mprapi.dll

  • File Path: C:\Windows\SysWOW64\mprapi.dll
  • Description: Windows NT MP Router Administration DLL

Hashes

Type Hash
MD5 38E5AFB41A6FA7C51C8F4DE3C28CA576
SHA1 F8AC282F94A2CD1845A2DFF073F0BE33DA2D4CB5
SHA256 70F69A020AEC9915D54758B836D05A69FBC4C4D461594A02783B58FA5AFEEF24
SHA384 B5CDC8C8998F74E7541C4CCE789A0D24D29A2830857DBD81DDA0D43EC1845D1FB36BB865EBA54603C0221221698815DA
SHA512 8FFC123FE379C2277DF50F42B643BC618EE74B3209B28F90FC3D694F2EA308D73B7585C478A75F548EC0B63E60B259EA2C695C2B2C119C47E774335AEFD53290
SSDEEP 12288:E7qTV+TkZM04G+O6xmhS7+hwEbQX8daH5kW:E7GYTSMZG+ONcCGCsBH5
IMP FA15585A6C57F77FFE221A8D6B651926
PESHA1 9A31AD5A2B1AFAECF3CF4FC58429512888980372
PE256 05242E92590B06581A6FCD34CE8D81DEC97C91514EA21ED6ADF68B31F9C9A86E

DLL Exports:

