MpClient.dll
v4.18.1909.6
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 158
MpDbgAllocMemory
#1 · 0xe720
MpGetEngineVersion
#2 · 0xcfc0
MpTelemetryAddToAverageDWORD
#3 · 0x1c30
MpTelemetryAddToStreamDWORD64
#4 · 0x1c30
MpTelemetryAddToStreamDWORD
#5 · 0x1c30
MpTelemetryAddToStreamString
#6 · 0x1c30
MpTelemetryIncrementDWORD
#7 · 0x1c30
MpTelemetryInitialize
#8 · 0x24f30
MpTelemetryIsOptIn
#9 · 0x2f260
MpTelemetryLiteralAddToAverageDWORD
#10 · 0x1c30
MpTelemetryLiteralAddToStreamDWORD64
#11 · 0x1c30
MpTelemetryLiteralAddToStreamDWORD
#12 · 0x1c30
MpTelemetryLiteralAddToStreamString
#13 · 0x1c30
MpTelemetryLiteralIncrementDWORD
#14 · 0x1c30
MpTelemetryLiteralSetDWORD64
#15 · 0x1c30
MpTelemetryLiteralSetDWORD
#16 · 0x1c30
MpTelemetryLiteralSetIfMaxDWORD
#17 · 0x1c30
MpTelemetryLiteralSetIfMinDWORD
#18 · 0x1c30
MpTelemetryLiteralSetString
#19 · 0x1c30
MpTelemetrySetConsent
#20 · 0x4f10
MpTelemetrySetDWORD64
#21 · 0x1c30
MpTelemetrySetDWORD
#22 · 0x1c30
MpTelemetrySetIfMaxDWORD
#23 · 0x1c30
MpTelemetrySetIfMinDWORD
#24 · 0x1c30
MpTelemetrySetString
#25 · 0x1c30
MpTelemetryUninitialize
#26 · 0x24f30
MpTelemetryUpdateUserConsent
#27 · 0x24f30
MpTelemetryUpload
#28 · 0x24f30
MpUpdateEngine
#29 · 0xd140
MputAddToAverageDWORD64Rpc
#30 · 0x4f10
MputAddToAverageDWORDRpc
#31 · 0x4f10
MputIncrementDWORD64Rpc
#32 · 0x4f10
MputIncrementDWORDRpc
#33 · 0x4f10
MputSetBoolRpc
#34 · 0x4f10
MputSetDWORD64Rpc
#35 · 0x4f10
MputSetDWORDRpc
#36 · 0x4f10
MputSetIfMaxDWORD64Rpc
#37 · 0x4f10
MputSetIfMaxDWORDRpc
#38 · 0x4f10
MputSetIfMinDWORD64Rpc
#39 · 0x4f10
MputSetIfMinDWORDRpc
#40 · 0x4f10
MputSetStringRpc
#41 · 0x4f10
MpAddDynamicSignatureFile
#42 · 0xd520
MpAllocMemory
#43 · 0xe650
MpAmsiCloseSession
#44 · 0x29060
MpAmsiScan
#45 · 0x27ac0
MpCleanControl
#46 · 0x9a50
MpCleanOpen
#47 · 0x9410
MpCleanPrecheckStart
#48 · 0x9810
MpCleanStart
#49 · 0x9900
MpClientUtilExportFunctions
#50 · 0xe730
MpClose
#51 · 0x3160
MpConfigClose
#52 · 0xe100
MpConfigDelValue
#53 · 0xe240
MpConfigGetValue
#54 · 0xe140
MpConfigGetValueAlloc
#55 · 0xe1b0
MpConfigInitialize
#56 · 0xe050
MpConfigIteratorClose
#57 · 0xe100
MpConfigIteratorEnum
#58 · 0xe290
MpConfigIteratorOpen
#59 · 0xe260
MpConfigOpen
#60 · 0xe0e0
MpConfigRegisterForNotifications
#61 · 0xe2b0
MpConfigSetValue
#62 · 0xe210
MpConfigUninitialize
#63 · 0xe060
MpConfigUnregisterNotifications
#64 · 0xe2e0
MpConveyDlpBypass
#65 · 0x1a400
MpConveySampleSubmissionResult
#66 · 0x31b90
MpConveyUserChoiceForSampleList
#67 · 0x31dc0
MpCreateComInstance
#68 · 0x221e0
MpDebugExportFunctions
#69 · 0x1530
MpDeleteAsrHistory
#70 · 0xbeb0
MpDetectionEnumerate
#71 · 0x7790
MpDetectionQuery
#72 · 0x7890
MpDynamicSignatureEnumerate
#73 · 0xde50
MpDynamicSignatureOpen
#74 · 0xdc80
MpElevateCleanHandle
#75 · 0xacb0
MpElevationHandleAcquire
#76 · 0x22210
