MpRtp.dll
v4.18.1909.6
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 26
MpPluginCheckExclusion
#1 · 0x3960
MpPluginConfigChange
#2 · 0x2cb0
MpPluginConfigDirectoryMonitoring
#3 · 0x2d50
MpPluginConfigSyncMonitoring
#4 · 0x2d30
MpPluginFlushLogData
#5 · 0x2ad0
MpPluginGetConfigOperations
#6 · 0x2df0
MpPluginGetHeartBeatData
#7 · 0x2c80
MpPluginGetState
#8 · 0x2810
MpPluginInitialize
#9 · 0x2290
MpPluginIsSuspended
#10 · 0x2b60
MpPluginNotifySetupProgress
#11 · 0x2b00
MpPluginRegisterFriendlyProcess
#12 · 0x2bc0
MpPluginReportThreadStatus
#13 · 0x2920
MpPluginSetDefaultConfigs
#14 · 0x34f0
MpPluginSetEngine
#15 · 0x2550
MpPluginSetLastAccessTimeSuppressionMode
#16 · 0x3990
MpPluginSetState
#17 · 0x2640
MpPluginSetUserInformation
#18 · 0x2a00
MpPluginShutdown
#19 · 0x2470
MpPluginSignatureChange
#20 · 0x2af0
MpPluginStop
#21 · 0x2710
MpPluginUpdateDlpData
#22 · 0x3970
MpPluginUpdateFolderGuardData
#23 · 0x2d10
MpPluginUpdateMonitoringInfo
#24 · 0x2b80
MpPluginUpdateMonitoringInfoEx
#25 · 0x2ba0
MpPluginUpdateTPState
#26 · 0x3880
No function matches your filter.
Imported DLLs & functions 184
ADVAPI32.dll
23
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x75e89ed78
ConvertSidToStringSidW
0x75e89ed00
CopySid
0x75e89ece0
DuplicateToken
0x75e89ed08
DuplicateTokenEx
0x75e89ed18
GetLengthSid
0x75e89ecd0
GetTokenInformation
0x75e89ecc8
GetTraceEnableFlags
0x75e89ed60
GetTraceEnableLevel
0x75e89ed68
GetTraceLoggerHandle
0x75e89ed70
IsValidSid
0x75e89ecd8
OpenProcessToken
0x75e89ed20
OpenThreadToken
0x75e89ed28
RegCloseKey
0x75e89ecf8
RegDeleteKeyValueW
0x75e89ed40
RegisterTraceGuidsW
0x75e89ed58
RegOpenKeyExW
0x75e89ece8
RegQueryValueExW
0x75e89ecf0
RevertToSelf
0x75e89ed30
SetThreadToken
0x75e89ed10
TraceEvent
0x75e89ed38
TraceMessage
0x75e89ed48
UnregisterTraceGuids
0x75e89ed50
KERNEL32.dll
124
AcquireSRWLockExclusive
0x75e89eec8
AcquireSRWLockShared
0x75e89eeb8
CloseHandle
0x75e89ede8
CreateEventW
0x75e89edc8
CreateFileW
0x75e89ef30
CreateIoCompletionPort
0x75e89ee88
CreateSemaphoreW
0x75e89ef10
CreateThread
0x75e89ef60
DecodePointer
0x75e89ef48
DeleteCriticalSection
0x75e89f090
DeviceIoControl
0x75e89ee50
EncodePointer
0x75e89edb0
EnterCriticalSection
0x75e89f0a0
EnumSystemLocalesW
0x75e89f018
ExitProcess
0x75e89efd8
ExitThread
0x75e89ef68
ExpandEnvironmentStringsW
0x75e89eee8
FindClose
0x75e89ee68
FindFirstFileExW
0x75e89ef78
FindFirstFileW
0x75e89eed8
FindNextFileW
0x75e89eee0
FlushFileBuffers
0x75e89ee20
FreeEnvironmentStringsW
0x75e89ef98
FreeLibrary
0x75e89f058
FreeLibraryAndExitThread
0x75e89ef70
GetACP
0x75e89f008
GetCommandLineA
0x75e89ef80
GetCommandLineW
0x75e89ef88
GetConsoleCP
0x75e89efb8
GetConsoleMode
0x75e89efc0
GetCPInfo
0x75e89eff8
GetCurrentProcess
0x75e89f0e8
GetCurrentProcessId
0x75e89ed90
GetCurrentThread
0x75e89f0c0
GetCurrentThreadId
0x75e89f0b8
GetDateFormatW
0x75e89f048
GetEnvironmentStringsW
0x75e89ef90
GetFileAttributesW
0x75e89ef00
GetFileType
0x75e89efa8
GetLastError
0x75e89f0d0
GetLocaleInfoW
0x75e89f030
GetLocalTime
0x75e89ee10
GetLogicalDriveStringsW
0x75e89ee58
GetModuleFileNameW
0x75e89eef0
GetModuleHandleExW
0x75e89efd0
GetModuleHandleW
0x75e89f128
GetOEMCP
0x75e89f000
GetProcAddress
0x75e89f120
GetProcessHeap
0x75e89efe0
GetProcessTimes
0x75e89f150
GetQueuedCompletionStatus
