MpClient.dll
v4.18.1909.6
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 158
MpDbgAllocMemory
#1 · 0x25820
MpGetEngineVersion
#2 · 0x24460
MpTelemetryAddToAverageDWORD
#3 · 0x3eb50
MpTelemetryAddToStreamDWORD64
#4 · 0x3eb70
MpTelemetryAddToStreamDWORD
#5 · 0x3eb60
MpTelemetryAddToStreamString
#6 · 0x3eb60
MpTelemetryIncrementDWORD
#7 · 0x3eb50
MpTelemetryInitialize
#8 · 0x3eb40
MpTelemetryIsOptIn
#9 · 0x3eb80
MpTelemetryLiteralAddToAverageDWORD
#10 · 0x3eb50
MpTelemetryLiteralAddToStreamDWORD64
#11 · 0x3eb70
MpTelemetryLiteralAddToStreamDWORD
#12 · 0x3eb60
MpTelemetryLiteralAddToStreamString
#13 · 0x3eb60
MpTelemetryLiteralIncrementDWORD
#14 · 0x3eb50
MpTelemetryLiteralSetDWORD64
#15 · 0x3eb60
MpTelemetryLiteralSetDWORD
#16 · 0x3eb50
MpTelemetryLiteralSetIfMaxDWORD
#17 · 0x3eb50
MpTelemetryLiteralSetIfMinDWORD
#18 · 0x3eb50
MpTelemetryLiteralSetString
#19 · 0x3eb50
MpTelemetrySetConsent
#20 · 0x1da50
MpTelemetrySetDWORD64
#21 · 0x3eb60
MpTelemetrySetDWORD
#22 · 0x3eb50
MpTelemetrySetIfMaxDWORD
#23 · 0x3eb50
MpTelemetrySetIfMinDWORD
#24 · 0x3eb50
MpTelemetrySetString
#25 · 0x3eb50
MpTelemetryUninitialize
#26 · 0x37570
MpTelemetryUpdateUserConsent
#27 · 0x37570
MpTelemetryUpload
#28 · 0x37570
MpUpdateEngine
#29 · 0x245d0
MputAddToAverageDWORD64Rpc
#30 · 0x2dc80
MputAddToAverageDWORDRpc
#31 · 0x3fe70
MputIncrementDWORD64Rpc
#32 · 0x2dc80
MputIncrementDWORDRpc
#33 · 0x3fe70
MputSetBoolRpc
#34 · 0x3fe70
MputSetDWORD64Rpc
#35 · 0x2dc80
MputSetDWORDRpc
#36 · 0x3fe70
MputSetIfMaxDWORD64Rpc
#37 · 0x2dc80
MputSetIfMaxDWORDRpc
#38 · 0x3fe70
MputSetIfMinDWORD64Rpc
#39 · 0x2dc80
MputSetIfMinDWORDRpc
#40 · 0x3fe70
MputSetStringRpc
#41 · 0x3fe70
MpAddDynamicSignatureFile
#42 · 0x24920
MpAllocMemory
#43 · 0x25780
MpAmsiCloseSession
#44 · 0x3a750
MpAmsiScan
#45 · 0x39380
MpCleanControl
#46 · 0x21910
MpCleanOpen
#47 · 0x213d0
MpCleanPrecheckStart
#48 · 0x21750
MpCleanStart
#49 · 0x21810
MpClientUtilExportFunctions
#50 · 0x25830
MpClose
#51 · 0x1c150
MpConfigClose
#52 · 0x25300
MpConfigDelValue
#53 · 0x25420
MpConfigGetValue
#54 · 0x25320
MpConfigGetValueAlloc
#55 · 0x25380
MpConfigInitialize
#56 · 0x25270
MpConfigIteratorClose
#57 · 0x25300
MpConfigIteratorEnum
#58 · 0x25490
MpConfigIteratorOpen
#59 · 0x25450
MpConfigOpen
#60 · 0x252d0
MpConfigRegisterForNotifications
#61 · 0x254d0
MpConfigSetValue
#62 · 0x253e0
MpConfigUninitialize
#63 · 0x25280
MpConfigUnregisterNotifications
#64 · 0x25510
MpConveyDlpBypass
#65 · 0x2e6b0
MpConveySampleSubmissionResult
#66 · 0x40d10
MpConveyUserChoiceForSampleList
#67 · 0x40ee0
MpCreateComInstance
#68 · 0x34a30
MpDebugExportFunctions
#69 · 0x1abf0
MpDeleteAsrHistory
#70 · 0x236b0
MpDetectionEnumerate
#71 · 0x1fd00
MpDetectionQuery
#72 · 0x1fdd0
MpDynamicSignatureEnumerate
#73 · 0x250e0
MpDynamicSignatureOpen
#74 · 0x24f60
MpElevateCleanHandle
#75 · 0x227f0
MpElevationHandleAcquire
#76 · 0x34a80
