Windows.Security.Credentials.UI.UserConsentVerifier.dll

Description: Windows User Consent Verifier API

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 61158ecb141c0efc2ffde314812a35f0

File Size: 103.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x76f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x7680)
DllGetClassObject (Ordinal: 3, Address: 0x76a0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10017054)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x1001705c)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1001708c)
CoCreateInstance (Address: 0x1001706c)
CoGetCallContext (Address: 0x10017070)
CoGetCallerTID (Address: 0x10017080)
CoGetInterfaceAndReleaseStream (Address: 0x10017084)
CoGetMalloc (Address: 0x10017068)
CoMarshalInterface (Address: 0x10017074)
CoMarshalInterThreadInterfaceInStream (Address: 0x10017090)
CoReleaseMarshalData (Address: 0x1001707c)
CoTaskMemAlloc (Address: 0x10017088)
CoTaskMemFree (Address: 0x10017064)
CreateStreamOnHGlobal (Address: 0x10017078)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10017098)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100170c0)
CStdStubBuffer2_CountRefs (Address: 0x100170a4)
CStdStubBuffer2_Disconnect (Address: 0x100170c8)
CStdStubBuffer2_QueryInterface (Address: 0x100170bc)
NdrProxyForwardingFunction3 (Address: 0x100170b8)
NdrProxyForwardingFunction4 (Address: 0x100170ac)
NdrProxyForwardingFunction5 (Address: 0x100170a0)
ObjectStublessClient3 (Address: 0x100170c4)
ObjectStublessClient6 (Address: 0x100170a8)
ObjectStublessClient7 (Address: 0x100170b4)
ObjectStublessClient8 (Address: 0x100170b0)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x100170d0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100170dc)
IsDebuggerPresent (Address: 0x100170d8)
OutputDebugStringW (Address: 0x100170e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100170e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100170f0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100170f8)
RaiseException (Address: 0x10017108)
SetLastError (Address: 0x10017100)
SetUnhandledExceptionFilter (Address: 0x10017104)
UnhandledExceptionFilter (Address: 0x100170fc)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x10017110)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10017118)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10017120)
HeapAlloc (Address: 0x10017128)
HeapFree (Address: 0x10017124)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10017130)
LocalFree (Address: 0x10017134)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1001713c)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1001714c)
GetModuleFileNameA (Address: 0x10017150)
GetModuleHandleExW (Address: 0x10017148)
GetModuleHandleW (Address: 0x10017144)
GetProcAddress (Address: 0x10017154)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1001715c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10017164)
GetCurrentProcessId (Address: 0x1001716c)
GetCurrentThreadId (Address: 0x10017178)
GetProcessId (Address: 0x10017174)
OpenProcessToken (Address: 0x10017170)
TerminateProcess (Address: 0x10017168)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x10017180)
OpenProcess (Address: 0x10017184)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001718c)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10017194)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100171c0)
AcquireSRWLockShared (Address: 0x100171b4)
CreateMutexExW (Address: 0x100171d4)
CreateSemaphoreExW (Address: 0x1001719c)
DeleteCriticalSection (Address: 0x100171d0)
EnterCriticalSection (Address: 0x100171ac)
InitializeCriticalSectionEx (Address: 0x100171b0)
LeaveCriticalSection (Address: 0x100171a8)
OpenSemaphoreW (Address: 0x100171cc)
ReleaseMutex (Address: 0x100171bc)
ReleaseSemaphore (Address: 0x100171a0)
ReleaseSRWLockExclusive (Address: 0x100171c4)
ReleaseSRWLockShared (Address: 0x100171b8)
WaitForSingleObject (Address: 0x100171a4)
WaitForSingleObjectEx (Address: 0x100171c8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100171e4)
InitOnceComplete (Address: 0x100171e0)
InitOnceExecuteOnce (Address: 0x100171dc)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100171ec)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10017200)
CreateThreadpoolTimer (Address: 0x100171f4)
SetThreadpoolTimer (Address: 0x100171f8)
WaitForThreadpoolTimerCallbacks (Address: 0x100171fc)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1001720c)
EncodePointer (Address: 0x10017208)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10017214)
RoOriginateError (Address: 0x1001721c)
RoOriginateErrorW (Address: 0x10017224)
RoTransformError (Address: 0x10017220)
SetRestrictedErrorInfo (Address: 0x10017218)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1001722c)
RoGetMatchingRestrictedErrorInfo (Address: 0x10017230)
RoReportFailedDelegate (Address: 0x10017234)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1001723c)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10017258)
HSTRING_UserMarshal (Address: 0x1001725c)
HSTRING_UserSize (Address: 0x10017260)
HSTRING_UserUnmarshal (Address: 0x10017254)
WindowsCreateString (Address: 0x10017248)
WindowsCreateStringReference (Address: 0x10017244)
WindowsDeleteString (Address: 0x1001724c)
WindowsDuplicateString (Address: 0x10017250)
WindowsGetStringRawBuffer (Address: 0x10017264)
WindowsIsStringEmpty (Address: 0x1001726c)
WindowsStringHasEmbeddedNull (Address: 0x10017268)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100172dc)
__std_terminate (Address: 0x100172d8)
_CxxThrowException (Address: 0x100172a8)
_except_handler4_common (Address: 0x100172a4)
_o___std_exception_copy (Address: 0x100172c0)
_o___std_exception_destroy (Address: 0x100172bc)
_o___std_type_info_destroy_list (Address: 0x100172b8)
_o___stdio_common_vsnprintf_s (Address: 0x100172b4)
_o___stdio_common_vswprintf (Address: 0x100172b0)
_o__callnewh (Address: 0x100172d4)
_o__cexit (Address: 0x100172d0)
_o__configure_narrow_argv (Address: 0x100172c4)
_o__crt_atexit (Address: 0x100172ac)
_o__errno (Address: 0x100172cc)
_o__execute_onexit_table (Address: 0x100172c8)
_o__initialize_narrow_environment (Address: 0x10017274)
_o__initialize_onexit_table (Address: 0x10017278)
_o__invalid_parameter_noinfo (Address: 0x1001727c)
_o__invalid_parameter_noinfo_noreturn (Address: 0x10017280)
_o__purecall (Address: 0x10017284)
_o__register_onexit_function (Address: 0x10017288)
_o__seh_filter_dll (Address: 0x1001728c)
_o_free (Address: 0x10017294)
_o_malloc (Address: 0x10017298)
_o_memcpy_s (Address: 0x1001729c)
_o_terminate (Address: 0x100172a0)
memcmp (Address: 0x100172e0)
memcpy (Address: 0x100172e4)
memmove (Address: 0x10017290)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100172f0)
_initterm_e (Address: 0x100172ec)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100172f8)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x10017300)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

