mprapi.dll

  • File Path: C:\Windows\system32\mprapi.dll
  • Description: Windows NT MP Router Administration DLL

Hashes

Type Hash
MD5 19EFD5060D8BBCC1D3E234E9EB41FD9E
SHA1 9076FE8B56D3D6C2A1006792CF75C63C54F4F7CD
SHA256 DCB074E79C77E2C16FBADF8F552D113AD98AF46F766F2D3E1E7123B8C009CD3F
SHA384 0155EE42B2A6E7907A14C61FC88F55D4F3F373DC815F48F2CB4ABE213FCE03D9CB5446FD8099158D80F3F0DE064DBC1D
SHA512 B19A8E130DB21209996C4A28234803A103DBD6316A31332274AE06F4BA8138837FF03329654B137690E10980B1A0D8D8F767D6ECD7F96A5B5A5A4D74D077110A
SSDEEP 6144:WlqUAhkA8kSelvHpLZrED/RclwfZsHB7MiE5NI/ESDL7BxyLxEzL5VcrSqsxS6:QeV9Hp1rEDeaOJMiH/5L7BxAOZE
IMP E5B2311E23A35ED22C8321B99EA4CD6C
PESHA1 E43746B1C1A159FBF93690B7D69656FD5F666E71
PE256 3F3216FFC06E61904D7AFDB5C8F564A221E86C012A835E8056D008FDD7B2DB9B

DLL Exports:

