mpclient.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: c996bd7a1d8385588fa31fd8c6dd5586

File Size: 2.7 MB

Uploaded At: March 20, 2026, 5:13 a.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

0RUWVVoITdfytEgyBCCykioFrCj (Ordinal: 1, Address: 0x73360)
0iWZbGjyoCMhks (Ordinal: 2, Address: 0x73360)
0jU0o7gtIum7qv (Ordinal: 3, Address: 0x73360)
1FnQwjy (Ordinal: 4, Address: 0x73360)
1ftXTawY8uzNmWZaZ (Ordinal: 5, Address: 0x73360)
1n4X6czEyBx2sG3g2FTPAyx1A6VorTgQ (Ordinal: 6, Address: 0x73360)
1uHCkp5wa7f (Ordinal: 7, Address: 0x73360)
1uQ7y84vBEvU6EobwksAM (Ordinal: 8, Address: 0x73360)
2BMCIucXhZDVmvmOm75YE (Ordinal: 9, Address: 0x73360)
2Gvjx6jtjkPYk5sb81FCylOuuHK (Ordinal: 10, Address: 0x73360)
2YXkgQXGmvsd2rL6ThJOmeypVhtB (Ordinal: 11, Address: 0x73360)
2nq3ZCkk455 (Ordinal: 12, Address: 0x73360)
2sJ2STF0XAx2 (Ordinal: 13, Address: 0x73360)
34c9jb6B7R6IWM (Ordinal: 14, Address: 0x73360)
3YWsZoRAGW (Ordinal: 15, Address: 0x73360)
3bGk59ANleoXjgnUQ (Ordinal: 16, Address: 0x73360)
3rZd97A6Ie6Cm178B38HsE4Nyr (Ordinal: 17, Address: 0x73360)
427BkNG7DsrRf762 (Ordinal: 18, Address: 0x73360)
4ZFrOmVZAe (Ordinal: 19, Address: 0x73360)
4lUsVggeavQGLVY4esb05SwOER (Ordinal: 20, Address: 0x73360)
4q6BI2Af5d22IDJNoGK25l (Ordinal: 21, Address: 0x73360)
4sbkDw3aEBTRaqUbX (Ordinal: 22, Address: 0x73360)
4w59CtfHf29kwIRevHYedtkxtLrJ1s (Ordinal: 23, Address: 0x73360)
4yFbmLG (Ordinal: 24, Address: 0x73360)
50fbzhvslwTx (Ordinal: 25, Address: 0x73360)
50iCzHyIsgV9NsloXh1yYXpwHoTbRo (Ordinal: 26, Address: 0x73360)
52d76UWP8 (Ordinal: 27, Address: 0x73360)
55hgDGXiQOES (Ordinal: 28, Address: 0x73360)
58Ac2EN3X0fAQx027ao7N7 (Ordinal: 29, Address: 0x73360)
5EupPKaQeaktlFS9 (Ordinal: 30, Address: 0x73360)
5SjDoFQfDuMrzju (Ordinal: 31, Address: 0x73360)
5bd2ovvxn52NKrQ7zKelKIJIu4 (Ordinal: 32, Address: 0x73360)
5nzQ20e (Ordinal: 33, Address: 0x73360)
6IYXItBckds3 (Ordinal: 34, Address: 0x73360)
6YOdpzuE1lVvgfip (Ordinal: 35, Address: 0x73360)
6fZUJKABZ7bVSWZK7ZES8 (Ordinal: 36, Address: 0x73360)
6hbeK4htNgWs45bRy53sn4F4cEeps (Ordinal: 37, Address: 0x73360)
6pTTXttP7tjHA4hgdBT62PQQJt (Ordinal: 38, Address: 0x73360)
6z3AEpGEm3DoRbt78EWrSTaGhPqJ (Ordinal: 39, Address: 0x73360)
7djWgTBKrzcw9LQG (Ordinal: 40, Address: 0x73360)
7rnB1uFSCuDCDzhvAdKTFnnr4A (Ordinal: 41, Address: 0x73360)
7xENGe6eTkcCGEJx6YfqhcEa (Ordinal: 42, Address: 0x73360)
8ZZ7CfIdl8sVtxlQmCxaR56p5HR (Ordinal: 43, Address: 0x73360)
8bN5gMxtbU4sMZLQ0iWTCQAeMq79j7i (Ordinal: 44, Address: 0x73360)
8m5nICuU5WbObMZyGaQC (Ordinal: 45, Address: 0x73360)
91Cs2E1leOAYZoT3y6af8MKOdljF (Ordinal: 46, Address: 0x73360)
9RXGh1ivOg (Ordinal: 47, Address: 0x73360)
9UaqjrTw1BfI7R6UZlMaLD7 (Ordinal: 48, Address: 0x73360)
9r93oXab2a7dgU7UuzoqfCpKaX (Ordinal: 49, Address: 0x73360)
Ab8KCkRW3ohikx9LbPfBRkV (Ordinal: 50, Address: 0x73360)
AboPBY2eVWoPHN5kUUBitWJbCTt (Ordinal: 51, Address: 0x73360)
BRvoUcOW3h (Ordinal: 52, Address: 0x73360)
BYZME2lTr633ed9TukB (Ordinal: 53, Address: 0x73360)
Bt64WTfOQ8kcI (Ordinal: 54, Address: 0x73360)
ByUB6icBJcDt2vMvu83zJMlB7V (Ordinal: 55, Address: 0x73360)
C3dwZDJFg (Ordinal: 56, Address: 0x73360)
DKmtwGhuHmSmFMy90E4YSmB (Ordinal: 57, Address: 0x73360)
DjxHJGS4Vp (Ordinal: 58, Address: 0x73360)
DxwimJyBmjJ (Ordinal: 59, Address: 0x73360)
EFy9doo8VEe3fOW0lwwfIHA (Ordinal: 60, Address: 0x73360)
FRiR8LFaNswNAeI4OlywwdQa0E (Ordinal: 61, Address: 0x73360)
Fqt7oP8Vp4Rb8BVA (Ordinal: 62, Address: 0x73360)
FtjtEyzHBATLup02zeHfo2ZjJwLOM7y (Ordinal: 63, Address: 0x73360)
Fw2GLw6LyPjJUPXSfh2wks (Ordinal: 64, Address: 0x73360)
GPqfupRuQvl4kkPXEJ (Ordinal: 65, Address: 0x73360)
GfVsEEVGJ (Ordinal: 66, Address: 0x73360)
H1gppS3L2y6ylr2 (Ordinal: 67, Address: 0x73360)
HWSJziPO0kFv2IxcoSBbKF (Ordinal: 68, Address: 0x73360)
HWZUrLRHSlnFiBpeiouibAS (Ordinal: 69, Address: 0x73360)
IErG2mrJUgXtCvaeQcIH2B (Ordinal: 70, Address: 0x73360)
IH9ph8RUEtEfx9ge (Ordinal: 71, Address: 0x73360)
IaJg4IFETIAcYUj (Ordinal: 72, Address: 0x73360)
Imsd3KiM6mTLRHg5cUn7CABrKswH (Ordinal: 73, Address: 0x73360)
J0fz1e1mIaDi5xQeW5mgGwG (Ordinal: 74, Address: 0x73360)
JCltZMwmoF17wAg3ISwfvItwC (Ordinal: 75, Address: 0x73360)
JNx1i2L1tYD (Ordinal: 76, Address: 0x73360)
Jge7Ha0brhlOBEiLjf (Ordinal: 77, Address: 0x73360)
KKN1aI228yw (Ordinal: 78, Address: 0x73360)
KMdd4ovo8HKYY8k4i7F (Ordinal: 79, Address: 0x73360)
