Windows.Security.Credentials.UI.UserConsentVerifier.dll

Description: Windows User Consent Verifier API

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 457066d8998d389f8818fc4e4fc24e54

File Size: 140.5 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x5120)
DllGetActivationFactory (Ordinal: 2, Address: 0x4e10)
DllGetClassObject (Ordinal: 3, Address: 0x4ff0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18001a3b8)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x18001a3c8)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001a420)
CoCreateInstance (Address: 0x18001a3e0)
CoGetCallContext (Address: 0x18001a3e8)
CoGetCallerTID (Address: 0x18001a408)
CoGetInterfaceAndReleaseStream (Address: 0x18001a410)
CoMarshalInterface (Address: 0x18001a3f0)
CoReleaseMarshalData (Address: 0x18001a400)
CoTaskMemAlloc (Address: 0x18001a418)
CoTaskMemFree (Address: 0x18001a3d8)
CreateStreamOnHGlobal (Address: 0x18001a3f8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18001a430)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18001a450)
CStdStubBuffer2_CountRefs (Address: 0x18001a460)
CStdStubBuffer2_Disconnect (Address: 0x18001a488)
CStdStubBuffer2_QueryInterface (Address: 0x18001a458)
NdrProxyForwardingFunction3 (Address: 0x18001a478)
NdrProxyForwardingFunction4 (Address: 0x18001a490)
NdrProxyForwardingFunction5 (Address: 0x18001a440)
ObjectStublessClient3 (Address: 0x18001a480)
ObjectStublessClient6 (Address: 0x18001a468)
ObjectStublessClient7 (Address: 0x18001a470)
ObjectStublessClient8 (Address: 0x18001a448)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x18001a4a0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001a4b8)
IsDebuggerPresent (Address: 0x18001a4b0)
OutputDebugStringW (Address: 0x18001a4c0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001a4d0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001a4e0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001a510)
RaiseException (Address: 0x18001a4f8)
SetLastError (Address: 0x18001a4f0)
SetUnhandledExceptionFilter (Address: 0x18001a508)
UnhandledExceptionFilter (Address: 0x18001a500)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x18001a520)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001a530)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001a550)
HeapAlloc (Address: 0x18001a540)
HeapFree (Address: 0x18001a548)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001a568)
LocalFree (Address: 0x18001a560)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18001a578)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001a588)
GetModuleFileNameA (Address: 0x18001a5a8)
GetModuleHandleExW (Address: 0x18001a590)
GetModuleHandleW (Address: 0x18001a5a0)
GetProcAddress (Address: 0x18001a598)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001a5b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18001a5c8)
GetCurrentProcessId (Address: 0x18001a5d8)
GetCurrentThreadId (Address: 0x18001a5f0)
GetProcessId (Address: 0x18001a5e8)
OpenProcessToken (Address: 0x18001a5e0)
TerminateProcess (Address: 0x18001a5d0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18001a600)
OpenProcess (Address: 0x18001a608)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001a618)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001a628)
RtlLookupFunctionEntry (Address: 0x18001a630)
RtlVirtualUnwind (Address: 0x18001a638)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18001a648)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001a6a0)
AcquireSRWLockShared (Address: 0x18001a688)
CreateMutexExW (Address: 0x18001a6c8)
CreateSemaphoreExW (Address: 0x18001a668)
DeleteCriticalSection (Address: 0x18001a6c0)
EnterCriticalSection (Address: 0x18001a658)
InitializeCriticalSectionEx (Address: 0x18001a670)
LeaveCriticalSection (Address: 0x18001a660)
OpenSemaphoreW (Address: 0x18001a6b8)
ReleaseMutex (Address: 0x18001a698)
ReleaseSemaphore (Address: 0x18001a680)
ReleaseSRWLockExclusive (Address: 0x18001a6a8)
ReleaseSRWLockShared (Address: 0x18001a690)
WaitForSingleObject (Address: 0x18001a678)
WaitForSingleObjectEx (Address: 0x18001a6b0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18001a6e8)
InitOnceComplete (Address: 0x18001a6e0)
InitOnceExecuteOnce (Address: 0x18001a6d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001a6f8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18001a720)
CreateThreadpoolTimer (Address: 0x18001a708)
SetThreadpoolTimer (Address: 0x18001a710)
WaitForThreadpoolTimerCallbacks (Address: 0x18001a718)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18001a738)
EncodePointer (Address: 0x18001a730)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18001a748)
RoOriginateError (Address: 0x18001a758)
RoOriginateErrorW (Address: 0x18001a768)
RoTransformError (Address: 0x18001a760)
SetRestrictedErrorInfo (Address: 0x18001a750)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18001a778)
RoGetMatchingRestrictedErrorInfo (Address: 0x18001a780)
RoReportFailedDelegate (Address: 0x18001a788)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18001a798)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18001a7e0)
HSTRING_UserFree64 (Address: 0x18001a7f0)
HSTRING_UserMarshal (Address: 0x18001a7f8)
HSTRING_UserMarshal64 (Address: 0x18001a7d8)
HSTRING_UserSize (Address: 0x18001a800)
HSTRING_UserSize64 (Address: 0x18001a7e8)
HSTRING_UserUnmarshal (Address: 0x18001a7d0)
HSTRING_UserUnmarshal64 (Address: 0x18001a7c8)
WindowsCreateString (Address: 0x18001a7b0)
WindowsCreateStringReference (Address: 0x18001a7a8)
WindowsDeleteString (Address: 0x18001a7b8)
WindowsDuplicateString (Address: 0x18001a7c0)
WindowsGetStringRawBuffer (Address: 0x18001a808)
WindowsIsStringEmpty (Address: 0x18001a818)
WindowsStringHasEmbeddedNull (Address: 0x18001a810)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18001a888)
__CxxFrameHandler3 (Address: 0x18001a890)
__CxxFrameHandler4 (Address: 0x18001a900)
__std_terminate (Address: 0x18001a8f8)
_CxxThrowException (Address: 0x18001a898)
_o___std_exception_copy (Address: 0x18001a8e0)
_o___std_exception_destroy (Address: 0x18001a8d8)
_o___std_type_info_destroy_list (Address: 0x18001a8d0)
_o___stdio_common_vsnprintf_s (Address: 0x18001a8c0)
_o___stdio_common_vswprintf (Address: 0x18001a8b8)
_o__callnewh (Address: 0x18001a8b0)
_o__cexit (Address: 0x18001a8a8)
_o__configure_narrow_argv (Address: 0x18001a8a0)
_o__crt_atexit (Address: 0x18001a8f0)
_o__errno (Address: 0x18001a8e8)
_o__execute_onexit_table (Address: 0x18001a8c8)
_o__initialize_narrow_environment (Address: 0x18001a828)
_o__initialize_onexit_table (Address: 0x18001a830)
_o__invalid_parameter_noinfo (Address: 0x18001a838)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18001a840)
_o__purecall (Address: 0x18001a848)
_o__register_onexit_function (Address: 0x18001a850)
_o__seh_filter_dll (Address: 0x18001a858)
_o_free (Address: 0x18001a868)
_o_malloc (Address: 0x18001a870)
_o_memcpy_s (Address: 0x18001a878)
_o_terminate (Address: 0x18001a880)
memcmp (Address: 0x18001a908)
memcpy (Address: 0x18001a910)
memmove (Address: 0x18001a860)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18001a928)
_initterm_e (Address: 0x18001a920)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18001a938)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x18001a948)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