Function Name Ordinal Type
MprConfigGetRoutingDomainId 107 Exported Function
MprConfigGetGuidName 106 Exported Function
MprConfigInterfaceCreate 108 Exported Function
MprConfigInterfaceDelete 110 Exported Function
MprConfigInterfaceCreateEx 109 Exported Function
MprConfigFilterGetInfo 102 Exported Function
MprConfigDeleteRoutingDomain 101 Exported Function
MprConfigFilterSetInfo 103 Exported Function
MprConfigGetFriendlyName 105 Exported Function
MprConfigFreeRoutingDomainConfigEx 104 Exported Function
MprConfigInterfaceSetCustomInfoEx 117 Exported Function
MprConfigInterfaceGetInfoEx 116 Exported Function
MprConfigInterfaceSetInfo 118 Exported Function
MprConfigInterfaceTransportAdd 120 Exported Function
MprConfigInterfaceSetInfoEx 119 Exported Function
MprConfigInterfaceEnumEx 112 Exported Function
MprConfigInterfaceEnum 111 Exported Function
MprConfigInterfaceGetCustomInfoEx 113 Exported Function
MprConfigInterfaceGetInfo 115 Exported Function
MprConfigInterfaceGetHandle 114 Exported Function
MprAdminUpdateConnection 87 Exported Function
MprAdminTransportSetInfo 86 Exported Function
MprAdminUpgradeUsers 88 Exported Function
MprAdminUserGetInfo 90 Exported Function
MprAdminUserClose 89 Exported Function
MprAdminServerSetInfo 82 Exported Function
MprAdminServerSetCredentials 81 Exported Function
MprAdminServerSetInfoEx 83 Exported Function
MprAdminTransportGetInfo 85 Exported Function
MprAdminTransportCreate 84 Exported Function
MprAdminUserWrite 97 Exported Function
MprAdminUserSetInfo 96 Exported Function
MprAdminUserWriteProfFlags 98 Exported Function
MprConfigBufferFree 100 Exported Function
MprConfigAddRoutingDomain 99 Exported Function
MprAdminUserRead 92 Exported Function
MprAdminUserOpen 91 Exported Function
MprAdminUserReadProfFlags 93 Exported Function
MprAdminUserServerDisconnect 95 Exported Function
MprAdminUserServerConnect 94 Exported Function
MprDomainRegisterRasServer 147 Exported Function
MprDomainQueryRasServer 146 Exported Function
MprFreeInterfaceInfoEx 148 Exported Function
MprInfoBlockAdd 150 Exported Function
MprGetUsrParams 149 Exported Function
MprConfigTransportEnum 142 Exported Function
MprConfigTransportDelete 141 Exported Function
MprConfigTransportGetHandle 143 Exported Function
MprConfigTransportSetInfo 145 Exported Function
MprConfigTransportGetInfo 144 Exported Function
MprInfoDuplicate 157 Exported Function
MprInfoDelete 156 Exported Function
MprInfoRemoveAll 158 Exported Function
RasPrivilegeAndCallBackNumber 160 Exported Function
MprPortSetUsage 159 Exported Function
MprInfoBlockQuerySize 152 Exported Function
MprInfoBlockFind 151 Exported Function
MprInfoBlockRemove 153 Exported Function
MprInfoCreate 155 Exported Function
MprInfoBlockSet 154 Exported Function
MprConfigRoutingDomainEnumEx 127 Exported Function
MprConfigIsMultiTenancyEnabled 126 Exported Function
MprConfigRoutingDomainGetConfigEx 128 Exported Function
MprConfigServerBackup 130 Exported Function
MprConfigRoutingDomainSetConfigEx 129 Exported Function
MprConfigInterfaceTransportGetHandle 122 Exported Function
MprConfigInterfaceTransportEnum 121 Exported Function
MprConfigInterfaceTransportGetInfo 123 Exported Function
MprConfigInterfaceTransportSetInfo 125 Exported Function
MprConfigInterfaceTransportRemove 124 Exported Function
MprConfigServerRestore 137 Exported Function
MprConfigServerRefresh 136 Exported Function
MprConfigServerSetInfo 138 Exported Function
MprConfigTransportCreate 140 Exported Function
MprConfigServerSetInfoEx 139 Exported Function
MprConfigServerDisconnect 132 Exported Function
MprConfigServerConnect 131 Exported Function
MprConfigServerGetInfo 133 Exported Function
MprConfigServerInstall 135 Exported Function
MprConfigServerGetInfoEx 134 Exported Function
MprAdminInterfaceDisconnect 27 Exported Function
MprAdminInterfaceDeviceSetInfo 26 Exported Function
MprAdminInterfaceEnum 28 Exported Function
MprAdminInterfaceGetCredentials 30 Exported Function
MprAdminInterfaceEnumEx 29 Exported Function
MprAdminInterfaceCreate 22 Exported Function
MprAdminInterfaceConnect 21 Exported Function
MprAdminInterfaceCreateEx 23 Exported Function
MprAdminInterfaceDeviceGetInfo 25 Exported Function
MprAdminInterfaceDelete 24 Exported Function
MprAdminInterfaceQueryUpdateResult 37 Exported Function
MprAdminInterfaceGetStatisticsEx 36 Exported Function
MprAdminInterfaceSetCredentials 38 Exported Function
MprAdminInterfaceSetCustomInfoEx 40 Exported Function
MprAdminInterfaceSetCredentialsEx 39 Exported Function
MprAdminInterfaceGetCustomInfoEx 32 Exported Function
MprAdminInterfaceGetCredentialsEx 31 Exported Function
MprAdminInterfaceGetHandle 33 Exported Function
MprAdminInterfaceGetInfoEx 35 Exported Function
MprAdminInterfaceGetInfo 34 Exported Function
MprAdminConnectionGetInfo 7 Exported Function
MprAdminConnectionEnumEx 6 Exported Function
MprAdminConnectionGetInfoEx 8 Exported Function
MprAdminDeleteRoutingDomain 10 Exported Function
MprAdminConnectionRemoveQuarantine 9 Exported Function
MprAdminAddRoutingDomain 2 Exported Function
CompressPhoneNumber 1 Exported Function
MprAdminBufferFree 3 Exported Function
MprAdminConnectionEnum 5 Exported Function
MprAdminConnectionClearStats 4 Exported Function
MprAdminGetProtocolStatistics 17 Exported Function
MprAdminGetPDCServer 16 Exported Function
MprAdminGetRoutingDomainId 18 Exported Function
MprAdminInterfaceClearStatisticsEx 20 Exported Function
MprAdminInterfaceAddIkev2Policy 19 Exported Function
MprAdminDeviceEnum 12 Exported Function
MprAdminDeregisterConnectionNotification 11 Exported Function
MprAdminEstablishDomainRasServer 13 Exported Function
MprAdminGetErrorString 15 Exported Function
MprAdminFreeRoutingDomainConfigEx 14 Exported Function
MprAdminPortGetInfo 67 Exported Function
MprAdminPortEnum 66 Exported Function
MprAdminPortReset 68 Exported Function
MprAdminRegisterConnectionNotification 70 Exported Function
MprAdminProtocolAction 69 Exported Function
MprAdminMIBServerConnect 61 Exported Function
MprAdminMIBEntrySet 60 Exported Function
MprAdminMIBServerDisconnect 62 Exported Function
MprAdminPortDisconnect 65 Exported Function
MprAdminPortClearStats 64 Exported Function
MprAdminServerDisconnect 77 Exported Function
MprAdminServerConnect 76 Exported Function
MprAdminServerGetCredentials 78 Exported Function
MprAdminServerGetInfoEx 80 Exported Function
MprAdminServerGetInfo 79 Exported Function
MprAdminRoutingDomainGetConfigEx 72 Exported Function
MprAdminRoutingDomainConnectionEnumEx 71 Exported Function
MprAdminRoutingDomainsEnumEx 74 Exported Function
MprAdminSendUserMessage 75 Exported Function
MprAdminRoutingDomainSetConfigEx 73 Exported Function
MprAdminInterfaceUpdatePhonebookInfo 47 Exported Function
MprAdminInterfaceTransportSetInfo 46 Exported Function
MprAdminInterfaceUpdateRoutes 48 Exported Function
MprAdminIsModernStackEnabled 50 Exported Function
MprAdminIsDomainRasServer 49 Exported Function
MprAdminInterfaceSetInfoEx 42 Exported Function
MprAdminInterfaceSetInfo 41 Exported Function
MprAdminInterfaceTransportAdd 43 Exported Function
MprAdminInterfaceTransportRemove 45 Exported Function
MprAdminInterfaceTransportGetInfo 44 Exported Function
MprAdminMIBEntryDelete 56 Exported Function
MprAdminMIBEntryCreate 55 Exported Function
MprAdminMIBEntryGet 57 Exported Function
MprAdminMIBEntryGetNext 59 Exported Function
MprAdminMIBEntryGetFirst 58 Exported Function
MprAdminIsServiceInitialized 52 Exported Function
MprAdminIsMultiTenancyEnabled 51 Exported Function
MprAdminIsServiceRunning 53 Exported Function
MprAdminMIBBufferFree 54 Exported Function
MprAdminMarkServerOffline 63 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mprapi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/70f69a020aec9915d54758b836d05a69fbc4c4d461594a02783b58fa5afeef24/detection/

Possible Misuse

The following table contains possible examples of mprapi.dll being misused. While mprapi.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base crime_upatre_oct15.yar $s5 = “mprapi.dll” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.