MpElevationHandleActivate
#77 · 0x1ea80
MpElevationHandleAttach
#78 · 0x1e820
MpElevationHandleOpen
#79 · 0x1e5c0
MpErrorMessageFormat
#80 · 0x1aba0
MpFastMemoryScan
#81 · 0x2a360
MpFastMemoryScanOpen
#82 · 0x2a200
MpFlushLowfiCache
#83 · 0x198a0
MpForcedReboot
#84 · 0x226f0
MpFreeMemory
#85 · 0xe6c0
MpGenerateSignature
#86 · 0x1b890
MpGenerateSignatureEx
#87 · 0x1b480
MpGenerateThreatReport
#88 · 0x1c8c0
MpGetAsrBlockedActionInfos
#89 · 0xbfb0
MpGetAsrBlockedActions
#90 · 0xbd50
MpGetAsrBlockedProcesses
#91 · 0xbbf0
MpGetCallistoDetections
#92 · 0x30780
MpGetDevMode
#93 · 0xc320
MpGetHIPSRuleInfo
#94 · 0xb990
MpGetMAPSConnectivityStatusInfo
#95 · 0x1ccc0
MpGetRunningMode
#96 · 0x2fb00
MpGetSampleChunk
#97 · 0x31a00
MpGetSampleListRequiringConsent
#98 · 0x31ca0
MpGetTPStateInfo
#99 · 0xc110
MpGetTaskSchedulerStrings
#100 · 0x199f0
MpHandleClose
#101 · 0x28e0
MpIsGivenRunningModeSupported
#102 · 0x2fd60
MpIsRtpAutoEnable
#103 · 0x22ca0
MpManagerDisable
#104 · 0x5140
MpManagerEnable
#105 · 0x4bb0
MpManagerOpen
#106 · 0x23a0
MpManagerStatusQuery
#107 · 0x26c0
MpManagerStatusQueryEx
#108 · 0x26d0
MpManagerVersionQuery
#109 · 0x24f0
MpManagerXBGMDisable
#110 · 0x4f10
MpManagerXBGMEnable
#111 · 0x4f10
MpMemoryScanStart
#112 · 0x273e0
MpNetworkCapture
#113 · 0x1a310
MpNotificationRegister
#114 · 0x3a70
MpOfflineScanInstall
#115 · 0x30290
MpOfflineScanStatusQuery
#116 · 0x303d0
MpOpen
#117 · 0x2d50
MpProductGenuineCheck
#118 · 0x4f10
MpQuarantineRequest
#119 · 0xc3e0
MpQueryDefaultFolderGuardList
#120 · 0x1a0e0
MpQueryEngineConfigDword
#121 · 0x19b20
MpQueryFileTrustByHandle
#122 · 0x19db0
MpRemapCallistoDetections
#123 · 0x30580
MpRemoveDynamicSignatureFile
#124 · 0xd6d0
MpRequestSnooze
#125 · 0x22a00
MpSampleQuery
#126 · 0x127a0
MpSampleSubmit
#127 · 0x12c30
MpScanControl
#128 · 0x5d50
MpScanResult
#129 · 0x5f50
MpScanStart
#130 · 0x5d10
MpScanStartEx
#131 · 0x5d40
MpSetBreakTheGlassStatus
#132 · 0x1a240
MpSetTPState
#133 · 0xc1c0
MpSetUacElevationDefaultWindowHandle
#134 · 0x22310
MpSmartLockerEnable
#135 · 0x19cb0
MpThreatEnumerate
#136 · 0x7660
MpThreatHistoryRequest
#137 · 0x8950
MpThreatLocalizedInfoQuery
#138 · 0x7b40
MpThreatOpen
#139 · 0x7170
MpThreatQuery
#140 · 0x79f0
MpThreatRollup
#141 · 0x6fe0
MpTriggerErrorHeartbeatReport
#142 · 0x2f8b0
MpTriggerHeartbeatOnUninstall
#143 · 0x2f610
MpTriggerStatusRefreshNotification
#144 · 0x2fc60
MpUpdateControl
#145 · 0x10670
MpUpdateDevMode
#146 · 0xc270
MpUpdatePlatform
#147 · 0xd1c0
MpUpdateStart
#148 · 0xff20
MpUpdateStartEx
#149 · 0xff40
MpUtilsExportFunctions
#150 · 0x1540
MpWDEnable
#151 · 0x184a0
MpXBGMEnable
#152 · 0x4f10
MpXBGMFreeEvent
#153 · 0x3500
MpXBGMGetData
#154 · 0x4f10
MpXBGMPutData
#155 · 0x4f10
MpXBGMUpdateIV
#156 · 0x4f10
WDEnable
#157 · 0x18470
WDStatus
#158 · 0x17fc0
No function matches your filter.