KT7zN5jP1EBTAChPx (Ordinal: 80, Address: 0x73360)
KXek9Xodpqp7ZIqOW (Ordinal: 81, Address: 0x73360)
Kg5thPzfq1rBNBMXtf6WoR (Ordinal: 82, Address: 0x73360)
KucZUBg5CokILv (Ordinal: 83, Address: 0x73360)
LBqk0efewI (Ordinal: 84, Address: 0x73360)
LWb9vjBo38KvU (Ordinal: 85, Address: 0x73360)
LdD3u9xAzjYftNx350M2N8OkzFuCeYV (Ordinal: 86, Address: 0x73360)
LewrZeHr7nmRp9mKVqzwHStEyhS (Ordinal: 87, Address: 0x73360)
Lgly2peou8tJAOZWD (Ordinal: 88, Address: 0x73360)
M1YDu5GtO2JokCz (Ordinal: 89, Address: 0x73360)
M3nFZppm2SH20izCEyvK (Ordinal: 90, Address: 0x73360)
MInCr5YR4oTWJ63X16hmAZqsXaJaII (Ordinal: 91, Address: 0x73360)
MpAccessibilityAsyncEvent (Ordinal: 92, Address: 0x73320)
MpAddDynamicSignatureFile (Ordinal: 93, Address: 0x73320)
MpAllocMemory (Ordinal: 94, Address: 0x73320)
MpAmsiCloseSession (Ordinal: 95, Address: 0x73320)
MpAmsiNotify (Ordinal: 96, Address: 0x73320)
MpAmsiScan (Ordinal: 97, Address: 0x73320)
MpAsrSetHipsUserExclusion (Ordinal: 98, Address: 0x73320)
MpAsrSetHipsUserExclusionEx (Ordinal: 99, Address: 0x73320)
MpChangeCapability (Ordinal: 100, Address: 0x73320)
MpCheckAccessForClipboardOperation (Ordinal: 101, Address: 0x73320)
MpCheckAccessForClipboardOperationEx (Ordinal: 102, Address: 0x73320)
MpCheckAccessForClipboardOperationEx2 (Ordinal: 103, Address: 0x73320)
MpCheckAccessForCopyFile (Ordinal: 104, Address: 0x73320)
MpCheckAccessForDragDropOperation (Ordinal: 105, Address: 0x73320)
MpCheckAccessForDragDropOperation2 (Ordinal: 106, Address: 0x73320)
MpCheckAccessForPrintOperation (Ordinal: 107, Address: 0x73320)
MpCheckAccessForPrintOperation2 (Ordinal: 108, Address: 0x73320)
MpCleanControl (Ordinal: 109, Address: 0x73320)
MpCleanOpen (Ordinal: 110, Address: 0x73320)
MpCleanPrecheckStart (Ordinal: 111, Address: 0x73320)
MpCleanStart (Ordinal: 112, Address: 0x73320)
MpClientUtilExportFunctions (Ordinal: 113, Address: 0x73320)
MpClientUtilExportFunctionsSize (Ordinal: 114, Address: 0x73320)
MpClose (Ordinal: 115, Address: 0x73320)
MpConfigClose (Ordinal: 116, Address: 0x73320)
MpConfigDelValue (Ordinal: 117, Address: 0x73320)
MpConfigGetValue (Ordinal: 118, Address: 0x73320)
MpConfigGetValueAlloc (Ordinal: 119, Address: 0x73320)
MpConfigInitialize (Ordinal: 120, Address: 0x73320)
MpConfigIteratorClose (Ordinal: 121, Address: 0x73320)
MpConfigIteratorEnum (Ordinal: 122, Address: 0x73320)
MpConfigIteratorEnumV2 (Ordinal: 123, Address: 0x73320)
MpConfigIteratorOpen (Ordinal: 124, Address: 0x73320)
MpConfigOpen (Ordinal: 125, Address: 0x73320)
MpConfigQueryProtection (Ordinal: 126, Address: 0x73320)
MpConfigRefresh (Ordinal: 127, Address: 0x73320)
MpConfigRegisterForNotifications (Ordinal: 128, Address: 0x73320)
MpConfigSetValue (Ordinal: 129, Address: 0x73320)
MpConfigUninitialize (Ordinal: 130, Address: 0x73320)
MpConfigUnregisterNotifications (Ordinal: 131, Address: 0x73320)
MpConveyDlpBypass (Ordinal: 132, Address: 0x73320)
MpConveySampleSubmissionResult (Ordinal: 133, Address: 0x73320)
MpConveyUserChoiceForDlpNotification (Ordinal: 134, Address: 0x73320)
MpConveyUserChoiceForDlpNotificationEx (Ordinal: 135, Address: 0x73320)
MpConveyUserChoiceForSampleList (Ordinal: 136, Address: 0x73320)
MpCreateComInstance (Ordinal: 137, Address: 0x73320)
MpDbgAllocMemory (Ordinal: 138, Address: 0x73320)
MpDebugExportFunctions (Ordinal: 139, Address: 0x73320)
MpDefenderIsPrintAccessCheckNeeded (Ordinal: 140, Address: 0x73320)
MpDefenderPrintAccessCheck (Ordinal: 141, Address: 0x73320)
MpDefenderPrintDataProvide (Ordinal: 142, Address: 0x73320)
MpDelegateCopyFile (Ordinal: 143, Address: 0x73320)
MpDelegateCopyFileAsync (Ordinal: 144, Address: 0x73320)
MpDeleteAsrHistory (Ordinal: 145, Address: 0x73320)
MpDetectionEnumerate (Ordinal: 146, Address: 0x73320)
MpDetectionQuery (Ordinal: 147, Address: 0x73320)
MpDeviceControlAuthenticateNetworkShare (Ordinal: 148, Address: 0x73320)
MpDeviceControlQueryInformation (Ordinal: 149, Address: 0x73320)
MpDeviceControlValidateDataDuplicationRemoteLocationConfiguration (Ordinal: 150, Address: 0x73320)
MpDlpCheckAccessForBuffer (Ordinal: 151, Address: 0x73320)
MpDlpDelegateEnforcement (Ordinal: 152, Address: 0x73320)
MpDlpDispatchAccessEvent (Ordinal: 153, Address: 0x73320)
MpDlpGetEvidenceFileUrl (Ordinal: 154, Address: 0x73320)
MpDlpGetOperationEnforcmentMode (Ordinal: 155, Address: 0x73320)
