webauthn.dll
Description: Web Authentication
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6093
Architecture: 64-bit
Operating System: Windows NT
SHA256: 4581401e44b9ac161605b5244df2cbaf
File Size: 518.0 KB
Uploaded At: Dec. 1, 2025, 7:42 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CryptsvcDllCtrl (Ordinal: 1, Address: 0x208b0)
- I_WebAuthNCtapDecodeGetAssertionRpcResponse (Ordinal: 2, Address: 0xe370)
- I_WebAuthNCtapDecodeMakeCredentialRpcResponse (Ordinal: 3, Address: 0xbce0)
- I_WebAuthNCtapEncodeGetAssertionRpcRequest (Ordinal: 4, Address: 0xdd50)
- I_WebAuthNCtapEncodeMakeCredentialRpcRequest (Ordinal: 5, Address: 0xb8c0)
- VirtualChannelGetInstance (Ordinal: 6, Address: 0x21070)
- WebAuthNAuthenticatorGetAssertion (Ordinal: 7, Address: 0x16be0)
- WebAuthNAuthenticatorMakeCredential (Ordinal: 8, Address: 0x16440)
- WebAuthNCancelCurrentOperation (Ordinal: 9, Address: 0x17350)
- WebAuthNCtapChangeClientPin (Ordinal: 10, Address: 0xd2d0)
- WebAuthNCtapChangeClientPinForSelectedDevice (Ordinal: 11, Address: 0xf5b0)
- WebAuthNCtapFreeSelectedDeviceInformation (Ordinal: 12, Address: 0xec40)
- WebAuthNCtapGetAssertion (Ordinal: 13, Address: 0xec70)
- WebAuthNCtapGetSupportedTransports (Ordinal: 14, Address: 0x10d70)
- WebAuthNCtapGetWnfLocalizedString (Ordinal: 15, Address: 0x14ed0)
- WebAuthNCtapIsStopSendCommandError (Ordinal: 16, Address: 0x104e0)
- WebAuthNCtapMakeCredential (Ordinal: 17, Address: 0xd570)
- WebAuthNCtapManageAuthenticatePin (Ordinal: 18, Address: 0x13b10)
- WebAuthNCtapManageCancelEnrollFingerprint (Ordinal: 19, Address: 0x142d0)
- WebAuthNCtapManageChangePin (Ordinal: 20, Address: 0x13e10)
- WebAuthNCtapManageClose (Ordinal: 21, Address: 0x13100)
- WebAuthNCtapManageDeleteCredential (Ordinal: 22, Address: 0x14e40)
- WebAuthNCtapManageEnrollFingerprint (Ordinal: 23, Address: 0x14040)
- WebAuthNCtapManageFreeDisplayCredentials (Ordinal: 24, Address: 0x14850)
- WebAuthNCtapManageGetDisplayCredentials (Ordinal: 25, Address: 0x148b0)
- WebAuthNCtapManageRemoveFingerprints (Ordinal: 26, Address: 0x143a0)
- WebAuthNCtapManageResetDevice (Ordinal: 27, Address: 0x13890)
- WebAuthNCtapManageSelect (Ordinal: 28, Address: 0x13750)
- WebAuthNCtapManageSetPin (Ordinal: 29, Address: 0x13ca0)
- WebAuthNCtapParseAuthenticatorData (Ordinal: 30, Address: 0xfb70)
- WebAuthNCtapResetDevice (Ordinal: 31, Address: 0xd4d0)
- WebAuthNCtapRpcGetAssertionUserList (Ordinal: 32, Address: 0x106a0)
- WebAuthNCtapRpcGetCborCommand (Ordinal: 33, Address: 0x10540)
- WebAuthNCtapRpcSelectGetAssertion (Ordinal: 34, Address: 0x10ac0)
- WebAuthNCtapSendCommand (Ordinal: 35, Address: 0xfc10)
- WebAuthNCtapSetClientPin (Ordinal: 36, Address: 0xd190)
- WebAuthNCtapStartDeviceChangeNotify (Ordinal: 37, Address: 0x111e0)
- WebAuthNCtapStopDeviceChangeNotify (Ordinal: 38, Address: 0x111f0)
- WebAuthNCtapVerifyGetAssertion (Ordinal: 39, Address: 0xf8b0)
- WebAuthNDecodeAccountInformation (Ordinal: 40, Address: 0x1d1b0)
- WebAuthNDeletePlatformCredential (Ordinal: 41, Address: 0x1d280)
- WebAuthNEncodeAccountInformation (Ordinal: 42, Address: 0x1d0e0)
- WebAuthNFreeAssertion (Ordinal: 43, Address: 0xec40)