MpElevationHandleActivate
#77 · 0x32010
MpElevationHandleAttach
#78 · 0x31de0
MpElevationHandleOpen
#79 · 0x31bb0
MpErrorMessageFormat
#80 · 0x2ec50
MpFastMemoryScan
#81 · 0x3b9c0
MpFastMemoryScanOpen
#82 · 0x3b8b0
MpFlushLowfiCache
#83 · 0x2dc90
MpForcedReboot
#84 · 0x34e20
MpFreeMemory
#85 · 0x257d0
MpGenerateSignature
#86 · 0x2f8c0
MpGenerateSignatureEx
#87 · 0x2f4f0
MpGenerateThreatReport
#88 · 0x304e0
MpGetAsrBlockedActionInfos
#89 · 0x23790
MpGetAsrBlockedActions
#90 · 0x235b0
MpGetAsrBlockedProcesses
#91 · 0x234b0
MpGetCallistoDetections
#92 · 0x3fd40
MpGetDevMode
#93 · 0x23a40
MpGetHIPSRuleInfo
#94 · 0x232b0
MpGetMAPSConnectivityStatusInfo
#95 · 0x30860
MpGetRunningMode
#96 · 0x3f2c0
MpGetSampleChunk
#97 · 0x40be0
MpGetSampleListRequiringConsent
#98 · 0x40df0
MpGetTPStateInfo
#99 · 0x23890
MpGetTaskSchedulerStrings
#100 · 0x2ddb0
MpHandleClose
#101 · 0x1bca0
MpIsGivenRunningModeSupported
#102 · 0x3f4d0
MpIsRtpAutoEnable
#103 · 0x352e0
MpManagerDisable
#104 · 0x1dc00
MpManagerEnable
#105 · 0x1d770
MpManagerOpen
#106 · 0x1b820
MpManagerStatusQuery
#107 · 0x1bab0
MpManagerStatusQueryEx
#108 · 0x1bad0
MpManagerVersionQuery
#109 · 0x1b920
MpManagerXBGMDisable
#110 · 0x1da50
MpManagerXBGMEnable
#111 · 0x1da50
MpMemoryScanStart
#112 · 0x38dc0
MpNetworkCapture
#113 · 0x2e5e0
MpNotificationRegister
#114 · 0x1c970
MpOfflineScanInstall
#115 · 0x3f910
MpOfflineScanStatusQuery
#116 · 0x3fa30
MpOpen
#117 · 0x1be50
MpProductGenuineCheck
#118 · 0x1da50
MpQuarantineRequest
#119 · 0x23ad0
MpQueryDefaultFolderGuardList
#120 · 0x2e420
MpQueryEngineConfigDword
#121 · 0x2deb0
MpQueryFileTrustByHandle
#122 · 0x2e0e0
MpRemapCallistoDetections
#123 · 0x3fb90
MpRemoveDynamicSignatureFile
#124 · 0x24a70
MpRequestSnooze
#125 · 0x350b0
MpSampleQuery
#126 · 0x288b0
MpSampleSubmit
#127 · 0x28cb0
MpScanControl
#128 · 0x1e5f0
MpScanResult
#129 · 0x1e7b0
MpScanStart
#130 · 0x1e5a0
MpScanStartEx
#131 · 0x1e5c0
MpSetBreakTheGlassStatus
#132 · 0x2e550
MpSetTPState
#133 · 0x23920
MpSetUacElevationDefaultWindowHandle
#134 · 0x34b50
MpSmartLockerEnable
#135 · 0x2dff0
MpThreatEnumerate
#136 · 0x1fc00
MpThreatHistoryRequest
#137 · 0x20ad0
MpThreatLocalizedInfoQuery
#138 · 0x20010
MpThreatOpen
#139 · 0x1f6e0
MpThreatQuery
#140 · 0x1fef0
MpThreatRollup
#141 · 0x1f5a0
MpTriggerErrorHeartbeatReport
#142 · 0x3f0e0
MpTriggerHeartbeatOnUninstall
#143 · 0x3ee90
MpTriggerStatusRefreshNotification
#144 · 0x3f3f0
MpUpdateControl
#145 · 0x26fb0
MpUpdateDevMode
#146 · 0x239b0
MpUpdatePlatform
#147 · 0x24650
MpUpdateStart
#148 · 0x26a30
MpUpdateStartEx
#149 · 0x26a50
MpUtilsExportFunctions
#150 · 0x1ac00
MpWDEnable
#151 · 0x2cb40
MpXBGMEnable
#152 · 0x1da50
MpXBGMFreeEvent
#153 · 0x1c420
MpXBGMGetData
#154 · 0x1da50
MpXBGMPutData
#155 · 0x1da50
MpXBGMUpdateIV
#156 · 0x2dc80
WDEnable
#157 · 0x2cb20
WDStatus
#158 · 0x2c720
No function matches your filter.