MpDlpInitializeEnforcementMode (Ordinal: 156, Address: 0x73320)
MpDlpNotifyCloseDocumentFile (Ordinal: 157, Address: 0x73320)
MpDlpNotifyPostOpenDocumentFile (Ordinal: 158, Address: 0x73320)
MpDlpNotifyPostSaveAsDocument (Ordinal: 159, Address: 0x73320)
MpDlpNotifyPostStartPrint (Ordinal: 160, Address: 0x73320)
MpDlpNotifyPreOpenDocumentFile (Ordinal: 161, Address: 0x73320)
MpDlpNotifyPrePrint (Ordinal: 162, Address: 0x73320)
MpDlpNotifyPreSaveAsDocument (Ordinal: 163, Address: 0x73320)
MpDlpScanLLM (Ordinal: 164, Address: 0x73320)
MpDlpServicePingRpc (Ordinal: 165, Address: 0x73320)
MpDynamicSignatureEnumerate (Ordinal: 166, Address: 0x73320)
MpDynamicSignatureOpen (Ordinal: 167, Address: 0x73320)
MpEffectiveConfigurationReport (Ordinal: 168, Address: 0x73320)
MpElevateCleanHandle (Ordinal: 169, Address: 0x73320)
MpElevationHandleAcquire (Ordinal: 170, Address: 0x73320)
MpElevationHandleActivate (Ordinal: 171, Address: 0x73320)
MpElevationHandleAttach (Ordinal: 172, Address: 0x73320)
MpElevationHandleOpen (Ordinal: 173, Address: 0x73320)
MpErrorMessageFormat (Ordinal: 174, Address: 0x73320)
MpFastMemoryScan (Ordinal: 175, Address: 0x73320)
MpFastMemoryScanOpen (Ordinal: 176, Address: 0x73320)
MpFlushLowfiCache (Ordinal: 177, Address: 0x73320)
MpForcedReboot (Ordinal: 178, Address: 0x73320)
MpFreeFileTrustExtraInfo (Ordinal: 179, Address: 0x73320)
MpFreeMemory (Ordinal: 180, Address: 0x73320)
MpFreeTSModeInfo (Ordinal: 181, Address: 0x73320)
MpFreeUpToDateInfo (Ordinal: 182, Address: 0x73320)
MpGenerateSignature (Ordinal: 183, Address: 0x73320)
MpGenerateSignatureEx (Ordinal: 184, Address: 0x73320)
MpGenerateThreatReport (Ordinal: 185, Address: 0x73320)
MpGetASRPerRuleExclusions (Ordinal: 186, Address: 0x73320)
MpGetAsrBlockedActionInfos (Ordinal: 187, Address: 0x73320)
MpGetAsrBlockedActions (Ordinal: 188, Address: 0x73320)
MpGetAsrBlockedProcesses (Ordinal: 189, Address: 0x73320)
MpGetCallistoDetections (Ordinal: 190, Address: 0x73320)
MpGetConfigPayloadStatus (Ordinal: 191, Address: 0x73320)
MpGetConfigValue (Ordinal: 192, Address: 0x73320)
MpGetCopyAcceleratorCancellableCopyStatus (Ordinal: 193, Address: 0x73320)
MpGetCopyAcceleratorProcessStatus (Ordinal: 194, Address: 0x73320)
MpGetDevMode (Ordinal: 195, Address: 0x73320)
MpGetDevVolumesProtectionState (Ordinal: 196, Address: 0x73320)
MpGetDeviceControlSecurityPolicies (Ordinal: 197, Address: 0x73320)
MpGetDeviceControlStatus (Ordinal: 198, Address: 0x73320)
MpGetDlpEvents (Ordinal: 199, Address: 0x73320)
MpGetEngineVersion (Ordinal: 200, Address: 0x73320)
MpGetFCValue (Ordinal: 201, Address: 0x73320)
MpGetHIPSRuleInfo (Ordinal: 202, Address: 0x73320)
MpGetMAPSConnectivityStatusInfo (Ordinal: 203, Address: 0x73320)
MpGetNpSupportFile (Ordinal: 204, Address: 0x73320)
MpGetRunningMode (Ordinal: 205, Address: 0x73320)
MpGetSACInfo (Ordinal: 206, Address: 0x73320)
MpGetSCCState (Ordinal: 207, Address: 0x73320)
MpGetSampleChunk (Ordinal: 208, Address: 0x73320)
MpGetSampleListRequiringConsent (Ordinal: 209, Address: 0x73320)
MpGetTDTFeatureStatus (Ordinal: 210, Address: 0x73320)
MpGetTDTFeatureStatusEx (Ordinal: 211, Address: 0x73320)
MpGetTPStateInfo (Ordinal: 212, Address: 0x73320)
MpGetTSModeInfo (Ordinal: 213, Address: 0x73320)
MpGetTaskSchedulerStrings (Ordinal: 214, Address: 0x73320)
MpGetThreatExecutionInfo (Ordinal: 215, Address: 0x73320)
MpGetUpToDateInfo (Ordinal: 216, Address: 0x73320)
MpGetUpdatePlatformStatus (Ordinal: 217, Address: 0x73320)
MpHandleClose (Ordinal: 218, Address: 0x73320)
MpImportConfigPayload (Ordinal: 219, Address: 0x73320)
MpIsDeviceControlAvailable (Ordinal: 220, Address: 0x73320)
MpIsGivenRunningModeSupported (Ordinal: 221, Address: 0x73320)
MpIsRtpAutoEnable (Ordinal: 222, Address: 0x73320)
MpManagerDisable (Ordinal: 223, Address: 0x73320)
MpManagerEnable (Ordinal: 224, Address: 0x73320)
MpManagerOpen (Ordinal: 225, Address: 0x73320)
MpManagerStatusQuery (Ordinal: 226, Address: 0x73320)
MpManagerStatusQueryEx (Ordinal: 227, Address: 0x73320)
MpManagerVersionQuery (Ordinal: 228, Address: 0x73320)
MpManagerXBGMDisable (Ordinal: 229, Address: 0x73320)
MpManagerXBGMEnable (Ordinal: 230, Address: 0x73320)
MpMemoryScanStart (Ordinal: 231, Address: 0x73320)
MpNetworkCapture (Ordinal: 232, Address: 0x73320)