- WebAuthNFreeCredentialAttestation (Ordinal: 44, Address: 0xb850)
- WebAuthNFreeDecodedAccountInformation (Ordinal: 45, Address: 0xec40)
- WebAuthNFreeEncodedAccountInformation (Ordinal: 46, Address: 0xec40)
- WebAuthNFreePlatformCredentials (Ordinal: 47, Address: 0x14850)
- WebAuthNFreeUserEntityList (Ordinal: 48, Address: 0xec40)
- WebAuthNGetApiVersionNumber (Ordinal: 49, Address: 0x17510)
- WebAuthNGetCancellationId (Ordinal: 50, Address: 0x17310)
- WebAuthNGetCoseAlgorithmIdentifier (Ordinal: 51, Address: 0x16350)
- WebAuthNGetCredentialIdFromAuthenticatorData (Ordinal: 52, Address: 0x11200)
- WebAuthNGetErrorName (Ordinal: 53, Address: 0x10480)
- WebAuthNGetPlatformCredentials (Ordinal: 54, Address: 0x1da20)
- WebAuthNGetW3CExceptionDOMError (Ordinal: 55, Address: 0x104b0)
- WebAuthNIsUserVerifyingPlatformAuthenticatorAvailable (Ordinal: 56, Address: 0x1cf50)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800629c0)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatA (Address: 0x1800629d8)
- GetTimeFormatA (Address: 0x1800629d0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800629f8)
- IsDebuggerPresent (Address: 0x1800629f0)
- OutputDebugStringA (Address: 0x1800629e8)
- OutputDebugStringW (Address: 0x180062a00)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180062a10)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180062a20)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180062a48)
- RaiseException (Address: 0x180062a50)
- SetLastError (Address: 0x180062a30)
- SetUnhandledExceptionFilter (Address: 0x180062a38)
- UnhandledExceptionFilter (Address: 0x180062a40)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x180062a60)
- CreateFileW (Address: 0x180062a70)
- GetFileSize (Address: 0x180062a68)
- ReadFile (Address: 0x180062a78)
- SetEndOfFile (Address: 0x180062a88)
- SetFilePointer (Address: 0x180062a80)
- WriteFile (Address: 0x180062a90)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180062aa0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180062ab0)
- HeapAlloc (Address: 0x180062ac0)
- HeapFree (Address: 0x180062ab8)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180062ad8)
- LocalFree (Address: 0x180062ae0)
- LocalReAlloc (Address: 0x180062ad0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalSize (Address: 0x180062af0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180062b00)
api-ms-win-core-io-l1-1-0.dll
- CancelIoEx (Address: 0x180062b10)
api-ms-win-core-libraryloader-l1-2-0.dll
- GetModuleFileNameA (Address: 0x180062b20)
- GetModuleHandleExW (Address: 0x180062b30)
- GetModuleHandleW (Address: 0x180062b40)
- GetProcAddress (Address: 0x180062b28)
- LoadStringW (Address: 0x180062b38)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180062b50)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x180062b60)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180062b98)
- GetCurrentProcessId (Address: 0x180062b70)
- GetCurrentThread (Address: 0x180062b80)
- GetCurrentThreadId (Address: 0x180062b88)
- OpenProcessToken (Address: 0x180062b90)
- OpenThreadToken (Address: 0x180062ba0)
- SetThreadToken (Address: 0x180062b78)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180062bb0)