0x75e89ee98
GetStartupInfoW
0x75e89ee08
GetStdHandle
0x75e89efa0
GetStringTypeW
0x75e89eff0
GetSystemDirectoryW
0x75e89ef08
GetSystemInfo
0x75e89ee38
GetSystemTimeAsFileTime
0x75e89f060
GetThreadPriority
0x75e89eea8
GetTickCount
0x75e89ee40
GetTimeFormatW
0x75e89f040
GetUserDefaultLCID
0x75e89f020
GetVersionExW
0x75e89f130
GlobalMemoryStatusEx
0x75e89ee78
HeapAlloc
0x75e89f0a8
HeapFree
0x75e89f0b0
HeapReAlloc
0x75e89edf0
HeapSize
0x75e89edf8
InitializeCriticalSectionAndSpinCount
0x75e89f088
InitializeCriticalSectionEx
0x75e89ef50
InitializeSListHead
0x75e89ed98
InitializeSRWLock
0x75e89eeb0
InitOnceExecuteOnce
0x75e89ef40
InterlockedFlushSList
0x75e89eda8
IsDebuggerPresent
0x75e89f100
IsProcessorFeaturePresent
0x75e89f0d8
IsValidCodePage
0x75e89f010
IsValidLocale
0x75e89f028
K32GetModuleFileNameExW
0x75e89f158
K32GetProcessImageFileNameW
0x75e89f160
LCMapStringEx
0x75e89ef58
LCMapStringW
0x75e89f038
LeaveCriticalSection
0x75e89f098
LoadLibraryExA
0x75e89f140
LoadLibraryExW
0x75e89f050
LocalFree
0x75e89ee80
MultiByteToWideChar
0x75e89efe8
OpenProcess
0x75e89ee30
OpenThread
0x75e89ee28
PostQueuedCompletionStatus
0x75e89ee90
ProcessIdToSessionId
0x75e89ee70
QueryDosDeviceW
0x75e89ee48
QueryPerformanceCounter
0x75e89ed88
RaiseException
0x75e89edb8
ReleaseSemaphore
0x75e89f138
ReleaseSRWLockExclusive
0x75e89eed0
ReleaseSRWLockShared
0x75e89eec0
ResetEvent
0x75e89edd8
RtlCaptureContext
0x75e89f118
RtlLookupFunctionEntry
0x75e89f110
RtlPcToFileHeader
0x75e89edc0
RtlUnwindEx
0x75e89eda0
RtlVirtualUnwind
0x75e89f108
SetEvent
0x75e89ede0
SetFilePointerEx
0x75e89ef38
SetLastError
0x75e89f0c8
SetStdHandle
0x75e89efb0
SetThreadPriority
0x75e89eea0
SetUnhandledExceptionFilter
0x75e89f0f0
Sleep
0x75e89ee18
SwitchToThread
0x75e89ef20
TerminateProcess
0x75e89f0e0
TlsAlloc
0x75e89f080
TlsFree
0x75e89f068
TlsGetValue
0x75e89f078
TlsSetValue
0x75e89f070
UnhandledExceptionFilter
0x75e89f0f8
UnmapViewOfFile
0x75e89ee60
VirtualProtect
0x75e89f148
VirtualQuery
0x75e89ef18
WaitForSingleObject
0x75e89eef8
WaitForSingleObjectEx
0x75e89edd0
WideCharToMultiByte
0x75e89ee00
WriteConsoleW
0x75e89efc8
WriteFile
0x75e89ef28
mpclient.dll
14
MpAllocMemory
0x75e89f1d0
MpClientUtilExportFunctions
0x75e89f1c8
MpConfigClose
0x75e89f1f8
MpConfigGetValue
0x75e89f1f0
MpConfigGetValueAlloc
0x75e89f200
MpConfigOpen
0x75e89f1e8
MpConfigRegisterForNotifications
0x75e89f208
MpConfigSetValue
0x75e89f1b8
MpConfigUnregisterNotifications
0x75e89f210
MpFreeMemory
0x75e89f1d8
MpHandleClose
0x75e89f218
MpManagerOpen
0x75e89f1c0
MpManagerVersionQuery
0x75e89f1e0
MpUtilsExportFunctions
0x75e89f220
NtClose
0x75e89f248
NtCreateFile
0x75e89f260
NtDeviceIoControlFile
0x75e89f268
NtMapViewOfSection
0x75e89f238
NtWaitForSingleObject
0x75e89f250
RtlCompareUnicodeString
0x75e89f240
RtlInitUnicodeString
0x75e89f258
RtlNtStatusToDosError
0x75e89f270
RtlPrefixUnicodeString
0x75e89f230
CoCreateGuid
0x75e89f298
CoCreateInstance
0x75e89f290
CoInitializeEx
0x75e89f280
CoSetProxyBlanket
0x75e89f288
CoUninitialize
0x75e89f2a8
IIDFromString
0x75e89f2a0
StringFromGUID2
0x75e89f2b0
SysAllocString
0x75e89f190
SysFreeString
0x75e89f198
SysStringLen
0x75e89f188
VariantChangeType
0x75e89f180
VariantClear
0x75e89f178
VariantInit
0x75e89f170
GetSystemMetrics
0x75e89f1a8
No function matches your filter.