Windows.Security.Authentication.OnlineId.dll

Description: Windows Runtime OnlineId Authentication DLL

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: e6ffb46887422b106a9f028d88d8d5df

File Size: 744.5 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 20

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x37e10)
DllGetActivationFactory (Ordinal: 2, Address: 0x37d50)
DllGetClassObject (Ordinal: 3, Address: 0x60110)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100b0054)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x100b005c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100b006c)
IsDebuggerPresent (Address: 0x100b0070)
OutputDebugStringA (Address: 0x100b0068)
OutputDebugStringW (Address: 0x100b0064)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100b0078)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100b0080)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100b0098)
RaiseException (Address: 0x100b008c)
SetLastError (Address: 0x100b0094)
SetUnhandledExceptionFilter (Address: 0x100b0088)
UnhandledExceptionFilter (Address: 0x100b0090)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100b00a0)
DuplicateHandle (Address: 0x100b00a4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100b00b8)
HeapAlloc (Address: 0x100b00bc)
HeapDestroy (Address: 0x100b00b0)
HeapFree (Address: 0x100b00ac)
HeapReAlloc (Address: 0x100b00c0)
HeapSize (Address: 0x100b00b4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100b00c8)
LocalFree (Address: 0x100b00cc)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x100b00d4)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x100b0104)
FreeLibrary (Address: 0x100b00e8)
GetModuleFileNameA (Address: 0x100b00f8)
GetModuleFileNameW (Address: 0x100b00e0)
GetModuleHandleExW (Address: 0x100b00f4)
GetModuleHandleW (Address: 0x100b00fc)
GetProcAddress (Address: 0x100b00dc)
LoadLibraryExW (Address: 0x100b00e4)
LoadResource (Address: 0x100b00ec)
LockResource (Address: 0x100b0100)
SizeofResource (Address: 0x100b00f0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x100b010c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100b0118)
GetThreadPreferredUILanguages (Address: 0x100b011c)
GetUserDefaultLocaleName (Address: 0x100b0114)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetUserDefaultUILanguage (Address: 0x100b0124)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100b0140)
GetCurrentProcessId (Address: 0x100b012c)
GetCurrentThread (Address: 0x100b0144)
GetCurrentThreadId (Address: 0x100b0130)
GetProcessId (Address: 0x100b0134)
GetProcessIdOfThread (Address: 0x100b0138)
OpenProcessToken (Address: 0x100b014c)
OpenThread (Address: 0x100b0150)
OpenThreadToken (Address: 0x100b0148)
TerminateProcess (Address: 0x100b013c)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100b0158)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100b0160)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100b019c)
RegCreateKeyExW (Address: 0x100b0178)
RegDeleteKeyExW (Address: 0x100b0174)
RegDeleteTreeW (Address: 0x100b016c)
RegDeleteValueW (Address: 0x100b0190)
RegEnumKeyExW (Address: 0x100b0184)
RegEnumValueW (Address: 0x100b0170)
RegGetValueW (Address: 0x100b017c)
RegOpenCurrentUser (Address: 0x100b0180)
RegOpenKeyExW (Address: 0x100b0198)
RegQueryInfoKeyW (Address: 0x100b0168)
RegQueryValueExW (Address: 0x100b0194)
RegSetKeySecurity (Address: 0x100b0188)
RegSetValueExW (Address: 0x100b018c)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrStrIW (Address: 0x100b01a4)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100b01ac)
WideCharToMultiByte (Address: 0x100b01b0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100b01e8)
AcquireSRWLockShared (Address: 0x100b01fc)
CreateEventExW (Address: 0x100b01e4)
CreateEventW (Address: 0x100b01ec)
CreateMutexExW (Address: 0x100b01d0)
CreateSemaphoreExW (Address: 0x100b01cc)
DeleteCriticalSection (Address: 0x100b01bc)
EnterCriticalSection (Address: 0x100b01c0)
InitializeCriticalSection (Address: 0x100b01b8)
InitializeCriticalSectionEx (Address: 0x100b01c8)
InitializeSRWLock (Address: 0x100b01d8)
LeaveCriticalSection (Address: 0x100b01c4)
OpenSemaphoreW (Address: 0x100b0204)
ReleaseMutex (Address: 0x100b01f8)
ReleaseSemaphore (Address: 0x100b01d4)
ReleaseSRWLockExclusive (Address: 0x100b01f4)
ReleaseSRWLockShared (Address: 0x100b0200)
ResetEvent (Address: 0x100b01dc)
SetEvent (Address: 0x100b01f0)
WaitForMultipleObjectsEx (Address: 0x100b01e0)
WaitForSingleObject (Address: 0x100b020c)
WaitForSingleObjectEx (Address: 0x100b0208)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100b021c)
InitOnceComplete (Address: 0x100b0220)
InitOnceExecuteOnce (Address: 0x100b0218)
Sleep (Address: 0x100b0214)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x100b0234)
GetSystemTimeAsFileTime (Address: 0x100b0238)
GetTickCount (Address: 0x100b0230)
GetTickCount64 (Address: 0x100b0228)
GetVersionExW (Address: 0x100b022c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100b0250)
CloseThreadpoolWork (Address: 0x100b0248)
CreateThreadpoolTimer (Address: 0x100b025c)
CreateThreadpoolWork (Address: 0x100b0240)
FreeLibraryWhenCallbackReturns (Address: 0x100b0254)
SetThreadpoolTimer (Address: 0x100b0258)
SubmitThreadpoolWork (Address: 0x100b0244)
WaitForThreadpoolTimerCallbacks (Address: 0x100b024c)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x100b0264)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100b026c)
EncodePointer (Address: 0x100b0270)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x100b0278)
GetFileVersionInfoSizeExW (Address: 0x100b0280)
VerQueryValueW (Address: 0x100b027c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100b0290)
RoOriginateError (Address: 0x100b028c)
RoOriginateErrorW (Address: 0x100b0294)
RoTransformError (Address: 0x100b0298)
SetRestrictedErrorInfo (Address: 0x100b0288)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x100b02a0)
RoGetMatchingRestrictedErrorInfo (Address: 0x100b02a4)
RoReportFailedDelegate (Address: 0x100b02a8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x100b02bc)
RoGetActivationFactory (Address: 0x100b02b4)
RoInitialize (Address: 0x100b02b8)
RoUninitialize (Address: 0x100b02b0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsConcatString (Address: 0x100b02c4)
WindowsCreateString (Address: 0x100b02d8)
WindowsCreateStringReference (Address: 0x100b02e4)
WindowsDeleteString (Address: 0x100b02d0)
WindowsDuplicateString (Address: 0x100b02e0)
WindowsGetStringLen (Address: 0x100b02c8)
WindowsGetStringRawBuffer (Address: 0x100b02dc)
WindowsIsStringEmpty (Address: 0x100b02cc)
WindowsStringHasEmbeddedNull (Address: 0x100b02d4)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100b02fc)
EventRegister (Address: 0x100b02f4)
EventSetInformation (Address: 0x100b02f8)
EventUnregister (Address: 0x100b02f0)
EventWriteTransfer (Address: 0x100b02ec)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x100b0308)
CreateWellKnownSid (Address: 0x100b0324)
EqualSid (Address: 0x100b030c)
GetAce (Address: 0x100b032c)
GetLengthSid (Address: 0x100b0310)
GetSecurityDescriptorDacl (Address: 0x100b0318)
GetSecurityDescriptorSacl (Address: 0x100b0314)
GetTokenInformation (Address: 0x100b0304)
ImpersonateLoggedOnUser (Address: 0x100b031c)
IsValidSid (Address: 0x100b0320)
RevertToSelf (Address: 0x100b0328)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100b0338)
SHTaskPoolQueueTask (Address: 0x100b0334)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x100b0340)