MpNotificationRegister (Ordinal: 233, Address: 0x73320)
MpOfflineScanInstall (Ordinal: 234, Address: 0x73320)
MpOfflineScanStatusQuery (Ordinal: 235, Address: 0x73320)
MpOpen (Ordinal: 236, Address: 0x73320)
MpProductGenuineCheck (Ordinal: 237, Address: 0x73320)
MpQuarantineRequest (Ordinal: 238, Address: 0x73320)
MpQueryDefaultFolderGuardList (Ordinal: 239, Address: 0x73320)
MpQueryDevVolumeProtectionState (Ordinal: 240, Address: 0x73320)
MpQueryEngineConfigDword (Ordinal: 241, Address: 0x73320)
MpQueryFileTrustByHandle (Ordinal: 242, Address: 0x73320)
MpQueryFileTrustByHandle2 (Ordinal: 243, Address: 0x73320)
MpRemapCallistoDetections (Ordinal: 244, Address: 0x73320)
MpRemoveDynamicSignatureFile (Ordinal: 245, Address: 0x73320)
MpReportClipboardOwner (Ordinal: 246, Address: 0x73320)
MpRequestSnooze (Ordinal: 247, Address: 0x73320)
MpRollbackPlatform (Ordinal: 248, Address: 0x73320)
MpSampleQuery (Ordinal: 249, Address: 0x73320)
MpSampleSubmit (Ordinal: 250, Address: 0x73320)
MpScanControl (Ordinal: 251, Address: 0x73320)
MpScanResult (Ordinal: 252, Address: 0x73320)
MpScanStart (Ordinal: 253, Address: 0x73320)
MpScanStartEx (Ordinal: 254, Address: 0x73320)
MpSendBrowserHeartbeat (Ordinal: 255, Address: 0x73320)
MpServiceLogMessage (Ordinal: 256, Address: 0x73320)
MpSetBreakTheGlassStatus (Ordinal: 257, Address: 0x73320)
MpSetTPState (Ordinal: 258, Address: 0x73320)
MpSetUacElevationDefaultWindowHandle (Ordinal: 259, Address: 0x73320)
MpShowDlpDetailsDialog (Ordinal: 260, Address: 0x73320)
MpShutdownCopyAcceleratorProcess (Ordinal: 261, Address: 0x73320)
MpSmartLockerEnable (Ordinal: 262, Address: 0x73320)
MpTelemetryAddToAverageDWORD (Ordinal: 263, Address: 0x73320)
MpTelemetryAddToStreamDWORD (Ordinal: 264, Address: 0x73320)
MpTelemetryAddToStreamDWORD64 (Ordinal: 265, Address: 0x73320)
MpTelemetryAddToStreamString (Ordinal: 266, Address: 0x73320)
MpTelemetryIncrementDWORD (Ordinal: 267, Address: 0x73320)
MpTelemetryInitialize (Ordinal: 268, Address: 0x73320)
MpTelemetryIsOptIn (Ordinal: 269, Address: 0x73320)
MpTelemetryLiteralAddToAverageDWORD (Ordinal: 270, Address: 0x73320)
MpTelemetryLiteralAddToStreamDWORD (Ordinal: 271, Address: 0x73320)
MpTelemetryLiteralAddToStreamDWORD64 (Ordinal: 272, Address: 0x73320)
MpTelemetryLiteralAddToStreamString (Ordinal: 273, Address: 0x73320)
MpTelemetryLiteralIncrementDWORD (Ordinal: 274, Address: 0x73320)
MpTelemetryLiteralSetDWORD (Ordinal: 275, Address: 0x73320)
MpTelemetryLiteralSetDWORD64 (Ordinal: 276, Address: 0x73320)
MpTelemetryLiteralSetIfMaxDWORD (Ordinal: 277, Address: 0x73320)
MpTelemetryLiteralSetIfMinDWORD (Ordinal: 278, Address: 0x73320)
MpTelemetryLiteralSetString (Ordinal: 279, Address: 0x73320)
MpTelemetrySetConsent (Ordinal: 280, Address: 0x73320)
MpTelemetrySetDWORD (Ordinal: 281, Address: 0x73320)
MpTelemetrySetDWORD64 (Ordinal: 282, Address: 0x73320)
MpTelemetrySetIfMaxDWORD (Ordinal: 283, Address: 0x73320)
MpTelemetrySetIfMinDWORD (Ordinal: 284, Address: 0x73320)
MpTelemetrySetString (Ordinal: 285, Address: 0x73320)
MpTelemetryUninitialize (Ordinal: 286, Address: 0x73320)
MpTelemetryUpdateUserConsent (Ordinal: 287, Address: 0x73320)
MpTelemetryUpload (Ordinal: 288, Address: 0x73320)
MpThreatAction (Ordinal: 289, Address: 0x73320)
MpThreatEnumerate (Ordinal: 290, Address: 0x73320)
MpThreatHistoryRequest (Ordinal: 291, Address: 0x73320)
MpThreatLocalizedInfoQuery (Ordinal: 292, Address: 0x73320)
MpThreatOpen (Ordinal: 293, Address: 0x73320)
MpThreatQuery (Ordinal: 294, Address: 0x73320)
MpThreatRollup (Ordinal: 295, Address: 0x73320)
MpTriggerErrorHeartbeatReport (Ordinal: 296, Address: 0x73320)
MpTriggerHeartbeatOnUninstall (Ordinal: 297, Address: 0x73320)
MpTriggerStatusRefreshNotification (Ordinal: 298, Address: 0x73320)
MpUnblockEngine (Ordinal: 299, Address: 0x73320)
MpUnblockPlatform (Ordinal: 300, Address: 0x73320)
MpUnblockSignatures (Ordinal: 301, Address: 0x73320)
MpUpdateBrowserActiveTab (Ordinal: 302, Address: 0x73320)
MpUpdateControl (Ordinal: 303, Address: 0x73320)
MpUpdateDevMode (Ordinal: 304, Address: 0x73320)
MpUpdateEngine (Ordinal: 305, Address: 0x73320)
MpUpdatePlatform (Ordinal: 306, Address: 0x73320)
MpUpdateServicePingRpc (Ordinal: 307, Address: 0x73320)
MpUpdateStart (Ordinal: 308, Address: 0x73320)
MpUpdateStartEx (Ordinal: 309, Address: 0x73320)
