PeerDist.dll

Description: BranchCache Client Library

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 041793886535a8a8add3b88a4f5a3fc8

File Size: 177.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

PeerDistClientAddContentInformation (Ordinal: 1, Address: 0x64d0)
PeerDistClientAddData (Ordinal: 2, Address: 0x67e0)
PeerDistClientBlockRead (Ordinal: 3, Address: 0x6980)
PeerDistClientCancelAsyncOperation (Ordinal: 4, Address: 0x51e0)
PeerDistClientCloseContent (Ordinal: 5, Address: 0x6340)
PeerDistClientCompleteContentInformation (Ordinal: 6, Address: 0x6670)
PeerDistClientFlushContent (Ordinal: 7, Address: 0x6cc0)
PeerDistClientGetInformationByHandle (Ordinal: 8, Address: 0x6e40)
PeerDistClientOpenContent (Ordinal: 9, Address: 0x61c0)
PeerDistClientStreamRead (Ordinal: 10, Address: 0x6b20)
PeerDistGetOverlappedResult (Ordinal: 11, Address: 0x6fc0)
PeerDistGetStatus (Ordinal: 12, Address: 0x4e20)
PeerDistGetStatusEx (Ordinal: 13, Address: 0x4e40)
PeerDistRegisterForStatusChangeNotification (Ordinal: 14, Address: 0x5030)
PeerDistRegisterForStatusChangeNotificationEx (Ordinal: 15, Address: 0x5060)
PeerDistServerCancelAsyncOperation (Ordinal: 16, Address: 0x5370)
PeerDistServerCloseContentInformation (Ordinal: 17, Address: 0x6070)
PeerDistServerCloseStreamHandle (Ordinal: 18, Address: 0x5980)
PeerDistServerOpenContentInformation (Ordinal: 19, Address: 0x5e00)
PeerDistServerOpenContentInformationEx (Ordinal: 20, Address: 0x5e80)
PeerDistServerPublishAddToStream (Ordinal: 21, Address: 0x5680)
PeerDistServerPublishCompleteStream (Ordinal: 22, Address: 0x5810)
PeerDistServerPublishStream (Ordinal: 23, Address: 0x54e0)
PeerDistServerRetrieveContentInformation (Ordinal: 24, Address: 0x5ed0)
PeerDistServerUnpublish (Ordinal: 25, Address: 0x5ad0)
PeerDistShutdown (Ordinal: 26, Address: 0x48d0)
PeerDistStartup (Ordinal: 27, Address: 0x4570)
PeerDistUnregisterForStatusChangeNotification (Ordinal: 28, Address: 0x5090)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10022114)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1002211c)