- OpenProcess (Address: 0x180062bb8)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x180062bc8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180062be0)
- RegCreateKeyExW (Address: 0x180062bf8)
- RegDeleteKeyExW (Address: 0x180062c18)
- RegDeleteValueA (Address: 0x180062c00)
- RegGetValueA (Address: 0x180062c10)
- RegGetValueW (Address: 0x180062be8)
- RegOpenKeyExW (Address: 0x180062bf0)
- RegQueryValueExW (Address: 0x180062bd8)
- RegSetValueExA (Address: 0x180062c08)
- RegSetValueExW (Address: 0x180062c20)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180062c40)
- RtlLookupFunctionEntry (Address: 0x180062c38)
- RtlVirtualUnwind (Address: 0x180062c30)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180062c50)
- MultiByteToWideChar (Address: 0x180062c58)
- WideCharToMultiByte (Address: 0x180062c60)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180062cf0)
- AcquireSRWLockShared (Address: 0x180062c70)
- CreateEventExW (Address: 0x180062cf8)
- CreateEventW (Address: 0x180062d18)
- CreateMutexExW (Address: 0x180062c80)
- CreateSemaphoreExW (Address: 0x180062cb8)
- DeleteCriticalSection (Address: 0x180062c98)
- EnterCriticalSection (Address: 0x180062ce8)
- InitializeCriticalSectionAndSpinCount (Address: 0x180062cc0)
- InitializeCriticalSectionEx (Address: 0x180062c90)
- InitializeSRWLock (Address: 0x180062cd0)
- LeaveCriticalSection (Address: 0x180062cb0)
- OpenEventW (Address: 0x180062d08)
- OpenSemaphoreW (Address: 0x180062ca8)
- ReleaseMutex (Address: 0x180062cd8)
- ReleaseSemaphore (Address: 0x180062ce0)
- ReleaseSRWLockExclusive (Address: 0x180062c78)
- ReleaseSRWLockShared (Address: 0x180062ca0)
- ResetEvent (Address: 0x180062d10)
- SetEvent (Address: 0x180062d00)
- WaitForSingleObject (Address: 0x180062c88)
- WaitForSingleObjectEx (Address: 0x180062cc8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x180062d30)
- Sleep (Address: 0x180062d28)
api-ms-win-core-synch-l1-2-1.dll
- WaitForMultipleObjects (Address: 0x180062d40)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetLocalTime (Address: 0x180062d58)
- GetSystemTimeAsFileTime (Address: 0x180062d50)
- GetTickCount64 (Address: 0x180062d68)
- GetVersionExW (Address: 0x180062d60)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180062dc0)
- CloseThreadpoolWait (Address: 0x180062d88)
- CreateThreadpoolTimer (Address: 0x180062d98)
- CreateThreadpoolWait (Address: 0x180062db0)
- FreeLibraryWhenCallbackReturns (Address: 0x180062d80)
- SetThreadpoolTimer (Address: 0x180062da0)
- SetThreadpoolWait (Address: 0x180062da8)
- TrySubmitThreadpoolCallback (Address: 0x180062d78)
- WaitForThreadpoolTimerCallbacks (Address: 0x180062d90)
- WaitForThreadpoolWaitCallbacks (Address: 0x180062db8)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x180062dd0)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180062e80)
- __CxxFrameHandler3 (Address: 0x180062e88)
- __CxxFrameHandler4 (Address: 0x180062f00)
- __std_terminate (Address: 0x180062ef8)
- _CxxThrowException (Address: 0x180062e90)
- _o___acrt_iob_func (Address: 0x180062ec8)
- _o___std_exception_copy (Address: 0x180062f18)
- _o___std_exception_destroy (Address: 0x180062f10)
- _o___std_type_info_destroy_list (Address: 0x180062f08)