MpUpdateTSMode (Ordinal: 310, Address: 0x73320)
MpUpdateTSModeEx (Ordinal: 311, Address: 0x73320)
MpUtilsExportFunctions (Ordinal: 312, Address: 0x73320)
MpWDEnable (Ordinal: 313, Address: 0x73320)
MpXBGMEnable (Ordinal: 314, Address: 0x73320)
MpXBGMFreeEvent (Ordinal: 315, Address: 0x73320)
MpXBGMGetData (Ordinal: 316, Address: 0x73320)
MpXBGMPutData (Ordinal: 317, Address: 0x73320)
MpXBGMUpdateIV (Ordinal: 318, Address: 0x73320)
MputAddToAverageDWORD64Rpc (Ordinal: 319, Address: 0x73320)
MputAddToAverageDWORDRpc (Ordinal: 320, Address: 0x73320)
MputIncrementDWORD64Rpc (Ordinal: 321, Address: 0x73320)
MputIncrementDWORDRpc (Ordinal: 322, Address: 0x73320)
MputSetBoolRpc (Ordinal: 323, Address: 0x73320)
MputSetDWORD64Rpc (Ordinal: 324, Address: 0x73320)
MputSetDWORDRpc (Ordinal: 325, Address: 0x73320)
MputSetIfMaxDWORD64Rpc (Ordinal: 326, Address: 0x73320)
MputSetIfMaxDWORDRpc (Ordinal: 327, Address: 0x73320)
MputSetIfMinDWORD64Rpc (Ordinal: 328, Address: 0x73320)
MputSetIfMinDWORDRpc (Ordinal: 329, Address: 0x73320)
MputSetStringRpc (Ordinal: 330, Address: 0x73320)
MvxastE6nPDVJkYaPb (Ordinal: 331, Address: 0x73360)
N3MBsMLqgHPceg (Ordinal: 332, Address: 0x73360)
NA5FRwN2QQhx2m5M0nSzGQt1LURo (Ordinal: 333, Address: 0x73360)
Nhn7nR7AmCG (Ordinal: 334, Address: 0x73360)
OE9E86aOt2sqnn3pzhVtqCT2 (Ordinal: 335, Address: 0x73360)
OU5vxLusD5Uolmy3pjIDcZP (Ordinal: 336, Address: 0x73360)
OrTsHLAaN (Ordinal: 337, Address: 0x73360)
PGyKVZLO9doDdp (Ordinal: 338, Address: 0x73360)
PX5r56rE (Ordinal: 339, Address: 0x73360)
PYqQb3dw (Ordinal: 340, Address: 0x73360)
Plnh2LxarL8 (Ordinal: 341, Address: 0x73360)
QFiqlOvE8c9x (Ordinal: 342, Address: 0x73360)
R8iCAhZq1Yw2Wb088gTgmuD0Ii (Ordinal: 343, Address: 0x73360)
RIK34XwdXhpDIwL (Ordinal: 344, Address: 0x73360)
RKgqU0Jt4XDbGJZlh9j (Ordinal: 345, Address: 0x73360)
RahfLmKHXq82aYftTABpfu512U (Ordinal: 346, Address: 0x73360)
RalglXAmnOuq10LkXkErj (Ordinal: 347, Address: 0x73360)
RvQq0xBGAfoaaU2iGNB (Ordinal: 348, Address: 0x73360)
Ry9gajMMGJQqJs6JTLkiJ3qHlGLa65fu (Ordinal: 349, Address: 0x73360)
S8UzSoFFHHER (Ordinal: 350, Address: 0x73360)
SAWhuprVwJedLwAYAk (Ordinal: 351, Address: 0x73360)
SENAbrBjQNRJwH (Ordinal: 352, Address: 0x73360)
SSXoJojJ9VILa (Ordinal: 353, Address: 0x73360)
SgxdQvh4VxF8vfs98 (Ordinal: 354, Address: 0x73360)
Su1RQXmeNwZBEZG0id0FTHXdz99N (Ordinal: 355, Address: 0x73360)
T0xqDaE4SVY5CdUaUu4lr1wLZ (Ordinal: 356, Address: 0x73360)
TTftA8mDJ (Ordinal: 357, Address: 0x73360)
UNCJA9Q4sjEoBV63DQsRY99KRCXM953I (Ordinal: 358, Address: 0x73360)
UUvUn6zSSu4koo2xBd6S3 (Ordinal: 359, Address: 0x73360)
UbvtXqL9g5xfEKCoBiD5cy (Ordinal: 360, Address: 0x73360)
UrSWKRK (Ordinal: 361, Address: 0x73360)
VescsjaAhHw4h7lgTuxds (Ordinal: 362, Address: 0x73360)
WDEnable (Ordinal: 363, Address: 0x73320)
WDStatus (Ordinal: 364, Address: 0x73320)
WLflHrwrkXEeWc (Ordinal: 365, Address: 0x73360)
X9llnYlIQdAe2r3KFy5GLrRb (Ordinal: 366, Address: 0x73360)
XFPiXLJvTPsXwBakMI81neMQVUqZ2OPB (Ordinal: 367, Address: 0x73360)
XLnVWJy9I8M (Ordinal: 368, Address: 0x73360)
YOxOtQKXyjerp7wRunlAIXfyv (Ordinal: 369, Address: 0x73360)
Yts8QVh4 (Ordinal: 370, Address: 0x73360)
YuYUmA8WSd0jm (Ordinal: 371, Address: 0x73360)
YzAAX8I7UOQpMxnuh7Q5utEIijIAPhGi (Ordinal: 372, Address: 0x73360)
Z8097yFwd (Ordinal: 373, Address: 0x73360)
Z9ElxqhiNFT0RupQ49GLaCTF1drS8B (Ordinal: 374, Address: 0x73360)
ZJVu3NtC3 (Ordinal: 375, Address: 0x73360)
ZKEBjTAyj2ZhuyU3ei9PP6FZ6fhLVDUj (Ordinal: 376, Address: 0x73360)
ZdVYmahkwuBh2sii2CIAzjJZ3q (Ordinal: 377, Address: 0x73360)
Zocqkbp (Ordinal: 378, Address: 0x73360)
a96nfAxhvCN27i01Xv2Hg8MoMgiEisC (Ordinal: 379, Address: 0x73360)
aRKis5sJWnabmkhR7M0pUofZn (Ordinal: 380, Address: 0x73360)
aoa79BaF1n2vddLpmh854Xr1lHZpY (Ordinal: 381, Address: 0x73360)
bQth42Si2wtenci6edwEX78IKoLrH (Ordinal: 382, Address: 0x73360)
bRA73Vlm8CxyyIJxr (Ordinal: 383, Address: 0x73360)
bpq2L54zZEhUgcEcMJW (Ordinal: 384, Address: 0x73360)
c35XtzHNRAPufyssWaOuN (Ordinal: 385, Address: 0x73360)
c5ggO8Cje48 (Ordinal: 386, Address: 0x73360)
cO7ojg3 (Ordinal: 387, Address: 0x73360)
ciNQjaXwvP4oati9Dt3WkcvKpLmP (Ordinal: 388, Address: 0x73360)
ctbxh8thPq (Ordinal: 389, Address: 0x73360)
d9efXB165ytGe1Pk1f5qkIKZ (Ordinal: 390, Address: 0x73360)
dQ7s08Opy1KdE (Ordinal: 391, Address: 0x73360)