Imported DLLs & functions 272
ADVAPI32.dll
46
AllocateAndInitializeSid
0x75b89f818
ChangeServiceConfigW
0x75b89f838
CheckTokenMembership
0x75b89f7b8
CloseServiceHandle
0x75b89f8e0
ControlTraceW
0x75b89f8b0
ConvertStringSidToSidW
0x75b89f870
CopySid
0x75b89f888
DeregisterEventSource
0x75b89f858
DuplicateToken
0x75b89f7e8
EnableTrace
0x75b89f8b8
FreeSid
0x75b89f820
GetLengthSid
0x75b89f890
GetTokenInformation
0x75b89f840
GetTraceEnableFlags
0x75b89f910
GetTraceEnableLevel
0x75b89f918
GetTraceLoggerHandle
0x75b89f920
InitializeAcl
0x75b89f830
LookupAccountSidW
0x75b89f8c0
NotifyServiceStatusChangeW
0x75b89f8d8
OpenProcessToken
0x75b89f860
OpenSCManagerW
0x75b89f8d0
OpenServiceW
0x75b89f8f0
OpenThreadToken
0x75b89f848
QueryServiceConfigW
0x75b89f8c8
QueryServiceStatus
0x75b89f8e8
QueryTraceW
0x75b89f8a0
RegCloseKey
0x75b89f868
RegCreateKeyExW
0x75b89f7d8
RegDeleteKeyW
0x75b89f7d0
RegDeleteValueW
0x75b89f800
RegEnumKeyExW
0x75b89f7e0
RegEnumValueW
0x75b89f7f8
RegisterEventSourceW
0x75b89f878
RegisterTraceGuidsW
0x75b89f908
RegNotifyChangeKeyValue
0x75b89f7c0
RegOpenKeyExW
0x75b89f808
RegQueryInfoKeyW
0x75b89f7c8
RegQueryValueExW
0x75b89f850
RegSetValueExW
0x75b89f810
ReportEventW
0x75b89f880
SetEntriesInAclW
0x75b89f7f0
StartServiceW
0x75b89f828
StartTraceW
0x75b89f8a8
TraceEvent
0x75b89f898
TraceMessage
0x75b89f8f8
UnregisterTraceGuids
0x75b89f900
wcstoul
0x75b89fe90
_callnewh
0x75b89fed0
_calloc_base
0x75b89feb8
_free_base
0x75b89fec8
_malloc_base
0x75b89fec0
free
0x75b89fea0
malloc
0x75b89feb0
realloc
0x75b89fea8
___lc_codepage_func
0x75b89ff00
___lc_collate_cp_func
0x75b89fef0
___lc_locale_name_func
0x75b89fef8
___mb_cur_max_func
0x75b89ff18
__pctype_func
0x75b89ff08
_lock_locales
0x75b89ff10
_unlock_locales
0x75b89fee0
setlocale
0x75b89fee8
_ismbblead
0x75b89ff28
_beginthreadex
0x75b89ff80
_cexit
0x75b89ff68
_configure_narrow_argv
0x75b89ff60
_crt_atexit
0x75b89ff58
_errno
0x75b89ff88
_execute_onexit_table
0x75b89ff50
_initialize_narrow_environment
0x75b89ff38
_initialize_onexit_table
0x75b89ff40
_initterm
0x75b89ffa0
_initterm_e
0x75b89ff98
_invalid_parameter_noinfo_noreturn
0x75b89ffa8
_register_onexit_function
0x75b89ff48
_seh_filter_dll
0x75b89ff90
abort
0x75b89ff78
terminate
0x75b89ff70
__stdio_common_vsprintf
0x75b89ffb8
__stdio_common_vswprintf
0x75b89ffc8
__stdio_common_vswscanf
0x75b89ffc0
_wcsdup
0x75b89fff8
_wcsicmp
0x75b8a0000
_wcsnicmp
0x75b8a0040
_wcsupr
0x75b8a0048
iswalpha
0x75b89fff0
iswdigit
0x75b89ffe0
iswspace
0x75b8a0030
memset
0x75b89ffd8
strcpy_s
0x75b89ffe8
toupper
0x75b8a0018
towlower
0x75b8a0010
wcscmp
