UserMgrProxy.dll
v10.0.19041.6328
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0xc990
DllGetActivationFactory
#2 · 0x9ac0
DllGetClassObject
#3 · 0xc200
No function matches your filter.
Imported DLLs & functions 232
ApiSetQueryApiSetPresence
0x180036958
CoCopyProxy
0x180036990
CoCreateFreeThreadedMarshaler
0x1800369a0
CoCreateInstance
0x1800369b8
CoGetStandardMarshal
0x1800369b0
CoImpersonateClient
0x180036970
CoReleaseMarshalData
0x180036998
CoRevertToSelf
0x180036978
CoSetProxyBlanket
0x180036988
CoSwitchCallContext
0x1800369c0
CoTaskMemAlloc
0x180036968
CoTaskMemFree
0x1800369a8
CoWaitForMultipleHandles
0x180036980
RoGetAgileReference
0x1800369d0
CStdStubBuffer2_Connect
0x180036a18
CStdStubBuffer2_CountRefs
0x180036a50
CStdStubBuffer2_Disconnect
0x180036a30
CStdStubBuffer2_QueryInterface
0x180036a10
NdrProxyForwardingFunction3
0x180036a08
NdrProxyForwardingFunction4
0x180036a00
NdrProxyForwardingFunction5
0x180036ac0
ObjectStublessClient10
0x1800369f8
ObjectStublessClient11
0x180036a58
ObjectStublessClient12
0x180036a68
ObjectStublessClient13
0x180036a20
ObjectStublessClient14
0x180036a60
ObjectStublessClient15
0x180036a78
ObjectStublessClient16
0x180036a90
ObjectStublessClient17
0x180036a88
ObjectStublessClient18
0x180036a48
ObjectStublessClient19
0x180036a80
ObjectStublessClient20
0x180036a70
ObjectStublessClient21
0x180036a98
ObjectStublessClient22
0x180036a38
ObjectStublessClient23
0x180036aa0
ObjectStublessClient24
0x180036ab8
ObjectStublessClient25
0x180036aa8
ObjectStublessClient26
0x180036ab0
ObjectStublessClient3
0x180036a40
ObjectStublessClient6
0x1800369e8
ObjectStublessClient7
0x180036a28
ObjectStublessClient8
0x1800369e0
ObjectStublessClient9
0x1800369f0
DebugBreak
0x180036ad8
IsDebuggerPresent
0x180036ad0
OutputDebugStringW
0x180036ae0
GetLastError
0x180036af0
RaiseException
0x180036af8
SetLastError
0x180036b08
SetUnhandledExceptionFilter
0x180036b00
UnhandledExceptionFilter
0x180036b10
CloseHandle
0x180036b20
GetProcessHeap
0x180036b40
HeapAlloc
0x180036b38
HeapFree
0x180036b30
LocalAlloc
0x180036b60
LocalFree
0x180036b58
LocalReAlloc
0x180036b50
FreeLibrary
0x180036b80
GetModuleFileNameA
0x180036b90
GetModuleHandleExW
0x180036b78
GetModuleHandleW
0x180036b70
GetProcAddress
0x180036b98
LoadLibraryExA
0x180036ba0
LoadLibraryExW
0x180036b88
FormatMessageW
0x180036bb0
ExpandEnvironmentStringsW
0x180036bd8
GetCurrentProcess
0x180036bf8
GetCurrentProcessId
0x180036bf0
GetCurrentThread
0x180036c00
GetCurrentThreadId
0x180036be8
OpenProcessToken
0x180036c10
OpenThreadToken
0x180036c08
TerminateProcess
0x180036c18
OpenProcess
0x180036c28
QueryPerformanceCounter
0x180036c38
CompareStringOrdinal
0x180036c60
AcquireSRWLockExclusive
0x180036cd8
AcquireSRWLockShared
0x180036ca0
CreateEventExW
0x180036cc0
CreateMutexExW
0x180036cf8
CreateSemaphoreExW
0x180036c80
DeleteCriticalSection
0x180036c78
EnterCriticalSection
0x180036c90
InitializeCriticalSectionEx
0x180036cf0
InitializeSRWLock
0x180036cd0
LeaveCriticalSection
0x180036ca8
OpenSemaphoreW
0x180036cb0
ReleaseMutex
0x180036cb8
ReleaseSemaphore
0x180036ce8
ReleaseSRWLockExclusive
0x180036c88
ReleaseSRWLockShared
0x180036ce0
SetEvent
0x180036c98
WaitForSingleObject
0x180036cc8
WaitForSingleObjectEx
0x180036c70
GetSystemInfo
0x180036d28
GetSystemTimeAsFileTime
0x180036d30
GetTickCount
0x180036d20
CloseThreadpoolTimer
0x180036d40
CreateThreadpoolTimer
0x180036d48
SetThreadpoolTimer
0x180036d58
WaitForThreadpoolTimerCallbacks
0x180036d50
QueueUserWorkItem
0x180036d68
GetRestrictedErrorInfo
0x180036d98
RoOriginateError
0x180036da0
RoOriginateErrorW
0x180036da8
RoTransformError
0x180036db0
SetRestrictedErrorInfo