dVJkmXbwt8c7 (Ordinal: 392, Address: 0x73360)
dm5HKOUErWqVudbYG (Ordinal: 393, Address: 0x73360)
eCfxbEgmQoSVg5LndeFEDgDDxw (Ordinal: 394, Address: 0x73360)
f3ahoIzjTTh88ax3wBHio (Ordinal: 395, Address: 0x73360)
fIoS2aegjrLLt (Ordinal: 396, Address: 0x73360)
ft1xnSAdY (Ordinal: 397, Address: 0x73360)
g9Qyf1sMfHfmufzH1BsY (Ordinal: 398, Address: 0x73360)
hEwLt5w (Ordinal: 399, Address: 0x73360)
hJXOu0uj1lRDfZ (Ordinal: 400, Address: 0x73360)
hOr4mvIggBstb9sWYSiC4mdmtbn (Ordinal: 401, Address: 0x73360)
hXHE0EdtBB6HjElBRQ0fD (Ordinal: 402, Address: 0x73360)
hnremfFat5qXCzqGeqQq (Ordinal: 403, Address: 0x73360)
i4z0d8zmVB4 (Ordinal: 404, Address: 0x73360)
iC61pAy93eo4qinw7EpSdAT30xHX0 (Ordinal: 405, Address: 0x73360)
ihSYT4AODyiSUkQXUjD6hEdHMAgB (Ordinal: 406, Address: 0x73360)
imfObgJaomkhlMgGrDaGht11Wfe (Ordinal: 407, Address: 0x73360)
iz6hf84YQsnNBQF (Ordinal: 408, Address: 0x73360)
jB1irw9 (Ordinal: 409, Address: 0x73360)
jUnj723sZBpB4tttL2WYqQH0rItpiSUQ (Ordinal: 410, Address: 0x73360)
jpkyaEcWKo44pOaEw (Ordinal: 411, Address: 0x73360)
jsRlpIwYd7NotbTjp5CtzoME (Ordinal: 412, Address: 0x73360)
jwJh6wKXW0Pk8fR (Ordinal: 413, Address: 0x73360)
jykdU5M5pUq4NwUrZJlKK7 (Ordinal: 414, Address: 0x73360)
k5MHM50rLBX97 (Ordinal: 415, Address: 0x73360)
lD55IAUrPKNlGhXf7QL (Ordinal: 416, Address: 0x73360)
lJXVhMM9gYQ10sfCbsBSgxPI (Ordinal: 417, Address: 0x73360)
lckZL70W6uJPFp3 (Ordinal: 418, Address: 0x73360)
ltjuqLrg (Ordinal: 419, Address: 0x73360)
mEH9Hlqg (Ordinal: 420, Address: 0x73360)
mTDDsoz52f (Ordinal: 421, Address: 0x73360)
mlNsB729kHvqHIonMwHEeZLY2gO8jGj (Ordinal: 422, Address: 0x73360)
mmTt3YBkBKc69RARwk46iU (Ordinal: 423, Address: 0x73360)
mrtMCVKuDiM4j0bMP1bf4U0c9Fos (Ordinal: 424, Address: 0x73360)
n14QkHm5 (Ordinal: 425, Address: 0x73360)
nFVqXk2VH5ChX2 (Ordinal: 426, Address: 0x73360)
oMHLAn4MbuNEzX5Oq3GVLAcm8qcJjsY (Ordinal: 427, Address: 0x73360)
oS12h8KI9xpOnjQ (Ordinal: 428, Address: 0x73360)
oSqot4bD8uldNt (Ordinal: 429, Address: 0x73360)
oYgAFWPubwVwtH7jq9xDD (Ordinal: 430, Address: 0x73360)
ogjMDxyFzF7h (Ordinal: 431, Address: 0x73360)
okOpYP0F (Ordinal: 432, Address: 0x73360)
pIEarXjz8BNQqa2 (Ordinal: 433, Address: 0x73360)
pM7DGHSsoWVCUvHBrFmrJZXi (Ordinal: 434, Address: 0x73360)
pQZWnPv (Ordinal: 435, Address: 0x73360)
pU1curkg2pYYgCuXXHDDrkhaA (Ordinal: 436, Address: 0x73360)
pe2cdRTnUXw (Ordinal: 437, Address: 0x73360)
pjYXkFAwcfAxyUYVCozHTb (Ordinal: 438, Address: 0x73360)
pstX0WDJZ5 (Ordinal: 439, Address: 0x73360)
ptRiHw2 (Ordinal: 440, Address: 0x73360)
pwQynEAqJSySJ0Uyn5 (Ordinal: 441, Address: 0x73360)
pzfhsBGHIxqfMUHm (Ordinal: 442, Address: 0x73360)
qduTkrIgQ7y (Ordinal: 443, Address: 0x73360)
qro0YVo25IxJOrXYSAlDqlAX (Ordinal: 444, Address: 0x73360)
r4qdPdxUrgweC0Pf2y3nbnEypm (Ordinal: 445, Address: 0x73360)
rwhMf2rvc2gYnqkYBuI (Ordinal: 446, Address: 0x73360)
sKv7RO2 (Ordinal: 447, Address: 0x73360)
sUesvQ1mYBfVAxolAF8fMYsxO9olmJ3e (Ordinal: 448, Address: 0x73360)
sa1Lhn4JrX7XG (Ordinal: 449, Address: 0x73360)
tUYImxpA7PO2d0HJtn4Z (Ordinal: 450, Address: 0x73360)
tcwMky9TtmdpMT1dLn0lCk (Ordinal: 451, Address: 0x73360)
twJ7BBCYGD (Ordinal: 452, Address: 0x73360)
u5gJmlzTEYLcQbVsSylJCb1 (Ordinal: 453, Address: 0x73360)
uC9T2Ce2dI9t3xVqPRj4nKa3 (Ordinal: 454, Address: 0x73360)
uf2chrAUuwVs5SMF4F (Ordinal: 455, Address: 0x73360)
wRCSLshLCOumCqNKQQjY6MKytt7fSF (Ordinal: 456, Address: 0x73360)
wUqwisHBU (Ordinal: 457, Address: 0x73360)
weJUoAoprUK8Z9r (Ordinal: 458, Address: 0x73360)
wpGqTvqoiuyXKNX5OeS51Jm (Ordinal: 459, Address: 0x73360)
x8Pvho6WxMgjntUIlnOFfoo7UHSxxvcA (Ordinal: 460, Address: 0x73360)
xAAZJM1Xl9VkHMmt0tgKL8XX (Ordinal: 461, Address: 0x73360)
xD2eNbkQAn1S (Ordinal: 462, Address: 0x73360)
xWuHWEcqLsCK7twJovYk9lntaFO1C2R (Ordinal: 463, Address: 0x73360)
xi9NRLexn5LoCHUDiAwS (Ordinal: 464, Address: 0x73360)
xvWcJ2V8GMXygmoYC9MUgg22FU (Ordinal: 465, Address: 0x73360)
zM4CEH2eKjQlFxFv3zvJyL2HEgo (Ordinal: 466, Address: 0x73360)
zWFSPe64zC (Ordinal: 467, Address: 0x73360)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x18010d030)
GetTokenInformation (Address: 0x18010d008)
LookupPrivilegeValueW (Address: 0x18010d038)
OpenProcessToken (Address: 0x18010d000)
RegCloseKey (Address: 0x18010d010)
RegEnumKeyExW (Address: 0x18010d018)
RegOpenKeyExW (Address: 0x18010d020)
RegQueryValueExW (Address: 0x18010d028)

