UserMgrProxy.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x14730
DllGetActivationFactory
#2 · 0x1ef70
DllGetClassObject
#3 · 0x122f0
No function matches your filter.
Imported DLLs & functions 225
ApiSetQueryApiSetPresence
0x1002d084
CoCopyProxy
0x1002d08c
CoCreateFreeThreadedMarshaler
0x1002d0ac
CoCreateInstance
0x1002d0b8
CoGetStandardMarshal
0x1002d0a8
CoImpersonateClient
0x1002d0b0
CoReleaseMarshalData
0x1002d098
CoRevertToSelf
0x1002d0a4
CoSetProxyBlanket
0x1002d090
CoSwitchCallContext
0x1002d09c
CoTaskMemAlloc
0x1002d0b4
CoTaskMemFree
0x1002d0a0
CoWaitForMultipleHandles
0x1002d094
RoGetAgileReference
0x1002d0c0
CStdStubBuffer2_Connect
0x1002d0c8
CStdStubBuffer2_CountRefs
0x1002d0d8
CStdStubBuffer2_Disconnect
0x1002d104
CStdStubBuffer2_QueryInterface
0x1002d118
NdrProxyForwardingFunction3
0x1002d110
NdrProxyForwardingFunction4
0x1002d128
NdrProxyForwardingFunction5
0x1002d12c
ObjectStublessClient10
0x1002d11c
ObjectStublessClient11
0x1002d0d4
ObjectStublessClient12
0x1002d0e8
ObjectStublessClient13
0x1002d10c
ObjectStublessClient14
0x1002d124
ObjectStublessClient15
0x1002d0e0
ObjectStublessClient16
0x1002d0ec
ObjectStublessClient17
0x1002d114
ObjectStublessClient18
0x1002d0d0
ObjectStublessClient19
0x1002d0e4
ObjectStublessClient20
0x1002d134
ObjectStublessClient21
0x1002d0f0
ObjectStublessClient22
0x1002d0cc
ObjectStublessClient23
0x1002d0f4
ObjectStublessClient24
0x1002d0fc
ObjectStublessClient25
0x1002d100
ObjectStublessClient26
0x1002d0f8
ObjectStublessClient3
0x1002d0dc
ObjectStublessClient6
0x1002d130
ObjectStublessClient7
0x1002d108
ObjectStublessClient8
0x1002d138
ObjectStublessClient9
0x1002d120
DebugBreak
0x1002d140
IsDebuggerPresent
0x1002d148
OutputDebugStringW
0x1002d144
GetLastError
0x1002d150
RaiseException
0x1002d158
SetLastError
0x1002d15c
SetUnhandledExceptionFilter
0x1002d160
UnhandledExceptionFilter
0x1002d154
CloseHandle
0x1002d168
GetProcessHeap
0x1002d174
HeapAlloc
0x1002d170
HeapFree
0x1002d178
LocalAlloc
0x1002d188
LocalFree
0x1002d180
LocalReAlloc
0x1002d184
FreeLibrary
0x1002d190
GetModuleFileNameA
0x1002d194
GetModuleHandleExW
0x1002d1a8
GetModuleHandleW
0x1002d1a4
GetProcAddress
0x1002d1a0
LoadLibraryExA
0x1002d19c
LoadLibraryExW
0x1002d198
FormatMessageW
0x1002d1b0
ExpandEnvironmentStringsW
0x1002d1c4
GetCurrentProcess
0x1002d1e4
GetCurrentProcessId
0x1002d1d4
GetCurrentThread
0x1002d1d0
GetCurrentThreadId
0x1002d1cc
OpenProcessToken
0x1002d1e0
OpenThreadToken
0x1002d1dc
TerminateProcess
0x1002d1d8
OpenProcess
0x1002d1ec
QueryPerformanceCounter
0x1002d1f4
CompareStringOrdinal
0x1002d208
AcquireSRWLockExclusive
0x1002d244
AcquireSRWLockShared
0x1002d238
CreateEventExW
0x1002d210
CreateMutexExW
0x1002d22c
CreateSemaphoreExW
0x1002d21c
DeleteCriticalSection
0x1002d248
EnterCriticalSection
0x1002d250
InitializeCriticalSectionEx
0x1002d24c
InitializeSRWLock
0x1002d218
LeaveCriticalSection
0x1002d228
OpenSemaphoreW
0x1002d220
ReleaseMutex
0x1002d224
ReleaseSemaphore
0x1002d240
ReleaseSRWLockExclusive
0x1002d234
ReleaseSRWLockShared
0x1002d214
SetEvent
0x1002d254
WaitForSingleObject
0x1002d23c
WaitForSingleObjectEx
0x1002d230
GetSystemInfo
0x1002d270
GetSystemTimeAsFileTime
0x1002d26c
GetTickCount
0x1002d268
CloseThreadpoolTimer
0x1002d280
CreateThreadpoolTimer
0x1002d284
SetThreadpoolTimer
0x1002d278
WaitForThreadpoolTimerCallbacks
0x1002d27c
QueueUserWorkItem
0x1002d28c
GetRestrictedErrorInfo
0x1002d2a0