- _o___stdio_common_vfprintf (Address: 0x180062ef0)
- _o___stdio_common_vfwprintf_s (Address: 0x180062ed8)
- _o___stdio_common_vsnprintf_s (Address: 0x180062ed0)
- _o___stdio_common_vsprintf (Address: 0x180062ea0)
- _o___stdio_common_vswprintf (Address: 0x180062e98)
- _o__callnewh (Address: 0x180062ee8)
- _o__cexit (Address: 0x180062ee0)
- _o__configure_narrow_argv (Address: 0x180062ec0)
- _o__crt_atexit (Address: 0x180062ea8)
- _o__errno (Address: 0x180062de0)
- _o__execute_onexit_table (Address: 0x180062de8)
- _o__initialize_narrow_environment (Address: 0x180062df0)
- _o__initialize_onexit_table (Address: 0x180062df8)
- _o__invalid_parameter_noinfo (Address: 0x180062e00)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x180062e08)
- _o__purecall (Address: 0x180062e10)
- _o__register_onexit_function (Address: 0x180062e18)
- _o__seh_filter_dll (Address: 0x180062e20)
- _o__wcsicmp (Address: 0x180062e30)
- _o__wcsnicmp (Address: 0x180062e38)
- _o__wcstoui64 (Address: 0x180062e40)
- _o_free (Address: 0x180062e48)
- _o_iswspace (Address: 0x180062e50)
- _o_malloc (Address: 0x180062e58)
- _o_qsort (Address: 0x180062e60)
- _o_towlower (Address: 0x180062e68)
- _o_towupper (Address: 0x180062e70)
- _o_wcstoul (Address: 0x180062e78)
- memcmp (Address: 0x180062f20)
- memcpy (Address: 0x180062f28)
- memmove (Address: 0x180062e28)
- wcsrchr (Address: 0x180062eb0)
- wcsstr (Address: 0x180062eb8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180062f40)
- _initterm_e (Address: 0x180062f38)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180062f68)
- wcscmp (Address: 0x180062f60)
- wcscspn (Address: 0x180062f58)
- wcsncmp (Address: 0x180062f50)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180062f80)
- EventRegister (Address: 0x180062f88)
- EventSetInformation (Address: 0x180062f98)
- EventUnregister (Address: 0x180062f90)
- EventWriteTransfer (Address: 0x180062f78)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x180062fb0)
- BCryptCreateHash (Address: 0x180063020)
- BCryptDecrypt (Address: 0x180062fc8)
- BCryptDeriveKey (Address: 0x180062fe8)
- BCryptDestroyHash (Address: 0x180063000)
- BCryptDestroyKey (Address: 0x180063030)
- BCryptDestroySecret (Address: 0x180063028)
- BCryptEncrypt (Address: 0x180063040)
- BCryptExportKey (Address: 0x180062fd8)
- BCryptFinalizeKeyPair (Address: 0x180062fc0)
- BCryptFinishHash (Address: 0x180063010)
- BCryptGenerateKeyPair (Address: 0x180062fa8)
- BCryptGenerateSymmetricKey (Address: 0x180063008)
- BCryptHashData (Address: 0x180063018)
- BCryptImportKeyPair (Address: 0x180062fb8)
- BCryptOpenAlgorithmProvider (Address: 0x180062ff8)
- BCryptSecretAgreement (Address: 0x180062fe0)
- BCryptSetProperty (Address: 0x180062ff0)
- BCryptSignHash (Address: 0x180062fd0)
- BCryptVerifySignature (Address: 0x180063038)
msvcp_win.dll
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180063050)
ntdll.dll
- NtQueryInformationToken (Address: 0x180063068)
- NtTerminateProcess (Address: 0x180063078)
- RtlCompareUnicodeString (Address: 0x180063060)
- RtlIsMultiSessionSku (Address: 0x180063080)
- RtlPublishWnfStateData (Address: 0x180063088)
- RtlUnhandledExceptionFilter (Address: 0x180063070)