Imported DLLs & functions 270
ADVAPI32.dll
46
AllocateAndInitializeSid
0x5b89d030
ChangeServiceConfigW
0x5b89d040
CheckTokenMembership
0x5b89d000
CloseServiceHandle
0x5b89d094
ControlTraceW
0x5b89d07c
ConvertStringSidToSidW
0x5b89d05c
CopySid
0x5b89d068
DeregisterEventSource
0x5b89d050
DuplicateToken
0x5b89d01c
EnableTrace
0x5b89d080
FreeSid
0x5b89d034
GetLengthSid
0x5b89d06c
GetTokenInformation
0x5b89d044
GetTraceEnableFlags
0x5b89d0ac
GetTraceEnableLevel
0x5b89d0b0
GetTraceLoggerHandle
0x5b89d0b4
InitializeAcl
0x5b89d03c
LookupAccountSidW
0x5b89d084
NotifyServiceStatusChangeW
0x5b89d090
OpenProcessToken
0x5b89d054
OpenSCManagerW
0x5b89d08c
OpenServiceW
0x5b89d09c
OpenThreadToken
0x5b89d048
QueryServiceConfigW
0x5b89d088
QueryServiceStatus
0x5b89d098
QueryTraceW
0x5b89d074
RegCloseKey
0x5b89d058
RegCreateKeyExW
0x5b89d010
RegDeleteKeyW
0x5b89d00c
RegDeleteValueW
0x5b89d028
RegEnumKeyExW
0x5b89d014
RegEnumValueW
0x5b89d024
RegisterEventSourceW
0x5b89d060
RegisterTraceGuidsW
0x5b89d0a8
RegNotifyChangeKeyValue
0x5b89d004
RegOpenKeyExW
0x5b89d02c
RegQueryInfoKeyW
0x5b89d008
RegQueryValueExW
0x5b89d04c
RegSetValueExW
0x5b89d018
ReportEventW
0x5b89d064
SetEntriesInAclW
0x5b89d020
StartServiceW
0x5b89d038
StartTraceW
0x5b89d078
TraceEvent
0x5b89d070
TraceMessage
0x5b89d0a0
UnregisterTraceGuids
0x5b89d0a4
wcstoul
0x5b89d368
_callnewh
0x5b89d378
_calloc_base
0x5b89d374
_free_base
0x5b89d380
_malloc_base
0x5b89d37c
free
0x5b89d388
malloc
0x5b89d384
realloc
0x5b89d370
___lc_codepage_func
0x5b89d3a4
___lc_collate_cp_func
0x5b89d398
___lc_locale_name_func
0x5b89d3a8
___mb_cur_max_func
0x5b89d39c
__pctype_func
0x5b89d3a0
_lock_locales
0x5b89d390
_unlock_locales
0x5b89d3ac
setlocale
0x5b89d394
_ismbblead
0x5b89d3b4
_beginthreadex
0x5b89d3c4
_cexit
0x5b89d3f0
_configure_narrow_argv
0x5b89d3d0
_crt_atexit
0x5b89d3ec
_errno
0x5b89d3e4
_execute_onexit_table
0x5b89d3e8
_initialize_narrow_environment
0x5b89d3d4
_initialize_onexit_table
0x5b89d3d8
_initterm
0x5b89d3bc
_initterm_e
0x5b89d3c0
_invalid_parameter_noinfo_noreturn
0x5b89d3f4
_register_onexit_function
0x5b89d3e0
_seh_filter_dll
0x5b89d3cc
abort
0x5b89d3dc
terminate
0x5b89d3c8
__stdio_common_vsprintf
0x5b89d3fc
__stdio_common_vswprintf
0x5b89d404
__stdio_common_vswscanf
0x5b89d400
_wcsdup
0x5b89d418
_wcsicmp
0x5b89d41c
_wcsnicmp
0x5b89d440
_wcsupr
0x5b89d43c
iswalpha
0x5b89d414
iswdigit
0x5b89d40c
iswspace
0x5b89d438
memset
0x5b89d434
strcpy_s
0x5b89d410
toupper
0x5b89d428
towlower
