Retrieves the environment variables for the specified user. This block can then be passed to the CreateProcessAsUser function.

More info on CreateEnvironmentBlock in Windows Dev Center

Exported by

sizefilenameversion
98152userenv.dll6.3.9600.17415 (winblue_r4.141028-1500)
81920OSVolOSVol--Windows--SysWOW64--userenv.dll.fullextract6.1.7601.17514 (win7sp1_rtm.101119-1850)

Imported by

sizefilename
1278910158931.exe
2561744Hola-Setup-1.16.446.exe
162816photronlamp.com_m39ska.mal
9743360c3ec04430e044b2777eca77eeebbce2
312883240e2ff36b0857fccf610d15f6a16569f7d78a838
131174419.exe
8104476brt2.exe.exe
30082888chrome.dll
108544services_xp.exe
742400executable.3376.exe
1397608video_2019-03-05_21-27-33.mp4.scr
84853904WeMod.exe
177152dbackup.exe
787456mimikatz - Copy.exe
859136winlogon.unpacked.exe
811848chrome.exe
2382848manager.exe
1187342bbb.exe
2856112Hola-Setup-x64-1.15.82.exe
55496536chrome.dll
35422360chrome.dll
787125Auto Keybot Trial.unpacked.exe
15643542b84c8226d4acaa8afb80995d047dcb6
857088Extrato.unpacked.exe
2904176wwbizsrv.exe
20661216awesomium.dll
1081080AsusUpdateCheck.exe
16117982faef876504495530b64256b5c1d4863
144486431464DB6DCC5BD4B520DDEBFE031C4A7.kaf
27172168chrome.dll
46344704nw.exe
1107456361c9710663b7232ad9285bc25949afc
5873880MailRuUpdater.exe
493568wprotectmanager.exe
955144Update.exe
97771008mrt.exe
697672delegate_execute.exe
74240360Safx.exe
649216AutoItSC.bin
944640sysvloader1files.exe
1376172158931.exe
742400executable.1360.exe
915981TheSims4.exe
813896chrome.exe
694600delegate_execute.exe
712493Darkest.exe
1014784infectedNF-eletronica-70399280.pdf.exe
887808MiniToolBox.unpacked.exe
2186752keygen.exe
1414840uk.exe