GetWindowBand (Address: 0x18001a958)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

EnableWindow (Address: 0x18001a978)
GetAncestor (Address: 0x18001a970)
GetClassNameW (Address: 0x18001a968)
GetParent (Address: 0x18001a988)
GetPropW (Address: 0x18001a998)
GetWindow (Address: 0x18001a990)
GetWindowThreadProcessId (Address: 0x18001a980)
IsWindow (Address: 0x18001a9a0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18001a9c0)
GetLengthSid (Address: 0x18001a9b0)
GetTokenInformation (Address: 0x18001a9b8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18001a9d0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18001a9e0)
SHTaskPoolQueueTask (Address: 0x18001a9e8)

bcrypt.dll

BCryptGenRandom (Address: 0x18001a9f8)

combase.dll

(Address: 0x18001aa10)
(Address: 0x18001aa08)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001aa20)

ncrypt.dll

NCryptDecrypt (Address: 0x18001aa50)
NCryptEncrypt (Address: 0x18001aa38)
NCryptFreeObject (Address: 0x18001aa58)
NCryptOpenKey (Address: 0x18001aa40)
NCryptOpenStorageProvider (Address: 0x18001aa48)
NCryptSetProperty (Address: 0x18001aa30)

ntdll.dll

EtwEventRegister (Address: 0x18001aa90)
EtwEventSetInformation (Address: 0x18001aaa0)
EtwEventUnregister (Address: 0x18001aa98)
EtwEventWriteTransfer (Address: 0x18001aa88)
NtQueryInformationToken (Address: 0x18001aa78)
RtlAllocateHeap (Address: 0x18001aab8)
RtlCompareUnicodeString (Address: 0x18001aaa8)
RtlEqualSid (Address: 0x18001aa70)
RtlFreeHeap (Address: 0x18001aac8)
RtlImageNtHeader (Address: 0x18001aa68)
RtlInitUnicodeString (Address: 0x18001aac0)
RtlNtStatusToDosErrorNoTeb (Address: 0x18001aab0)
wcschr (Address: 0x18001aa80)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18001a380)
CStdStubBuffer_Connect (Address: 0x18001a3a8)
CStdStubBuffer_CountRefs (Address: 0x18001a390)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18001a368)
CStdStubBuffer_DebugServerRelease (Address: 0x18001a370)
CStdStubBuffer_Disconnect (Address: 0x18001a350)
CStdStubBuffer_Invoke (Address: 0x18001a348)
CStdStubBuffer_IsIIDSupported (Address: 0x18001a310)
CStdStubBuffer_QueryInterface (Address: 0x18001a398)
IUnknown_AddRef_Proxy (Address: 0x18001a360)
IUnknown_QueryInterface_Proxy (Address: 0x18001a340)
IUnknown_Release_Proxy (Address: 0x18001a388)
NdrCStdStubBuffer_Release (Address: 0x18001a338)
NdrCStdStubBuffer2_Release (Address: 0x18001a320)
NdrDllCanUnloadNow (Address: 0x18001a330)
NdrDllGetClassObject (Address: 0x18001a328)
NdrOleAllocate (Address: 0x18001a3a0)
NdrOleFree (Address: 0x18001a378)
NdrStubCall3 (Address: 0x18001a318)
NdrStubForwardingFunction (Address: 0x18001a358)

twinapi.appcore.dll

(Address: 0x18001aad8)
(Address: 0x18001aae0)
(Address: 0x18001aae8)