usermgrcli.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 48
CamCleanupDisardedCandidateAccounts
#1 · 0x4710
CamConnectCandidateUser
#2 · 0x98e0
CamFreeAuthBuffer
#3 · 0x9920
CamFreeBuffer
#4 · 0x9960
CamGetCandidateAccountCredz
#5 · 0x9990
CamGetCandidateUserSessionIds
#6 · 0x99a0
CamGetNonCandidateUserSessionIds
#7 · 0x99b0
CamIsCandidateUser
#8 · 0x4a70
CamIsEphemeralCandidateUser
#9 · 0x99c0
CamRefreshCandidateUser
#10 · 0x99d0
IsInteractiveUserSession
#11 · 0x9d20
QueryActiveSession
#12 · 0x9d70
QueryUserToken
#13 · 0x9dd0
RegisterUsertokenForNoWinlogon
#14 · 0x9e90
UMgrChangeSessionActiveShellUser
#15 · 0x9a90
UMgrChangeSessionUserToken
#16 · 0x9ad0
UMgrClearDefaultSignInAccount
#17 · 0x9ae0
UMgrConnectLocalUser
#18 · 0x9b00
UMgrDisconnectLocalUser
#19 · 0x9b70
UMgrEnumerateSessionUsers
#20 · 0x3ce0
UMgrFreeSessionUsers
#21 · 0x37f0
UMgrFreeUserCredentials
#22 · 0x9be0
UMgrGetCachedCredentials
#23 · 0x9c30
UMgrGetConstrainedUserToken
#24 · 0x3b30
UMgrGetDefaultSignInAccount
#25 · 0x9c40
UMgrGetImpersonationTokenForContext
#26 · 0x3c10
UMgrGetSessionActiveShellUserToken
#27 · 0x9c60
UMgrInformFlags
#28 · 0x47e0
UMgrInformUserLogoff
#29 · 0x4700
UMgrInformUserLogon
#30 · 0x48d0
UMgrIsAllowedToActivateAsUser
#31 · 0x3f20
UMgrLaunchShell
#32 · 0x48b0
UMgrLaunchShellInfrastructureHost
#33 · 0x48a0
UMgrLogonUser
#34 · 0x3830
UMgrOpenProcessHandleForAccess
#35 · 0x4860
UMgrOpenProcessTokenForQuery
#36 · 0x3750
UMgrQueryDefaultAccountToken
#37 · 0x4af0
UMgrQuerySessionUserToken
#38 · 0x9c70
UMgrQuerySessionVirtualAccountToken
#39 · 0x9c80
UMgrQueryUserContext
#40 · 0x43c0
UMgrQueryUserContextFromName
#41 · 0x9c90
UMgrQueryUserContextFromSid
#42 · 0x9ca0
UMgrQueryUserToken
#43 · 0x4170
UMgrQueryUserTokenFromName
#44 · 0x9cb0
UMgrQueryUserTokenFromSid
#45 · 0x9cc0
UMgrSetCachedCredentials
#46 · 0x9cd0
UMgrSetShellInformation
#47 · 0x48c0
UMgrpGetRegistryLocation
#48 · 0x9d10
No function matches your filter.
Imported DLLs & functions 77
ApiSetQueryApiSetPresence
0x1000c020
DebugBreak
0x1000c028
IsDebuggerPresent
0x1000c02c
OutputDebugStringW
0x1000c030
DelayLoadFailureHook
0x1000c038
ResolveDelayLoadedAPI
0x1000c040
GetLastError
0x1000c050
SetLastError
0x1000c054
SetUnhandledExceptionFilter
0x1000c048
UnhandledExceptionFilter
0x1000c04c
CloseHandle
0x1000c05c
GetProcessHeap
0x1000c06c
HeapAlloc
0x1000c064
HeapFree
0x1000c068
GetModuleFileNameA
0x1000c08c
GetModuleHandleExW
0x1000c084
GetModuleHandleW
0x1000c088
GetProcAddress
0x1000c080
FormatMessageW
0x1000c094
GetCurrentProcess
0x1000c0ac
GetCurrentProcessId
0x1000c0a8
GetCurrentThreadId
0x1000c0a0
OpenProcessToken
0x1000c09c
TerminateProcess
0x1000c0a4
OpenProcess
0x1000c0b4
QueryPerformanceCounter
0x1000c0bc
CreateMutexExW
0x1000c0d4
CreateSemaphoreExW
0x1000c0d0
OpenSemaphoreW
0x1000c0c8
ReleaseMutex
0x1000c0c4
ReleaseSemaphore
0x1000c0dc
WaitForSingleObject
0x1000c0cc
WaitForSingleObjectEx
0x1000c0d8
Sleep
0x1000c0e4
EventWriteTransfer
0x1000c0f8
CreateWellKnownSid
0x1000c100
msvcrt.dll
28
__CxxFrameHandler3
0x1000c144
__dllonexit
0x1000c134
_amsg_exit
0x1000c170
_callnewh
0x1000c154
_CxxThrowException
0x1000c108
_except_handler4_common
0x1000c150
_initterm
0x1000c160
_lock
0x1000c13c
_onexit
0x1000c12c
_purecall
0x1000c158
_unlock
0x1000c138
_vsnprintf_s
0x1000c148
_vsnwprintf
0x1000c16c
_XcptFilter
0x1000c124
??0exception@@QAE@ABQBD@Z
0x1000c120
??0exception@@QAE@ABQBDH@Z
0x1000c118
??0exception@@QAE@ABV0@@Z
0x1000c14c
??0exception@@QAE@XZ
0x1000c130
??1exception@@UAE@XZ
0x1000c140
??1type_info@@UAE@XZ
0x1000c128
??3@YAXPAX@Z
0x1000c15c
?what@exception@@UBEPBDXZ
0x1000c114
free
0x1000c164
malloc
0x1000c110
memcpy
0x1000c10c
memcpy_s
0x1000c168
memmove
0x1000c11c
memset
0x1000c174
I_RpcExceptionFilter
0x1000c008
NdrClientCall4
0x1000c014
RpcBindingFree
0x1000c00c
RpcBindingFromStringBindingW
0x1000c000
RpcBindingSetAuthInfoExW
0x1000c010
RpcStringBindingComposeW
0x1000c004
RpcStringFreeW
0x1000c018
No function matches your filter.