0x180036d90
IsErrorPropagationEnabled
0x180036dc8
RoGetMatchingRestrictedErrorInfo
0x180036dd0
RoReportFailedDelegate
0x180036dc0
RoActivateInstance
0x180036de8
RoGetActivationFactory
0x180036de0
RoInitialize
0x180036df0
RoUninitialize
0x180036df8
HSTRING_UserFree
0x180036e08
HSTRING_UserFree64
0x180036e10
HSTRING_UserMarshal
0x180036e38
HSTRING_UserMarshal64
0x180036e28
HSTRING_UserSize
0x180036e48
HSTRING_UserSize64
0x180036e40
HSTRING_UserUnmarshal
0x180036e30
HSTRING_UserUnmarshal64
0x180036e50
WindowsCompareStringOrdinal
0x180036e78
WindowsCreateString
0x180036e70
WindowsCreateStringReference
0x180036e58
WindowsDeleteString
0x180036e20
WindowsDuplicateString
0x180036e60
WindowsGetStringRawBuffer
0x180036e18
WindowsIsStringEmpty
0x180036e68
WindowsStringHasEmbeddedNull
0x180036e80
CreateWellKnownSid
0x180036ea8
EqualSid
0x180036ea0
GetAce
0x180036e90
GetTokenInformation
0x180036e98
CheckTokenMembershipEx
0x180036eb8
ConvertSidToStringSidW
0x180036ec8
0x180036ed8
msvcrt.dll
35
__C_specific_handler
0x180036fb8
__CxxFrameHandler3
0x180036fa0
__dllonexit
0x180036f90
_amsg_exit
0x180036ef8
_callnewh
0x180036ef0
_CxxThrowException
0x180036f08
_get_errno
0x180036f80
_initterm
0x180036fc0
_lock
0x180036fa8
_onexit
0x180036f58
_purecall
0x180036f10
_set_errno
0x180036f78
_unlock
0x180036f98
_vscwprintf
0x180036f88
_vsnprintf_s
0x180036f40
_vsnwprintf
0x180036fe8
_XcptFilter
0x180036f60
??0exception@@QEAA@AEBQEBD@Z
0x180036ee8
??0exception@@QEAA@AEBQEBDH@Z
0x180036f20
??0exception@@QEAA@AEBV0@@Z
0x180036f50
??0exception@@QEAA@XZ
0x180036f28
??1exception@@UEAA@XZ
0x180036f38
??1type_info@@UEAA@XZ
0x180036f48
??3@YAXPEAX@Z
0x180036fb0
?terminate@@YAXXZ
0x180036ff0
?what@exception@@UEBAPEBDXZ
0x180036f68
free
0x180036fd0
malloc
0x180036fc8
memcmp
0x180036f30
memcpy
0x180036f00
memcpy_s
0x180036fe0
memmove
0x180036fd8
memmove_s
0x180036f18
memset
0x180036ff8
wcschr
0x180036f70
ntdll.dll
20
NtQuerySecurityObject
0x180037028
NtSetSecurityObject
0x180037018
RtlAddAccessAllowedAce
0x180037080
RtlAddAce
0x180037048
RtlAllocateHeap
0x180037060
RtlCapabilityCheck
0x1800370a0
RtlCaptureContext
0x180037098
RtlCreateAcl
0x180037058
RtlCreateSecurityDescriptor
0x180037020
RtlFreeHeap
0x180037030
RtlGetAce
0x180037050
RtlGetDaclSecurityDescriptor
0x180037078
RtlInitUnicodeString
0x180037040
RtlIsMultiSessionSku
0x180037008
RtlLengthSid
0x180037068
RtlLookupFunctionEntry
0x180037090
RtlNtStatusToDosError
0x180037010
RtlQueryInformationAcl
0x180037070
RtlSetDaclSecurityDescriptor
0x180037038
RtlVirtualUnwind
0x180037088
SysAllocString
0x180036860
SysFreeString
0x180036868
VariantClear
0x180036850
VariantInit
0x180036858
RPCRT4.dll
27
CStdStubBuffer_AddRef
0x1800368f0
CStdStubBuffer_Connect
0x1800368a8
CStdStubBuffer_CountRefs
0x1800368e0
CStdStubBuffer_DebugServerQueryInterface
0x180036900
CStdStubBuffer_DebugServerRelease
0x1800368d0
CStdStubBuffer_Disconnect
0x180036940
CStdStubBuffer_Invoke
0x180036918
CStdStubBuffer_IsIIDSupported
0x1800368b0
CStdStubBuffer_QueryInterface
0x1800368d8
I_RpcExceptionFilter
0x180036878
IUnknown_AddRef_Proxy
0x180036908
IUnknown_QueryInterface_Proxy
0x1800368c0
IUnknown_Release_Proxy
0x1800368e8
NdrClientCall3
0x1800368c8
NdrCStdStubBuffer_Release
0x180036938
NdrCStdStubBuffer2_Release
0x180036920
NdrDllCanUnloadNow
0x180036930
NdrDllGetClassObject
0x180036928
NdrOleAllocate
0x180036948
NdrOleFree
0x1800368f8
NdrStubCall3
0x1800368b8
NdrStubForwardingFunction
0x180036910
RpcBindingFree
0x180036880
RpcBindingFromStringBindingW
0x180036898
RpcBindingSetAuthInfoExW
0x180036888
RpcStringBindingComposeW
0x1800368a0
RpcStringFreeW
0x180036890
No function matches your filter.