
CloseThreadpoolTimer
0x100622e8
CreateThreadpool
0x100622dc
CreateThreadpoolCleanupGroup
0x100622d8
CreateThreadpoolTimer
0x100622e0
CreateThreadpoolWork
0x100622bc
SetThreadpoolThreadMaximum
0x100622d4
SetThreadpoolThreadMinimum
0x100622d0
SetThreadpoolTimer
0x100622c4
SubmitThreadpoolWork
0x100622b8
WaitForThreadpoolTimerCallbacks
0x100622e4
DevCloseObjectQuery
0x100622fc
DevCreateObjectQuery
0x10062300
AccessCheckAndAuditAlarmW
0x1006232c
AddAccessAllowedAce
0x10062340
CheckTokenMembership
0x10062330
CreatePrivateObjectSecurity
0x10062320
DestroyPrivateObjectSecurity
0x10062318
GetLengthSid
0x1006233c
GetSidLengthRequired
0x1006231c
GetSidSubAuthority
0x10062314
InitializeAcl
0x10062338
InitializeSecurityDescriptor
0x10062334
InitializeSid
0x10062324
IsValidSecurityDescriptor
0x10062328
SetSecurityDescriptorDacl
0x10062348
SetSecurityDescriptorGroup
0x10062344
SetSecurityDescriptorOwner
0x1006234c
RegisterServiceCtrlHandlerExW
0x10062354
SetServiceStatus
0x10062358
CertAddEncodedCertificateToStore
0x10062000
CertCloseStore
0x10062014
CertFreeCertificateContext
0x10062018
CertGetNameStringW
0x1006200c
CertNameToStrW
0x10062008
CertOpenStore
0x10062004
CryptDecodeObjectEx
0x10062010
IPHLPAPI.DLL
12
CancelMibChangeNotify2
0x10062020
CloseCompartment
0x10062040
ConvertInterfaceGuidToLuid
0x10062030
ConvertInterfaceLuidToAlias
0x10062044
ConvertInterfaceLuidToIndex
0x10062028
GetAdaptersAddresses
0x10062038
GetCurrentThreadCompartmentId
0x1006202c
GetIfEntry2
0x10062034
NotifyCompartmentChange
0x10062048
NotifyIpInterfaceChange
0x1006204c
OpenCompartment
0x1006203c
SetCurrentThreadCompartmentId
0x10062024
CreateMutexW
0x10062058
lstrcmpiW
0x10062068
QueueUserWorkItem
0x10062064
RegDeleteKeyExW
0x10062054
RegDeleteValueW
0x10062060
RegGetValueW
0x1006205c
UnregisterWait
0x1006206c
VerifyVersionInfoW
0x10062070
MPRDDM.dll
49
DDMAdminConnectionClearStats
0x100620dc
DDMAdminConnectionEnum
0x100620f4
DDMAdminConnectionEnumEx
0x10062138
DDMAdminConnectionGetInfo
0x1006209c
DDMAdminConnectionGetInfoEx
0x100620e4
DDMAdminInterfaceConnect
0x100620c4
DDMAdminInterfaceDisconnect
0x1006212c
DDMAdminPortClearStats
0x100620d0
DDMAdminPortDisconnect
0x10062124
DDMAdminPortEnum
0x100620e0
DDMAdminPortGetInfo
0x100620a4
DDMAdminPortReset
0x10062098
DDMAdminRemoveQuarantine
0x100620d4
DDMAdminRoutingDomainConnectionEnumEx
0x100620f8
DDMAdminServerGetInfo
0x10062128
DDMAdminServerGetInfoEx
0x100620d8
DDMAdminServerSetInfo
0x100620e8
DDMAdminServerSetInfoEx
0x100620ec
DDMAdminUpdateConnection
0x100620f0
DDMAdminUpdateQoSPolicies
0x100620c8
DDMConnectInterface
0x10062084
DdmDeleteIkev2PskPolicy
0x10062100
DDMDisconnectInterface
0x10062080
DDMGetIdentityAttributes
0x1006207c
DdmGetKey
0x10062130
DDMHandleRoutingDomainConfigChange
0x10062134