RoOriginateError
0x1002d2a4
RoOriginateErrorW
0x1002d2a8
RoTransformError
0x1002d2ac
SetRestrictedErrorInfo
0x1002d2b0
IsErrorPropagationEnabled
0x1002d2bc
RoGetMatchingRestrictedErrorInfo
0x1002d2b8
RoReportFailedDelegate
0x1002d2c0
RoActivateInstance
0x1002d2d4
RoGetActivationFactory
0x1002d2cc
RoInitialize
0x1002d2d0
RoUninitialize
0x1002d2c8
HSTRING_UserFree
0x1002d2f8
HSTRING_UserMarshal
0x1002d2e8
HSTRING_UserSize
0x1002d2f0
HSTRING_UserUnmarshal
0x1002d2e4
WindowsCompareStringOrdinal
0x1002d304
WindowsCreateString
0x1002d308
WindowsCreateStringReference
0x1002d2f4
WindowsDeleteString
0x1002d2e0
WindowsDuplicateString
0x1002d2ec
WindowsGetStringRawBuffer
0x1002d2fc
WindowsIsStringEmpty
0x1002d2dc
WindowsStringHasEmbeddedNull
0x1002d300
CreateWellKnownSid
0x1002d31c
EqualSid
0x1002d318
GetAce
0x1002d314
GetTokenInformation
0x1002d310
CheckTokenMembershipEx
0x1002d324
ConvertSidToStringSidW
0x1002d32c
0x1002d334
msvcrt.dll
35
__CxxFrameHandler3
0x1002d398
__dllonexit
0x1002d39c
_amsg_exit
0x1002d340
_callnewh
0x1002d38c
_CxxThrowException
0x1002d354
_except_handler4_common
0x1002d3a8
_get_errno
0x1002d37c
_initterm
0x1002d3c0
_lock
0x1002d384
_onexit
0x1002d3b8
_purecall
0x1002d394
_set_errno
0x1002d378
_unlock
0x1002d390
_vscwprintf
0x1002d380
_vsnprintf_s
0x1002d344
_vsnwprintf
0x1002d3b4
_XcptFilter
0x1002d33c
??0exception@@QAE@ABQBD@Z
0x1002d388
??0exception@@QAE@ABQBDH@Z
0x1002d360
??0exception@@QAE@ABV0@@Z
0x1002d35c
??0exception@@QAE@XZ
0x1002d370
??1exception@@UAE@XZ
0x1002d358
??1type_info@@UAE@XZ
0x1002d3a0
??3@YAXPAX@Z
0x1002d3ac
?terminate@@YAXXZ
0x1002d364
?what@exception@@UBEPBDXZ
0x1002d36c
free
0x1002d348
malloc
0x1002d34c
memcmp
0x1002d368
memcpy
0x1002d350
memcpy_s
0x1002d3b0
memmove
0x1002d3bc
memmove_s
0x1002d3a4
memset
0x1002d3c4
wcschr
0x1002d374
ntdll.dll
17
NtQuerySecurityObject
0x1002d3e0
NtSetSecurityObject
0x1002d3d8
RtlAddAccessAllowedAce
0x1002d3ec
RtlAddAce
0x1002d3f0
RtlAllocateHeap
0x1002d3fc
RtlCapabilityCheck
0x1002d40c
RtlCreateAcl
0x1002d3f8
RtlCreateSecurityDescriptor
0x1002d3dc
RtlFreeHeap
0x1002d3e4
RtlGetAce
0x1002d3f4
RtlGetDaclSecurityDescriptor
0x1002d408
RtlInitUnicodeString
0x1002d3cc
RtlIsMultiSessionSku
0x1002d3d0
RtlLengthSid
0x1002d400
RtlNtStatusToDosError
0x1002d3d4
RtlQueryInformationAcl
0x1002d404
RtlSetDaclSecurityDescriptor
0x1002d3e8
SysAllocString
0x1002d00c
SysFreeString
0x1002d000
VariantClear
0x1002d004
VariantInit
0x1002d008
RPCRT4.dll
27
CStdStubBuffer_AddRef
0x1002d050
CStdStubBuffer_Connect
0x1002d030
CStdStubBuffer_CountRefs
0x1002d048
CStdStubBuffer_DebugServerQueryInterface
0x1002d068
CStdStubBuffer_DebugServerRelease
0x1002d040
CStdStubBuffer_Disconnect
0x1002d03c
CStdStubBuffer_Invoke
0x1002d078
CStdStubBuffer_IsIIDSupported
0x1002d034
CStdStubBuffer_QueryInterface
0x1002d044
I_RpcExceptionFilter
0x1002d018
IUnknown_AddRef_Proxy
0x1002d06c
IUnknown_QueryInterface_Proxy
0x1002d038
IUnknown_Release_Proxy
0x1002d04c
NdrClientCall4
0x1002d014
NdrCStdStubBuffer_Release
0x1002d064
NdrCStdStubBuffer2_Release
0x1002d058
NdrDllCanUnloadNow
0x1002d060
NdrDllGetClassObject
0x1002d05c
NdrOleAllocate
0x1002d07c
NdrOleFree
0x1002d054
NdrStubCall2
0x1002d070
NdrStubForwardingFunction
0x1002d074
RpcBindingFree
0x1002d01c
RpcBindingFromStringBindingW
0x1002d028
RpcBindingSetAuthInfoExW
0x1002d020
RpcStringBindingComposeW
0x1002d02c
RpcStringFreeW
0x1002d024
No function matches your filter.