MHPClient.dll
v1.0.0.0
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 1
EntryProc
#1 · 0x4770
No function matches your filter.
Imported DLLs & functions 186
AdjustTokenPrivileges
0x1000f000
LookupPrivilegeValueA
0x1000f004
OpenProcessToken
0x1000f008
RegCloseKey
0x1000f00c
RegOpenKeyA
0x1000f018
RegOpenKeyExA
0x1000f014
RegQueryValueExA
0x1000f010
ImageRvaToSection
0x1000f308
GDI32.dll
11
BitBlt
0x1000f03c
CreateCompatibleDC
0x1000f044
CreateFontA
0x1000f034
DeleteDC
0x1000f038
DeleteObject
0x1000f040
GetObjectA
0x1000f020
GetStockObject
0x1000f024
SelectObject
0x1000f048
SetBkMode
0x1000f030
SetTextColor
0x1000f02c
TextOutA
0x1000f028
KERNEL32.dll
75
CloseHandle
0x1000f16c
CreateDirectoryA
0x1000f078
CreateEventA
0x1000f0f0
CreateFileA
0x1000f150
CreateFileMappingA
0x1000f06c
CreateFileW
0x1000f064
CreateMutexA
0x1000f088
CreateRemoteThread
0x1000f09c
CreateThread
0x1000f178
DecodePointer
0x1000f12c
DeleteCriticalSection
0x1000f164
DeleteFileA
0x1000f140
DeviceIoControl
0x1000f0c8
EncodePointer
0x1000f130
EnterCriticalSection
0x1000f160
FlushInstructionCache
0x1000f108
GetCurrentProcess
0x1000f0d0
GetCurrentProcessId
0x1000f084
GetCurrentThread
0x1000f154
GetCurrentThreadId
0x1000f0a4
GetFileInformationByHandle
0x1000f068
GetFileSize
0x1000f14c
GetFullPathNameA
0x1000f080
GetLastError
0x1000f0cc
GetLocalTime
0x1000f07c
GetLogicalDriveStringsW
0x1000f0e4
GetModuleFileNameA
0x1000f0b8
GetModuleHandleA
0x1000f0c4
GetProcAddress
0x1000f134
GetProcessHeap
0x1000f0b0
GetSystemTimeAsFileTime
0x1000f118
GetThreadContext
0x1000f100
GetTickCount
0x1000f13c
GetVersionExA
0x1000f0c0
GlobalMemoryStatusEx
0x1000f174
HeapAlloc
0x1000f0b4
HeapFree
0x1000f0ac
InitializeCriticalSection
0x1000f168
InterlockedCompareExchange
0x1000f0f4
InterlockedExchange
0x1000f128
IsDebuggerPresent
0x1000f11c
LeaveCriticalSection
0x1000f15c
LoadLibraryA
0x1000f0bc
MapViewOfFile
0x1000f070
OpenFileMappingA
0x1000f158
OpenMutexA
0x1000f08c
OpenProcess
0x1000f138
QueryDosDeviceW
0x1000f0e8
QueryPerformanceCounter
0x1000f054
QueryPerformanceFrequency
0x1000f050
ReadFile
0x1000f148
ResumeThread
0x1000f0fc
SetEvent
0x1000f0ec
SetFilePointer
0x1000f074
SetLastError
0x1000f114
SetThreadContext
0x1000f104
SetThreadPriority
0x1000f058
SetUnhandledExceptionFilter
0x1000f120
Sleep
0x1000f0e0
SuspendThread
0x1000f0f8
TerminateProcess
0x1000f0d8
TerminateThread
0x1000f170
TryEnterCriticalSection
0x1000f0d4
UnhandledExceptionFilter
0x1000f124
UnmapViewOfFile
0x1000f060
VirtualAlloc
0x1000f10c
VirtualAllocEx
0x1000f090