0x5b89d424
wcsncmp
0x5b89d430
wcsnlen
0x5b89d420
wcstok_s
0x5b89d42c
CertVerifyCertificateChainPolicy
0x5b89d0bc
KERNEL32.dll
144
AcquireSRWLockExclusive
0x5b89d2cc
CancelSynchronousIo
0x5b89d20c
CancelThreadpoolIo
0x5b89d264
CloseHandle
0x5b89d1ec
CloseThreadpool
0x5b89d118
CloseThreadpoolIo
0x5b89d2d8
CloseThreadpoolTimer
0x5b89d27c
CloseThreadpoolWait
0x5b89d270
CloseThreadpoolWork
0x5b89d1f4
CompareFileTime
0x5b89d124
CompareStringEx
0x5b89d294
CopyFileW
0x5b89d0f0
CreateDirectoryW
0x5b89d0ec
CreateEventW
0x5b89d1c4
CreateFileMappingW
0x5b89d244
CreateFileW
0x5b89d0c8
CreateIoCompletionPort
0x5b89d200
CreateMutexW
0x5b89d1f0
CreateProcessW
0x5b89d24c
CreateSemaphoreW
0x5b89d248
CreateThread
0x5b89d1c0
CreateThreadpool
0x5b89d254
CreateThreadpoolIo
0x5b89d258
CreateThreadpoolTimer
0x5b89d2d4
CreateThreadpoolWait
0x5b89d280
CreateThreadpoolWork
0x5b89d300
CreateTimerQueueTimer
0x5b89d2bc
DebugBreak
0x5b89d240
DecodePointer
0x5b89d1fc
DeleteCriticalSection
0x5b89d148
DeleteFileW
0x5b89d180
DeleteTimerQueueTimer
0x5b89d2c8
DuplicateHandle
0x5b89d29c
EncodePointer
0x5b89d14c
EnterCriticalSection
0x5b89d2c4
ExpandEnvironmentStringsW
0x5b89d0e8
FileTimeToSystemTime
0x5b89d228
FindClose
0x5b89d0dc
FindFirstFileW
0x5b89d0d4
FindNextFileW
0x5b89d0d8
FindResourceW
0x5b89d0fc
FlushFileBuffers
0x5b89d178
FlushViewOfFile
0x5b89d17c
FormatMessageW
0x5b89d19c
FreeLibrary
0x5b89d194
GetCurrentProcess
0x5b89d174
GetCurrentProcessId
0x5b89d1cc
GetCurrentThread
0x5b89d0c4
GetCurrentThreadId
0x5b89d1d0
GetEnvironmentVariableW
0x5b89d120
GetFileAttributesExW
0x5b89d1d8
GetFileAttributesW
0x5b89d0e0
GetFileSizeEx
0x5b89d230
GetLastError
0x5b89d164
GetLocalTime
0x5b89d11c
GetModuleFileNameW
0x5b89d0f8
GetModuleHandleExW
0x5b89d1e0
GetModuleHandleW
0x5b89d16c
GetProcAddress
0x5b89d168
GetProcessHeap
0x5b89d1f8
GetProcessTimes
0x5b89d0e4
GetQueuedCompletionStatus
0x5b89d208
GetStringTypeW
0x5b89d2ac
GetSystemDirectoryW
0x5b89d2a0
GetSystemInfo
0x5b89d2b4
GetSystemTimeAsFileTime
0x5b89d1d4
GetTickCount
0x5b89d190
GetTickCount64
0x5b89d114
GetVersionExW
0x5b89d170
HeapAlloc
0x5b89d1b8
HeapCreate
0x5b89d2fc
HeapDestroy
0x5b89d2ec
HeapFree
0x5b89d1b4
HeapReAlloc
0x5b89d2f0
HeapSize
0x5b89d2f4
HeapValidate
0x5b89d2f8
InitializeConditionVariable
0x5b89d28c
InitializeCriticalSection
0x5b89d10c
InitializeCriticalSectionAndSpinCount
0x5b89d144
InitializeCriticalSectionEx
0x5b89d298
InitializeSListHead
0x5b89d160
InterlockedFlushSList
0x5b89d154
IsProcessorFeaturePresent
