1

1

Figure 1 – The wrapper DLL poses as a legitimate mpr.dll library, both by its name and version info