0x75b8a0028
wcsncmp
0x75b8a0038
wcsnlen
0x75b8a0008
wcstok_s
0x75b8a0020
CertVerifyCertificateChainPolicy
0x75b89f930
KERNEL32.dll
145
AcquireSRWLockExclusive
0x75b89fd78
CancelSynchronousIo
0x75b89fbe0
CancelThreadpoolIo
0x75b89fc90
CloseHandle
0x75b89fba0
CloseThreadpool
0x75b89f9e8
CloseThreadpoolIo
0x75b89fd68
CloseThreadpoolTimer
0x75b89fcc0
CloseThreadpoolWait
0x75b89fca8
CloseThreadpoolWork
0x75b89fbb0
CompareFileTime
0x75b89fa00
CompareStringEx
0x75b89fcf8
CopyFileW
0x75b89f998
CreateDirectoryW
0x75b89f990
CreateEventW
0x75b89fb48
CreateFileMappingW
0x75b89fc50
CreateFileW
0x75b89f948
CreateIoCompletionPort
0x75b89fbc8
CreateMutexW
0x75b89fba8
CreateProcessW
0x75b89fc60
CreateSemaphoreW
0x75b89fc58
CreateThread
0x75b89fb40
CreateThreadpool
0x75b89fc70
CreateThreadpoolIo
0x75b89fc78
CreateThreadpoolTimer
0x75b89fd60
CreateThreadpoolWait
0x75b89fcc8
CreateThreadpoolWork
0x75b89fd88
CreateTimerQueueTimer
0x75b89fd40
DebugBreak
0x75b89fc48
DecodePointer
0x75b89fbc0
DeleteCriticalSection
0x75b89fa48
DeleteFileW
0x75b89fac0
DeleteTimerQueueTimer
0x75b89fb88
DuplicateHandle
0x75b89fd00
EncodePointer
0x75b89fa50
EnterCriticalSection
0x75b89fd50
ExpandEnvironmentStringsW
0x75b89f988
FileTimeToSystemTime
0x75b89fc18
FindClose
0x75b89f970
FindFirstFileW
0x75b89f960
FindNextFileW
0x75b89f968
FindResourceW
0x75b89f9b0
FlushFileBuffers
0x75b89fab0
FlushViewOfFile
0x75b89fab8
FormatMessageW
0x75b89faf8
FreeLibrary
0x75b89fae8
GetCurrentProcess
0x75b89faa8
GetCurrentProcessId
0x75b89fb58
GetCurrentThread
0x75b89f940
GetCurrentThreadId
0x75b89fb60
GetEnvironmentVariableW
0x75b89f9f8
GetFileAttributesExW
0x75b89fb70
GetFileAttributesW
0x75b89f978
GetFileSizeEx
0x75b89fc28
GetLastError
0x75b89fa88
GetLocalTime
0x75b89f9f0
GetModuleFileNameW
0x75b89f9a8
GetModuleHandleExW
0x75b89fb80
GetModuleHandleW
0x75b89fa98
GetProcAddress
0x75b89fa90
GetProcessHeap
0x75b89fbb8
GetProcessTimes
0x75b89f980
GetQueuedCompletionStatus
0x75b89fbd8
GetStringTypeW
0x75b89fd30
GetSystemDirectoryW
0x75b89fd08
GetSystemInfo
0x75b89fd58
GetSystemTimeAsFileTime
0x75b89fb68
GetTickCount
0x75b89fae0
GetTickCount64
0x75b89f9e0
GetVersionExW
0x75b89faa0
HeapAlloc
0x75b89fb30
HeapCreate
0x75b89fdc0
HeapDestroy
0x75b89fda0
HeapFree
0x75b89fb28
HeapReAlloc
0x75b89fda8
HeapSize
0x75b89fdb0
HeapValidate
0x75b89fdb8
InitializeConditionVariable
0x75b89fce8
InitializeCriticalSection
0x75b89f9d0
InitializeCriticalSectionAndSpinCount
0x75b89fa40
InitializeCriticalSectionEx
0x75b89fd20
InitializeSListHead
0x75b89fa80
InterlockedFlushSList
0x75b89fa68
LCMapStringEx
0x75b89fcf0