0x5b89d15c
LCMapStringEx
0x5b89d290
LeaveCriticalSection
0x5b89d1bc
LoadLibraryExA
0x5b89d2e0
LoadLibraryExW
0x5b89d130
LoadLibraryW
0x5b89d0f4
LoadResource
0x5b89d104
LocalFileTimeToFileTime
0x5b89d128
LocalFree
0x5b89d198
LockResource
0x5b89d108
MapViewOfFile
0x5b89d23c
MultiByteToWideChar
0x5b89d220
OpenEventW
0x5b89d2a8
OpenFileMappingW
0x5b89d2a4
OpenProcess
0x5b89d1a8
PostQueuedCompletionStatus
0x5b89d204
QueryPerformanceCounter
0x5b89d18c
QueryPerformanceFrequency
0x5b89d224
RaiseException
0x5b89d150
ReadFile
0x5b89d234
RegisterWaitForSingleObject
0x5b89d1ac
ReleaseMutex
0x5b89d1e4
ReleaseSemaphore
0x5b89d2b8
ReleaseSRWLockExclusive
0x5b89d2dc
RemoveDirectoryW
0x5b89d0d0
ResetEvent
0x5b89d184
RtlUnwind
0x5b89d158
SetEnvironmentVariableW
0x5b89d2b0
SetEvent
0x5b89d1c8
SetFileAttributesW
0x5b89d0cc
SetLastError
0x5b89d1a4
SetThreadpoolThreadMaximum
0x5b89d278
SetThreadpoolThreadMinimum
0x5b89d26c
SetThreadpoolTimer
0x5b89d1dc
SetThreadpoolWait
0x5b89d2d0
SizeofResource
0x5b89d100
Sleep
0x5b89d210
SleepConditionVariableCS
0x5b89d284
StartThreadpoolIo
0x5b89d250
SubmitThreadpoolWork
0x5b89d2e4
SwitchToThread
0x5b89d188
SystemTimeToFileTime
0x5b89d12c
TlsAlloc
0x5b89d140
TlsFree
0x5b89d134
TlsGetValue
0x5b89d13c
TlsSetValue
0x5b89d138
TryEnterCriticalSection
0x5b89d110
UnmapViewOfFile
0x5b89d1a0
UnregisterWaitEx
0x5b89d1b0
VirtualLock
0x5b89d2c0
VirtualProtect
0x5b89d2e8
VirtualQuery
0x5b89d238
WaitForMultipleObjects
0x5b89d1e8
WaitForSingleObject
0x5b89d214
WaitForSingleObjectEx
0x5b89d218
WaitForThreadpoolIoCallbacks
0x5b89d25c
WaitForThreadpoolTimerCallbacks
0x5b89d260
WaitForThreadpoolWaitCallbacks
0x5b89d274
WaitForThreadpoolWorkCallbacks
0x5b89d268
WakeAllConditionVariable
0x5b89d288
WideCharToMultiByte
0x5b89d21c
WriteFile
0x5b89d22c
CoCreateInstance
0x5b89d464
CoGetObject
0x5b89d46c
CoInitializeEx
0x5b89d468
CoUninitialize
0x5b89d460
IIDFromString
0x5b89d470
SafeArrayCreate
0x5b89d310
SafeArrayGetDim
0x5b89d308
SysAllocString
0x5b89d31c
SysAllocStringLen
0x5b89d314
SysFreeString
0x5b89d320
VariantClear
0x5b89d30c
VariantInit
0x5b89d318
RPCRT4.dll
11
NdrClientCall4
0x5b89d338
RpcBindingFree
0x5b89d350
RpcBindingFromStringBindingW
0x5b89d328
RpcBindingSetAuthInfoExW
0x5b89d334
RpcBindingSetOption
0x5b89d330
RpcSmDestroyClientContext
0x5b89d34c
RpcStringBindingComposeW
0x5b89d32c
RpcStringFreeW
0x5b89d348
UuidCreate
0x5b89d33c
UuidFromStringW
0x5b89d344
UuidToStringW
0x5b89d340
No function matches your filter.