GetWindowBand (Address: 0x10017308)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

EnableWindow (Address: 0x10017318)
GetAncestor (Address: 0x10017314)
GetClassNameW (Address: 0x10017310)
GetParent (Address: 0x10017320)
GetPropW (Address: 0x10017328)
GetWindow (Address: 0x10017324)
GetWindowThreadProcessId (Address: 0x1001731c)
IsWindow (Address: 0x1001732c)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1001733c)
GetLengthSid (Address: 0x10017334)
GetTokenInformation (Address: 0x10017338)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x10017344)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1001734c)
SHTaskPoolQueueTask (Address: 0x10017350)

bcrypt.dll

BCryptGenRandom (Address: 0x10017358)

combase.dll

(Address: 0x10017360)
(Address: 0x10017364)

msvcp_win.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x1001736c)

ncrypt.dll

NCryptDecrypt (Address: 0x10017384)
NCryptEncrypt (Address: 0x10017378)
NCryptFreeObject (Address: 0x10017388)
NCryptOpenKey (Address: 0x1001737c)
NCryptOpenStorageProvider (Address: 0x10017380)
NCryptSetProperty (Address: 0x10017374)

ntdll.dll

EtwEventRegister (Address: 0x100173a4)
EtwEventSetInformation (Address: 0x100173ac)
EtwEventUnregister (Address: 0x100173a8)
EtwEventWriteTransfer (Address: 0x100173a0)
NtQueryInformationToken (Address: 0x10017398)
RtlAllocateHeap (Address: 0x100173b8)
RtlCompareUnicodeString (Address: 0x100173b0)
RtlEqualSid (Address: 0x10017394)
RtlFreeHeap (Address: 0x100173c0)
RtlImageNtHeader (Address: 0x10017390)
RtlInitUnicodeString (Address: 0x100173bc)
RtlNtStatusToDosErrorNoTeb (Address: 0x100173b4)
wcschr (Address: 0x1001739c)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1001703c)
CStdStubBuffer_Connect (Address: 0x1001704c)
CStdStubBuffer_CountRefs (Address: 0x10017044)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10017034)
CStdStubBuffer_DebugServerRelease (Address: 0x10017020)
CStdStubBuffer_Disconnect (Address: 0x10017018)
CStdStubBuffer_Invoke (Address: 0x1001701c)
CStdStubBuffer_IsIIDSupported (Address: 0x10017000)
CStdStubBuffer_QueryInterface (Address: 0x10017048)
IUnknown_AddRef_Proxy (Address: 0x1001702c)
IUnknown_QueryInterface_Proxy (Address: 0x10017004)
IUnknown_Release_Proxy (Address: 0x10017040)
NdrCStdStubBuffer_Release (Address: 0x10017014)
NdrCStdStubBuffer2_Release (Address: 0x10017008)
NdrDllCanUnloadNow (Address: 0x10017010)
NdrDllGetClassObject (Address: 0x1001700c)
NdrOleAllocate (Address: 0x10017030)
NdrOleFree (Address: 0x10017038)
NdrStubCall2 (Address: 0x10017028)
NdrStubForwardingFunction (Address: 0x10017024)

twinapi.appcore.dll

(Address: 0x100173c8)
(Address: 0x100173cc)
(Address: 0x100173d0)