api-ms-win-crt-convert-l1-1-0.dll

strtoull (Address: 0x18010d390)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x18010d3b0)
calloc (Address: 0x18010d3b8)
free (Address: 0x18010d3a0)
malloc (Address: 0x18010d3a8)

api-ms-win-crt-math-l1-1-0.dll

modf (Address: 0x18010d3d0)
pow (Address: 0x18010d3c8)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x18010d400)
_configure_narrow_argv (Address: 0x18010d410)
_crt_atexit (Address: 0x18010d3e0)
_execute_onexit_table (Address: 0x18010d420)
_initialize_narrow_environment (Address: 0x18010d408)
_initialize_onexit_table (Address: 0x18010d3f0)
_initterm (Address: 0x18010d428)
_initterm_e (Address: 0x18010d430)
_register_onexit_function (Address: 0x18010d418)
_seh_filter_dll (Address: 0x18010d438)
abort (Address: 0x18010d3e8)
terminate (Address: 0x18010d3f8)

api-ms-win-crt-string-l1-1-0.dll

_stricmp (Address: 0x18010d458)
strcmp (Address: 0x18010d450)
strcpy_s (Address: 0x18010d460)
strlen (Address: 0x18010d448)

bcrypt.dll

BCryptGenRandom (Address: 0x18010d470)