bcrypt.dll

BCryptGenRandom (Address: 0x100b0348)

combase.dll

(Address: 0x100b0350)
(Address: 0x100b0354)
(Address: 0x100b0358)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100b036c)
__dllonexit (Address: 0x100b0390)
_amsg_exit (Address: 0x100b0378)
_callnewh (Address: 0x100b03a4)
_CxxThrowException (Address: 0x100b03dc)
_errno (Address: 0x100b037c)
_except_handler4_common (Address: 0x100b03a8)
_ftol2 (Address: 0x100b03b8)
_initterm (Address: 0x100b0368)
_lock (Address: 0x100b0360)
_onexit (Address: 0x100b039c)
_purecall (Address: 0x100b0394)
_set_errno (Address: 0x100b03d8)
_time64 (Address: 0x100b03d4)
_unlock (Address: 0x100b038c)
_vsnprintf_s (Address: 0x100b03bc)
_vsnwprintf (Address: 0x100b0388)
_XcptFilter (Address: 0x100b0380)
??0exception@@QAE@ABV0@@Z (Address: 0x100b0384)
??0exception@@QAE@XZ (Address: 0x100b0370)
??1exception@@UAE@XZ (Address: 0x100b0374)
??1type_info@@UAE@XZ (Address: 0x100b03a0)
?terminate@@YAXXZ (Address: 0x100b0364)
?what@exception@@UBEPBDXZ (Address: 0x100b03c0)
calloc (Address: 0x100b03c8)
free (Address: 0x100b03d0)
malloc (Address: 0x100b03cc)
memcmp (Address: 0x100b03b4)
memcpy (Address: 0x100b03b0)
memcpy_s (Address: 0x100b03e0)
memmove_s (Address: 0x100b0398)
memset (Address: 0x100b03e8)
realloc (Address: 0x100b03e4)
strrchr (Address: 0x100b03ac)
wcscpy_s (Address: 0x100b03c4)