DdmPlumbIkev2PskPolicy
0x10062104
DDMPlumbRDIkev2TunnelPolicy
0x10062088
DDMPostCleanup
0x100620b4
DDMRegisterConnectionNotification
0x100620cc
DDMSendUserMessage
0x10062094
DDMServiceInitialize
0x1006208c
DDMServicePostListens
0x100620c0
DdmSetKey
0x10062120
DDMTransportCreate
0x100620a0
DdmUpdateGlobalPhoneBookContext
0x100620b0
IfObjectConnectionChangeNotification
0x10062114
IfObjectFreePhonebookContext
0x10062090
IfObjectGetStatistics
0x1006211c
IfObjectLoadDestinationInfo
0x10062108
IfObjectLoadPhonebookInfo
0x10062110
IfObjectSetDialoutHoursRestriction
0x100620bc
IfObjectUpdatePbkInfo
0x1006210c
MarkInterfaceAsReachable
0x100620a8
RasConnectionInitiate
0x10062118
ReConnectInterface
0x100620fc
ReConnectPersistentInterface
0x100620ac
TimerQInsert
0x10062078
TimerQRemove
0x100620b8
msvcrt.dll
47
__CxxFrameHandler3
0x10062404
__dllonexit
0x10062360
__RTDynamicCast
0x100623e8
_amsg_exit
0x1006237c
_callnewh
0x10062388
_CxxThrowException
0x10062384
_except_handler4_common
0x1006236c
_initterm
0x10062378
_itow
0x100623d8
_itow_s
0x100623dc
_lock
0x10062368
_onexit
0x10062400
_purecall
0x100623a4
_time64
0x100623f8
_unlock
0x10062414
_vsnprintf
0x100623c8
_vsnprintf_s
0x1006239c
_vsnwprintf
0x100623d0
_wcsicmp
0x100623f0
_wcsnicmp
0x1006238c
_XcptFilter
0x10062380
??_V@YAXPAX@Z
0x100623b8
??0exception@@QAE@ABQBD@Z
0x100623a8
??0exception@@QAE@ABV0@@Z
0x100623fc
??0exception@@QAE@XZ
0x10062408
??1exception@@UAE@XZ
0x1006240c
??1type_info@@UAE@XZ
0x10062370
??3@YAXPAX@Z
0x10062410
?terminate@@YAXXZ
0x10062374
?what@exception@@UBEPBDXZ
0x100623ac
free
0x100623b4
malloc
0x100623b0
memcmp
0x100623e4
memcpy
0x100623e0
memcpy_s
0x100623a0
memmove
0x10062364
memmove_s
0x10062398
memset
0x10062418
scanf_s
0x100623c4
srand
0x100623f4
strncmp
0x100623c0
swscanf
0x100623cc
wcschr
0x10062390
wcscpy_s
0x10062394
wcsnlen
0x100623bc
wcsrchr
0x100623ec
wcsstr
0x100623d4
ntdll.dll
18
RtlAcquireResourceExclusive
0x10062460
RtlAcquireResourceShared
0x10062464
RtlCreateTimer
0x10062440
RtlCreateTimerQueue
0x10062444
RtlDeleteResource
0x10062458
RtlDeleteTimer
0x10062448
RtlDeleteTimerQueueEx
0x1006243c
RtlGUIDFromString
0x10062450
RtlInitializeResource
0x10062454
RtlInitUnicodeString
0x1006242c
RtlIpv4AddressToStringW
0x10062430
RtlIpv4StringToAddressW
0x10062420
RtlIpv6AddressToStringW
0x10062434
RtlIpv6StringToAddressW
0x10062424
RtlNtStatusToDosError
0x10062428
RtlQueueWorkItem
0x1006244c
RtlReleaseResource
0x1006245c
VerSetConditionMask
0x10062438
RouterLogDeregisterW
0x1006247c
RouterLogEventStringW
0x10062478
RouterLogEventW
0x10062474
RouterLogRegisterW
0x10062480
TraceDeregisterA
0x1006246c
TraceRegisterExA
0x10062470
LoadStringW
0x10062158
RegisterDeviceNotificationW
0x10062154
UnregisterDeviceNotification
0x10062150
No function matches your filter.