KERNEL32.dll

AddVectoredExceptionHandler (Address: 0x18010d250)
CloseHandle (Address: 0x18010d068)
CreateEventExW (Address: 0x18010d210)
CreateEventW (Address: 0x18010d0e8)
CreateThread (Address: 0x18010d1c0)
DebugBreak (Address: 0x18010d2f8)
DeleteCriticalSection (Address: 0x18010d138)
DuplicateHandle (Address: 0x18010d1d0)
EncodePointer (Address: 0x18010d048)
EnterCriticalSection (Address: 0x18010d140)
ExpandEnvironmentStringsW (Address: 0x18010d1a0)
FileTimeToSystemTime (Address: 0x18010d118)
FlsAlloc (Address: 0x18010d258)
FlsFree (Address: 0x18010d050)
FlsGetValue (Address: 0x18010d260)
FlsSetValue (Address: 0x18010d268)
FlushProcessWriteBuffers (Address: 0x18010d228)
FormatMessageW (Address: 0x18010d220)
FreeLibrary (Address: 0x18010d1a8)
GetConsoleOutputCP (Address: 0x18010d198)
GetCurrentProcess (Address: 0x18010d078)
GetCurrentProcessId (Address: 0x18010d088)
GetCurrentProcessorNumberEx (Address: 0x18010d200)
GetCurrentThread (Address: 0x18010d128)
GetCurrentThreadId (Address: 0x18010d278)
GetDynamicTimeZoneInformation (Address: 0x18010d1e8)
GetEnabledXStateFeatures (Address: 0x18010d2c8)
GetEnvironmentVariableW (Address: 0x18010d218)
GetExitCodeProcess (Address: 0x18010d070)
GetLargePageMinimum (Address: 0x18010d328)
GetLastError (Address: 0x18010d060)
GetLogicalProcessorInformation (Address: 0x18010d318)
GetLogicalProcessorInformationEx (Address: 0x18010d320)
GetModuleFileNameW (Address: 0x18010d0e0)
GetModuleHandleExW (Address: 0x18010d2b0)
GetModuleHandleW (Address: 0x18010d098)
GetNumaHighestNodeNumber (Address: 0x18010d348)
GetProcAddress (Address: 0x18010d0a0)
GetProcessAffinityMask (Address: 0x18010d2b8)
GetProcessGroupAffinity (Address: 0x18010d350)
GetProcessId (Address: 0x18010d090)
GetStdHandle (Address: 0x18010d0f8)
GetSystemInfo (Address: 0x18010d310)
GetSystemTime (Address: 0x18010d120)
GetSystemTimeAsFileTime (Address: 0x18010d2e0)
GetThreadContext (Address: 0x18010d288)
GetThreadPriority (Address: 0x18010d1d8)
GetTickCount64 (Address: 0x18010d0d8)
GetTimeZoneInformation (Address: 0x18010d1f0)
GlobalMemoryStatusEx (Address: 0x18010d308)
InitializeConditionVariable (Address: 0x18010d170)
InitializeContext (Address: 0x18010d2c0)
InitializeCriticalSection (Address: 0x18010d168)
InitializeCriticalSectionEx (Address: 0x18010d2e8)
InitializeSListHead (Address: 0x18010d380)
InterlockedFlushSList (Address: 0x18010d370)
IsProcessInJob (Address: 0x18010d340)
K32GetProcessMemoryInfo (Address: 0x18010d358)
LeaveCriticalSection (Address: 0x18010d150)
LoadLibraryExW (Address: 0x18010d1b0)
LoadLibraryW (Address: 0x18010d0a8)
LocalAlloc (Address: 0x18010d190)
LocalFree (Address: 0x18010d0b0)
MultiByteToWideChar (Address: 0x18010d0f0)
OpenProcess (Address: 0x18010d0b8)
QueryInformationJobObject (Address: 0x18010d2a8)
QueryPerformanceCounter (Address: 0x18010d160)
QueryPerformanceFrequency (Address: 0x18010d180)
RaiseException (Address: 0x18010d360)
RaiseFailFastException (Address: 0x18010d100)
ReadProcessMemory (Address: 0x18010d0c0)
ResetEvent (Address: 0x18010d2f0)
ResumeThread (Address: 0x18010d1c8)
RtlCaptureContext (Address: 0x18010d240)
RtlPcToFileHeader (Address: 0x18010d368)
RtlRestoreContext (Address: 0x18010d248)
RtlUnwindEx (Address: 0x18010d378)
RtlVirtualUnwind (Address: 0x18010d238)
SetEvent (Address: 0x18010d208)
SetLastError (Address: 0x18010d058)
SetThreadContext (Address: 0x18010d290)
SetThreadErrorMode (Address: 0x18010d1b8)
SetThreadPriority (Address: 0x18010d1e0)
SetXStateFeaturesMask (Address: 0x18010d2d0)
Sleep (Address: 0x18010d130)
SleepConditionVariableCS (Address: 0x18010d148)
SleepEx (Address: 0x18010d300)
SuspendThread (Address: 0x18010d280)
SwitchToThread (Address: 0x18010d270)
SystemTimeToFileTime (Address: 0x18010d110)
TzSpecificLocalTimeToSystemTime (Address: 0x18010d108)
VirtualAlloc (Address: 0x18010d298)
VirtualAllocExNuma (Address: 0x18010d338)
VirtualFree (Address: 0x18010d2a0)
VirtualProtectEx (Address: 0x18010d0c8)
VirtualQuery (Address: 0x18010d2d8)
VirtualUnlock (Address: 0x18010d330)
WaitForMultipleObjectsEx (Address: 0x18010d178)
WaitForSingleObject (Address: 0x18010d080)
WaitForSingleObjectEx (Address: 0x18010d230)
WakeConditionVariable (Address: 0x18010d158)
WideCharToMultiByte (Address: 0x18010d188)
WriteFile (Address: 0x18010d1f8)
WriteProcessMemory (Address: 0x18010d0d0)

ole32.dll

CoGetApartmentType (Address: 0x18010d488)
CoInitializeEx (Address: 0x18010d498)
CoTaskMemAlloc (Address: 0x18010d490)
CoTaskMemFree (Address: 0x18010d480)
CoUninitialize (Address: 0x18010d4a0)
CoWaitForMultipleHandles (Address: 0x18010d4a8)