LeaveCriticalSection
0x75b89fb38
LoadLibraryExA
0x75b89fd90
LoadLibraryExW
0x75b89fa18
LoadLibraryW
0x75b89f9a0
LoadResource
0x75b89f9c0
LocalFileTimeToFileTime
0x75b89fa08
LocalFree
0x75b89faf0
LockResource
0x75b89f9c8
MapViewOfFile
0x75b89fc40
MultiByteToWideChar
0x75b89fc08
OpenEventW
0x75b89fd18
OpenFileMappingW
0x75b89fd10
OpenProcess
0x75b89fb10
PostQueuedCompletionStatus
0x75b89fbd0
QueryPerformanceCounter
0x75b89fad8
QueryPerformanceFrequency
0x75b89fc10
RaiseException
0x75b89fa58
ReadFile
0x75b89fc30
RegisterWaitForSingleObject
0x75b89fb18
ReleaseMutex
0x75b89fb90
ReleaseSemaphore
0x75b89fd38
ReleaseSRWLockExclusive
0x75b89fd80
RemoveDirectoryW
0x75b89f958
ResetEvent
0x75b89fac8
RtlLookupFunctionEntry
0x75b89fa78
RtlPcToFileHeader
0x75b89fa60
RtlUnwindEx
0x75b89fa70
SetEnvironmentVariableW
0x75b89fd28
SetEvent
0x75b89fb50
SetFileAttributesW
0x75b89f950
SetLastError
0x75b89fb08
SetThreadpoolThreadMaximum
0x75b89fcb8
SetThreadpoolThreadMinimum
0x75b89fca0
SetThreadpoolTimer
0x75b89fcd0
SetThreadpoolWait
0x75b89fb78
SizeofResource
0x75b89f9b8
Sleep
0x75b89fbe8
SleepConditionVariableCS
0x75b89fcd8
StartThreadpoolIo
0x75b89fc68
SubmitThreadpoolWork
0x75b89fd70
SwitchToThread
0x75b89fad0
SystemTimeToFileTime
0x75b89fa10
TlsAlloc
0x75b89fa38
TlsFree
0x75b89fa20
TlsGetValue
0x75b89fa30
TlsSetValue
0x75b89fa28
TryEnterCriticalSection
0x75b89f9d8
UnmapViewOfFile
0x75b89fb00
UnregisterWaitEx
0x75b89fb20
VirtualLock
0x75b89fd48
VirtualProtect
0x75b89fd98
VirtualQuery
0x75b89fc38
WaitForMultipleObjects
0x75b89fb98
WaitForSingleObject
0x75b89fbf0
WaitForSingleObjectEx
0x75b89fbf8
WaitForThreadpoolIoCallbacks
0x75b89fc80
WaitForThreadpoolTimerCallbacks
0x75b89fc88
WaitForThreadpoolWaitCallbacks
0x75b89fcb0
WaitForThreadpoolWorkCallbacks
0x75b89fc98
WakeAllConditionVariable
0x75b89fce0
WideCharToMultiByte
0x75b89fc00
WriteFile
0x75b89fc20
CoCreateInstance
0x75b8a0090
CoGetObject
0x75b8a00a0
CoInitializeEx
0x75b8a0098
CoUninitialize
0x75b8a00a8
IIDFromString
0x75b8a0088
SafeArrayCreate
0x75b89fde0
SafeArrayGetDim
0x75b89fdf8
SysAllocString
0x75b89fdd0
SysAllocStringLen
0x75b89fde8
SysFreeString
0x75b89fe00
VariantClear
0x75b89fdd8
VariantInit
0x75b89fdf0
RPCRT4.dll
11
NdrClientCall3
0x75b89fe38
RpcBindingFree
0x75b89fe10
RpcBindingFromStringBindingW
0x75b89fe30
RpcBindingSetAuthInfoExW
0x75b89fe20
RpcBindingSetOption
0x75b89fe28
RpcSmDestroyClientContext
0x75b89fe58
RpcStringBindingComposeW
0x75b89fe18
RpcStringFreeW
0x75b89fe60
UuidCreate
0x75b89fe40
UuidFromStringW
0x75b89fe50
UuidToStringW
0x75b89fe48
No function matches your filter.