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter (Address: 0x10022128)
UnhandledExceptionFilter (Address: 0x10022124)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10022130)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10022144)
GetCurrentProcessId (Address: 0x10022140)
GetCurrentThreadId (Address: 0x1002213c)
OpenProcessToken (Address: 0x10022138)
TerminateProcess (Address: 0x10022148)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10022150)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x10022158)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10022164)
GetTickCount (Address: 0x10022160)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x1002216c)
CreateWellKnownSid (Address: 0x10022170)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x10022180)
OpenSCManagerW (Address: 0x10022184)
OpenServiceW (Address: 0x10022178)
StartServiceW (Address: 0x1002217c)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x1002218c)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1002204c)
AcquireSRWLockShared (Address: 0x10022054)
CheckRemoteDebuggerPresent (Address: 0x10022008)
CloseHandle (Address: 0x10022078)
CloseThreadpoolCleanupGroup (Address: 0x10022028)
CloseThreadpoolCleanupGroupMembers (Address: 0x1002202c)
CloseThreadpoolTimer (Address: 0x100220ac)
CloseThreadpoolWait (Address: 0x10022010)
CloseThreadpoolWork (Address: 0x10022020)
CreateEventW (Address: 0x1002203c)
CreateThread (Address: 0x1002207c)
CreateThreadpoolCleanupGroup (Address: 0x10022030)
CreateThreadpoolTimer (Address: 0x100220a0)
CreateThreadpoolWait (Address: 0x1002201c)
CreateThreadpoolWork (Address: 0x10022024)
DebugBreak (Address: 0x10022000)
DeleteCriticalSection (Address: 0x10022098)
DeleteTimerQueueEx (Address: 0x10022038)
DuplicateHandle (Address: 0x10022040)
EnterCriticalSection (Address: 0x100220c0)
FileTimeToSystemTime (Address: 0x100220b0)
FormatMessageW (Address: 0x10022090)
GetHandleInformation (Address: 0x10022044)
GetLastError (Address: 0x1002205c)
GetModuleFileNameW (Address: 0x100220c4)
GetTickCount64 (Address: 0x10022074)
GlobalMemoryStatusEx (Address: 0x100220d8)
InitializeCriticalSectionAndSpinCount (Address: 0x100220bc)
InitializeSRWLock (Address: 0x100220b4)
IsDebuggerPresent (Address: 0x10022004)
IsWow64Process (Address: 0x100220d0)
K32EnumProcessModules (Address: 0x100220c8)
LeaveCriticalSection (Address: 0x1002209c)
LocalFree (Address: 0x10022094)
lstrcmpiW (Address: 0x10022060)
OpenProcess (Address: 0x100220cc)
QueryFullProcessImageNameW (Address: 0x10022058)
RegCloseKey (Address: 0x10022080)
RegNotifyChangeKeyValue (Address: 0x10022088)
RegOpenKeyExW (Address: 0x10022084)
RegQueryValueExW (Address: 0x100220d4)
ReleaseSRWLockExclusive (Address: 0x10022048)
ReleaseSRWLockShared (Address: 0x10022050)
ResetEvent (Address: 0x10022068)
SetEvent (Address: 0x10022070)
SetEventWhenCallbackReturns (Address: 0x1002200c)
SetLastError (Address: 0x1002206c)
SetThreadpoolTimer (Address: 0x100220a4)
SetThreadpoolWait (Address: 0x10022018)
SubmitThreadpoolWork (Address: 0x10022034)
TryEnterCriticalSection (Address: 0x100220b8)
WaitForMultipleObjectsEx (Address: 0x1002208c)
WaitForSingleObject (Address: 0x10022064)
WaitForThreadpoolTimerCallbacks (Address: 0x100220a8)
WaitForThreadpoolWaitCallbacks (Address: 0x10022014)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100221b0)
__dllonexit (Address: 0x100221c0)
_amsg_exit (Address: 0x100221a4)
_callnewh (Address: 0x100221dc)
_CxxThrowException (Address: 0x1002219c)
_except_handler4_common (Address: 0x100221b8)
_initterm (Address: 0x100221a8)
_lock (Address: 0x100221ec)
_onexit (Address: 0x100221c4)
_purecall (Address: 0x100221e8)
_unlock (Address: 0x100221bc)
_XcptFilter (Address: 0x100221a0)
??0exception@@QAE@ABQBD@Z (Address: 0x100221c8)
??0exception@@QAE@ABV0@@Z (Address: 0x100221b4)
??0exception@@QAE@XZ (Address: 0x100221e4)
??1exception@@UAE@XZ (Address: 0x10022194)
??1type_info@@UAE@XZ (Address: 0x100221ac)
?terminate@@YAXXZ (Address: 0x100221cc)
?what@exception@@UBEPBDXZ (Address: 0x10022198)
free (Address: 0x100221d8)
malloc (Address: 0x100221d4)
memcmp (Address: 0x100221e0)
memcpy (Address: 0x100221d0)
memset (Address: 0x100221f0)

ntdll.dll

DbgPrint (Address: 0x10022234)
EtwEventActivityIdControl (Address: 0x1002220c)
EtwEventRegister (Address: 0x10022218)
EtwEventUnregister (Address: 0x10022210)
EtwEventWrite (Address: 0x100221f8)
EtwEventWriteTransfer (Address: 0x10022208)
EtwGetTraceEnableFlags (Address: 0x10022224)
EtwGetTraceEnableLevel (Address: 0x10022228)
EtwGetTraceLoggerHandle (Address: 0x1002222c)
EtwRegisterTraceGuidsW (Address: 0x10022220)
EtwTraceMessage (Address: 0x10022230)
EtwUnregisterTraceGuids (Address: 0x1002221c)
NtAllocateReserveObject (Address: 0x100221fc)
NtSetIoCompletionEx (Address: 0x10022204)
RtlDllShutdownInProgress (Address: 0x10022214)
RtlNtStatusToDosError (Address: 0x10022200)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x100220f0)
NdrAsyncClientCall2 (Address: 0x100220e0)
NdrClientCall4 (Address: 0x100220fc)
RpcAsyncCancelCall (Address: 0x100220e8)
RpcAsyncCompleteCall (Address: 0x100220e4)
RpcAsyncInitializeHandle (Address: 0x100220ec)
RpcBindingFree (Address: 0x1002210c)
RpcBindingFromStringBindingW (Address: 0x10022104)
RpcBindingSetAuthInfoExW (Address: 0x10022108)
RpcSsDestroyClientContext (Address: 0x100220f4)
RpcStringBindingComposeW (Address: 0x10022100)
RpcStringFreeW (Address: 0x100220f8)