Function Name Ordinal Type
MprConfigGetRoutingDomainId 107 Exported Function
MprConfigGetGuidName 106 Exported Function
MprConfigInterfaceCreate 108 Exported Function
MprConfigInterfaceDelete 110 Exported Function
MprConfigInterfaceCreateEx 109 Exported Function
MprConfigFilterGetInfo 102 Exported Function
MprConfigDeleteRoutingDomain 101 Exported Function
MprConfigFilterSetInfo 103 Exported Function
MprConfigGetFriendlyName 105 Exported Function
MprConfigFreeRoutingDomainConfigEx 104 Exported Function
MprConfigInterfaceSetCustomInfoEx 117 Exported Function
MprConfigInterfaceGetInfoEx 116 Exported Function
MprConfigInterfaceSetInfo 118 Exported Function
MprConfigInterfaceTransportAdd 120 Exported Function
MprConfigInterfaceSetInfoEx 119 Exported Function
MprConfigInterfaceEnumEx 112 Exported Function
MprConfigInterfaceEnum 111 Exported Function
MprConfigInterfaceGetCustomInfoEx 113 Exported Function
MprConfigInterfaceGetInfo 115 Exported Function
MprConfigInterfaceGetHandle 114 Exported Function
MprAdminUpdateConnection 87 Exported Function
MprAdminTransportSetInfo 86 Exported Function
MprAdminUpgradeUsers 88 Exported Function
MprAdminUserGetInfo 90 Exported Function
MprAdminUserClose 89 Exported Function
MprAdminServerSetInfo 82 Exported Function
MprAdminServerSetCredentials 81 Exported Function
MprAdminServerSetInfoEx 83 Exported Function
MprAdminTransportGetInfo 85 Exported Function
MprAdminTransportCreate 84 Exported Function
MprAdminUserWrite 97 Exported Function
MprAdminUserSetInfo 96 Exported Function
MprAdminUserWriteProfFlags 98 Exported Function
MprConfigBufferFree 100 Exported Function
MprConfigAddRoutingDomain 99 Exported Function
MprAdminUserRead 92 Exported Function
MprAdminUserOpen 91 Exported Function
MprAdminUserReadProfFlags 93 Exported Function
MprAdminUserServerDisconnect 95 Exported Function
MprAdminUserServerConnect 94 Exported Function
MprDomainRegisterRasServer 147 Exported Function
MprDomainQueryRasServer 146 Exported Function
MprFreeInterfaceInfoEx 148 Exported Function
MprInfoBlockAdd 150 Exported Function
MprGetUsrParams 149 Exported Function
MprConfigTransportEnum 142 Exported Function
MprConfigTransportDelete 141 Exported Function
MprConfigTransportGetHandle 143 Exported Function
MprConfigTransportSetInfo 145 Exported Function
MprConfigTransportGetInfo 144 Exported Function
MprInfoDuplicate 157 Exported Function
MprInfoDelete 156 Exported Function
MprInfoRemoveAll 158 Exported Function
RasPrivilegeAndCallBackNumber 160 Exported Function
MprPortSetUsage 159 Exported Function
MprInfoBlockQuerySize 152 Exported Function
MprInfoBlockFind 151 Exported Function
MprInfoBlockRemove 153 Exported Function
MprInfoCreate 155 Exported Function
MprInfoBlockSet 154 Exported Function
MprConfigRoutingDomainEnumEx 127 Exported Function
MprConfigIsMultiTenancyEnabled 126 Exported Function
MprConfigRoutingDomainGetConfigEx 128 Exported Function
MprConfigServerBackup 130 Exported Function
MprConfigRoutingDomainSetConfigEx 129 Exported Function
MprConfigInterfaceTransportGetHandle 122 Exported Function
MprConfigInterfaceTransportEnum 121 Exported Function
MprConfigInterfaceTransportGetInfo 123 Exported Function
MprConfigInterfaceTransportSetInfo 125 Exported Function
MprConfigInterfaceTransportRemove 124 Exported Function
MprConfigServerRestore 137 Exported Function
MprConfigServerRefresh 136 Exported Function
MprConfigServerSetInfo 138 Exported Function
MprConfigTransportCreate 140 Exported Function
MprConfigServerSetInfoEx 139 Exported Function
MprConfigServerDisconnect 132 Exported Function
MprConfigServerConnect 131 Exported Function
MprConfigServerGetInfo 133 Exported Function
MprConfigServerInstall 135 Exported Function
MprConfigServerGetInfoEx 134 Exported Function
MprAdminInterfaceDisconnect 27 Exported Function
MprAdminInterfaceDeviceSetInfo 26 Exported Function
MprAdminInterfaceEnum 28 Exported Function
MprAdminInterfaceGetCredentials 30 Exported Function
MprAdminInterfaceEnumEx 29 Exported Function
MprAdminInterfaceCreate 22 Exported Function
MprAdminInterfaceConnect 21 Exported Function
MprAdminInterfaceCreateEx 23 Exported Function
MprAdminInterfaceDeviceGetInfo 25 Exported Function
MprAdminInterfaceDelete 24 Exported Function
MprAdminInterfaceQueryUpdateResult 37 Exported Function
MprAdminInterfaceGetStatisticsEx 36 Exported Function
MprAdminInterfaceSetCredentials 38 Exported Function
MprAdminInterfaceSetCustomInfoEx 40 Exported Function
MprAdminInterfaceSetCredentialsEx 39 Exported Function
MprAdminInterfaceGetCustomInfoEx 32 Exported Function
MprAdminInterfaceGetCredentialsEx 31 Exported Function
MprAdminInterfaceGetHandle 33 Exported Function
MprAdminInterfaceGetInfoEx 35 Exported Function
MprAdminInterfaceGetInfo 34 Exported Function
MprAdminConnectionGetInfo 7 Exported Function
MprAdminConnectionEnumEx 6 Exported Function
MprAdminConnectionGetInfoEx 8 Exported Function
MprAdminDeleteRoutingDomain 10 Exported Function
MprAdminConnectionRemoveQuarantine 9 Exported Function
MprAdminAddRoutingDomain 2 Exported Function
CompressPhoneNumber 1 Exported Function
MprAdminBufferFree 3 Exported Function
MprAdminConnectionEnum 5 Exported Function
MprAdminConnectionClearStats 4 Exported Function
MprAdminGetProtocolStatistics 17 Exported Function
MprAdminGetPDCServer 16 Exported Function
MprAdminGetRoutingDomainId 18 Exported Function
MprAdminInterfaceClearStatisticsEx 20 Exported Function
MprAdminInterfaceAddIkev2Policy 19 Exported Function
MprAdminDeviceEnum 12 Exported Function
MprAdminDeregisterConnectionNotification 11 Exported Function
MprAdminEstablishDomainRasServer 13 Exported Function
MprAdminGetErrorString 15 Exported Function
MprAdminFreeRoutingDomainConfigEx 14 Exported Function
MprAdminPortGetInfo 67 Exported Function
MprAdminPortEnum 66 Exported Function
MprAdminPortReset 68 Exported Function
MprAdminRegisterConnectionNotification 70 Exported Function
MprAdminProtocolAction 69 Exported Function
MprAdminMIBServerConnect 61 Exported Function
MprAdminMIBEntrySet 60 Exported Function
MprAdminMIBServerDisconnect 62 Exported Function
MprAdminPortDisconnect 65 Exported Function
MprAdminPortClearStats 64 Exported Function
MprAdminServerDisconnect 77 Exported Function
MprAdminServerConnect 76 Exported Function
MprAdminServerGetCredentials 78 Exported Function
MprAdminServerGetInfoEx 80 Exported Function
MprAdminServerGetInfo 79 Exported Function
MprAdminRoutingDomainGetConfigEx 72 Exported Function
MprAdminRoutingDomainConnectionEnumEx 71 Exported Function
MprAdminRoutingDomainsEnumEx 74 Exported Function
MprAdminSendUserMessage 75 Exported Function
MprAdminRoutingDomainSetConfigEx 73 Exported Function
MprAdminInterfaceUpdatePhonebookInfo 47 Exported Function
MprAdminInterfaceTransportSetInfo 46 Exported Function
MprAdminInterfaceUpdateRoutes 48 Exported Function
MprAdminIsModernStackEnabled 50 Exported Function
MprAdminIsDomainRasServer 49 Exported Function
MprAdminInterfaceSetInfoEx 42 Exported Function
MprAdminInterfaceSetInfo 41 Exported Function
MprAdminInterfaceTransportAdd 43 Exported Function
MprAdminInterfaceTransportRemove 45 Exported Function
MprAdminInterfaceTransportGetInfo 44 Exported Function
MprAdminMIBEntryDelete 56 Exported Function
MprAdminMIBEntryCreate 55 Exported Function
MprAdminMIBEntryGet 57 Exported Function
MprAdminMIBEntryGetNext 59 Exported Function
MprAdminMIBEntryGetFirst 58 Exported Function
MprAdminIsServiceInitialized 52 Exported Function
MprAdminIsMultiTenancyEnabled 51 Exported Function
MprAdminIsServiceRunning 53 Exported Function
MprAdminMIBBufferFree 54 Exported Function
MprAdminMarkServerOffline 63 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mprapi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/dcb074e79c77e2c16fbadf8f552d113ad98af46f766f2d3e1e7123b8c009cd3f/detection/

Possible Misuse

The following table contains possible examples of mprapi.dll being misused. While mprapi.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base crime_upatre_oct15.yar $s5 = “mprapi.dll” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.