VirtualFree
0x1000f110
VirtualFreeEx
0x1000f098
VirtualProtect
0x1000f0dc
VirtualQuery
0x1000f0a8
WaitForMultipleObjects
0x1000f05c
WaitForSingleObject
0x1000f0a0
WriteFile
0x1000f144
WriteProcessMemory
0x1000f094
MSVCR100.dll
39
__clean_type_info_names_internal
0x1000f1cc
__CppXcptFilter
0x1000f194
__CxxFrameHandler3
0x1000f1d8
__dllonexit
0x1000f1b4
_amsg_exit
0x1000f198
_crt_debugger_hook
0x1000f18c
_CxxThrowException
0x1000f1d0
_encoded_null
0x1000f1a4
_except_handler4_common
0x1000f190
_initterm
0x1000f1a0
_initterm_e
0x1000f19c
_lock
0x1000f1b0
_malloc_crt
0x1000f1d4
_onexit
0x1000f1ac
_stricmp
0x1000f1dc
_unlock
0x1000f1b8
_wfopen_s
0x1000f210
?_type_info_dtor_internal_method@type_info@@QAEXXZ
0x1000f1c8
??_V@YAXPAX@Z
0x1000f200
??0exception@std@@QAE@ABQBD@Z
0x1000f1f0
??0exception@std@@QAE@ABV01@@Z
0x1000f1ec
??1exception@std@@UAE@XZ
0x1000f1f4
??2@YAPAXI@Z
0x1000f1fc
??3@YAXPAX@Z
0x1000f20c
?terminate@@YAXXZ
0x1000f1a8
?what@exception@std@@UBEPBDXZ
0x1000f1f8
fclose
0x1000f21c
fopen_s
0x1000f224
fread
0x1000f218
free
0x1000f214
malloc
0x1000f220
memcpy
0x1000f1c0
memmove
0x1000f208
memset
0x1000f1bc
rand
0x1000f204
strcpy_s
0x1000f1e4
vsprintf_s
0x1000f1e0
wcscpy_s
0x1000f1c4
wcsstr
0x1000f1e8
EnumProcesses
0x1000f22c
EnumProcessModules
0x1000f230
GetModuleFileNameExA
0x1000f234
GetModuleInformation
0x1000f238
GetProcessImageFileNameW
0x1000f23c
USER32.dll
27
BeginPaint
0x1000f250
CallNextHookEx
0x1000f29c
CreateWindowExA
0x1000f28c
DefWindowProcA
0x1000f2a0
DispatchMessageA
0x1000f26c
EndPaint
0x1000f2b0
FindWindowExA
0x1000f270
GetClientRect
0x1000f2ac
GetForegroundWindow
0x1000f25c
GetMessageA
0x1000f264
GetSystemMetrics
0x1000f290
GetWindowLongA
0x1000f274
GetWindowThreadProcessId
0x1000f2a8
LoadCursorA
0x1000f2b8
LoadImageA
0x1000f2b4
PostQuitMessage
0x1000f2a4
RegisterClassExA
0x1000f294
SendMessageA
0x1000f280
SetWindowLongA
0x1000f278
SetWindowsHookExA
0x1000f260
ShowWindow
0x1000f288
TranslateMessage
0x1000f268
UnhookWindowsHookEx
0x1000f298
UnregisterClassA
0x1000f27c
UpdateWindow
0x1000f284
wsprintfA
0x1000f254
wsprintfW
0x1000f258
WS2_32.dll
17
closesocket
0x1000f2e4
connect
0x1000f2d8
gethostbyname
0x1000f2d4
getpeername
0x1000f2fc
htons
0x1000f2cc
inet_addr
0x1000f2d0
ntohs
0x1000f300
recv
0x1000f2ec
send
0x1000f2f0
socket
0x1000f2c4
WSACloseEvent
0x1000f2e8
WSACreateEvent
0x1000f2c8
WSAEnumNetworkEvents
0x1000f2f8
WSAEventSelect
0x1000f2e0
WSAGetLastError
0x1000f2dc
WSAStartup
0x1000f2c0
WSAWaitForMultipleEvents
0x1000f2f4
No function matches your filter.