ntdll.dll

_i64tow_s (Address: 0x100b048c)
_vscwprintf (Address: 0x100b047c)
_wcsicmp (Address: 0x100b0494)
_wcslwr_s (Address: 0x100b0410)
_wcsnicmp (Address: 0x100b03f8)
_wcsupr_s (Address: 0x100b046c)
_wtoi64 (Address: 0x100b03f4)
iswspace (Address: 0x100b0470)
NtQueryInformationToken (Address: 0x100b0434)
NtQuerySecurityObject (Address: 0x100b0498)
NtSetSecurityObject (Address: 0x100b03f0)
RtlAcquireSRWLockExclusive (Address: 0x100b0440)
RtlAddAccessAllowedAce (Address: 0x100b0450)
RtlAddAce (Address: 0x100b0454)
RtlAllocateHeap (Address: 0x100b042c)
RtlCompareUnicodeString (Address: 0x100b0424)
RtlCreateAcl (Address: 0x100b045c)
RtlCreateSecurityDescriptor (Address: 0x100b041c)
RtlEqualSid (Address: 0x100b0420)
RtlFreeHeap (Address: 0x100b0438)
RtlGetAce (Address: 0x100b0458)
RtlGetDaclSecurityDescriptor (Address: 0x100b0468)
RtlGetDeviceFamilyInfoEnum (Address: 0x100b0414)
RtlInitUnicodeString (Address: 0x100b0430)
RtlLengthSid (Address: 0x100b0460)
RtlNtStatusToDosError (Address: 0x100b0490)
RtlNtStatusToDosErrorNoTeb (Address: 0x100b0428)
RtlQueryInformationAcl (Address: 0x100b0464)
RtlReleaseSRWLockExclusive (Address: 0x100b043c)
RtlSetDaclSecurityDescriptor (Address: 0x100b044c)
RtlSleepConditionVariableSRW (Address: 0x100b0448)
RtlWakeAllConditionVariable (Address: 0x100b0444)
toupper (Address: 0x100b0418)
vswprintf_s (Address: 0x100b0480)
wcscat_s (Address: 0x100b0488)
wcschr (Address: 0x100b0408)
wcscspn (Address: 0x100b03fc)
wcsspn (Address: 0x100b0400)
wcsstr (Address: 0x100b0474)
wcstol (Address: 0x100b040c)
wcstoul (Address: 0x100b0404)
WinSqmAddToStreamEx (Address: 0x100b0478)
WinSqmIsOptedIn (Address: 0x100b0484)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x100b0048)
MesBufferHandleReset (Address: 0x100b003c)
MesDecodeBufferHandleCreate (Address: 0x100b0034)
MesEncodeFixedBufferHandleCreate (Address: 0x100b0040)
MesHandleFree (Address: 0x100b0038)
NdrAsyncClientCall2 (Address: 0x100b0028)
NdrMesTypeAlignSize2 (Address: 0x100b0000)
NdrMesTypeDecode2 (Address: 0x100b0008)
NdrMesTypeEncode2 (Address: 0x100b000c)
NdrMesTypeFree2 (Address: 0x100b0004)
RpcAsyncCancelCall (Address: 0x100b0024)
RpcAsyncCompleteCall (Address: 0x100b004c)
RpcAsyncInitializeHandle (Address: 0x100b0030)
RpcBindingFree (Address: 0x100b0010)
RpcBindingFromStringBindingW (Address: 0x100b0020)
RpcBindingSetAuthInfoExW (Address: 0x100b0018)
RpcSsDestroyClientContext (Address: 0x100b002c)
RpcStringBindingComposeW (Address: 0x100b001c)
RpcStringFreeW (Address: 0x100b0014)
UuidCreate (Address: 0x100b0044)