ConsoleLogon.dll

Description: Console Logon User Experience

Version: 10.0.19041.5915

Architecture: 32-bit

Operating System: Windows NT

SHA256: 64b7e34ea22c3e61cc2736f6e1ef477e

File Size: 284.0 KB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xa1a0)
DllGetActivationFactory (Ordinal: 2, Address: 0xa150)
DllGetClassObject (Ordinal: 3, Address: 0xa170)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1004200c)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10042014)
CoCreateInstance (Address: 0x10042028)
CoGetInterfaceAndReleaseStream (Address: 0x10042038)
CoGetMalloc (Address: 0x10042020)
CoMarshalInterface (Address: 0x10042034)
CoReleaseMarshalData (Address: 0x1004202c)
CoTaskMemAlloc (Address: 0x10042018)
CoTaskMemFree (Address: 0x1004201c)
CoTaskMemRealloc (Address: 0x1004203c)
CoWaitForMultipleHandles (Address: 0x10042024)
CreateStreamOnHGlobal (Address: 0x10042030)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10042044)

api-ms-win-core-console-l1-1-0.dll

AllocConsole (Address: 0x1004204c)
ReadConsoleInputW (Address: 0x10042050)

api-ms-win-core-console-l1-2-0.dll

AttachConsole (Address: 0x10042060)
FreeConsole (Address: 0x10042058)
PeekConsoleInputW (Address: 0x1004205c)

api-ms-win-core-console-l2-1-0.dll

CreateConsoleScreenBuffer (Address: 0x1004206c)
FillConsoleOutputAttribute (Address: 0x1004207c)
FillConsoleOutputCharacterW (Address: 0x10042080)
GetConsoleScreenBufferInfo (Address: 0x10042070)
ReadConsoleOutputA (Address: 0x10042088)
ScrollConsoleScreenBufferW (Address: 0x1004208c)
SetConsoleActiveScreenBuffer (Address: 0x10042078)
SetConsoleCursorInfo (Address: 0x10042090)
SetConsoleCursorPosition (Address: 0x10042084)
SetConsoleOutputCP (Address: 0x10042068)
WriteConsoleOutputCharacterW (Address: 0x10042074)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x10042098)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100420a0)
IsDebuggerPresent (Address: 0x100420a4)
OutputDebugStringW (Address: 0x100420a8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100420b0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100420b8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100420cc)
RaiseException (Address: 0x100420d0)
SetLastError (Address: 0x100420c0)
SetUnhandledExceptionFilter (Address: 0x100420c8)
UnhandledExceptionFilter (Address: 0x100420c4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100420d8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100420e0)
HeapAlloc (Address: 0x100420e4)
HeapFree (Address: 0x100420e8)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x100420f0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1004210c)
FindResourceExW (Address: 0x100420f8)
GetModuleFileNameA (Address: 0x10042108)
GetModuleHandleExW (Address: 0x10042110)
GetModuleHandleW (Address: 0x10042100)
GetProcAddress (Address: 0x10042114)
LoadResource (Address: 0x100420fc)
LockResource (Address: 0x10042104)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10042124)
GetLocaleInfoEx (Address: 0x10042128)
GetThreadUILanguage (Address: 0x10042120)
SetThreadUILanguage (Address: 0x1004211c)

api-ms-win-core-processenvironment-l1-1-0.dll

GetStdHandle (Address: 0x10042130)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10042148)
GetCurrentProcessId (Address: 0x1004213c)
GetCurrentThreadId (Address: 0x10042140)
OpenProcessToken (Address: 0x10042144)
TerminateProcess (Address: 0x10042138)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x10042150)
OpenProcess (Address: 0x10042154)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1004215c)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x10042164)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1004217c)
AcquireSRWLockShared (Address: 0x10042180)
CreateEventExW (Address: 0x10042174)
CreateMutexExW (Address: 0x100421b0)
CreateSemaphoreExW (Address: 0x1004218c)
DeleteCriticalSection (Address: 0x1004219c)
EnterCriticalSection (Address: 0x100421a0)
InitializeCriticalSectionEx (Address: 0x10042198)
InitializeSRWLock (Address: 0x100421a8)
LeaveCriticalSection (Address: 0x100421a4)
OpenSemaphoreW (Address: 0x100421b4)
ReleaseMutex (Address: 0x10042194)
ReleaseSemaphore (Address: 0x1004216c)
ReleaseSRWLockExclusive (Address: 0x10042170)
ReleaseSRWLockShared (Address: 0x10042188)
ResetEvent (Address: 0x10042184)
SetEvent (Address: 0x10042178)
WaitForSingleObject (Address: 0x10042190)
WaitForSingleObjectEx (Address: 0x100421ac)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100421c4)
InitOnceComplete (Address: 0x100421c0)
InitOnceExecuteOnce (Address: 0x100421bc)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100421cc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100421dc)
CreateThreadpoolTimer (Address: 0x100421e0)
SetThreadpoolTimer (Address: 0x100421d8)
WaitForThreadpoolTimerCallbacks (Address: 0x100421d4)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100421ec)
EncodePointer (Address: 0x100421e8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100421f8)
RoOriginateError (Address: 0x10042204)
RoOriginateErrorW (Address: 0x100421fc)
RoTransformError (Address: 0x100421f4)
SetRestrictedErrorInfo (Address: 0x10042200)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1004220c)
RoGetMatchingRestrictedErrorInfo (Address: 0x10042214)
RoReportFailedDelegate (Address: 0x10042210)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1004221c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsConcatString (Address: 0x10042224)
WindowsCreateString (Address: 0x10042238)
WindowsCreateStringReference (Address: 0x10042234)
WindowsDeleteString (Address: 0x10042230)
WindowsDuplicateString (Address: 0x1004222c)
WindowsGetStringLen (Address: 0x10042228)
WindowsGetStringRawBuffer (Address: 0x1004223c)
WindowsIsStringEmpty (Address: 0x10042244)
WindowsStringHasEmbeddedNull (Address: 0x10042240)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100422b8)
__std_terminate (Address: 0x100422b4)
_CxxThrowException (Address: 0x100422b0)
_except_handler4_common (Address: 0x10042288)
_o___std_exception_copy (Address: 0x100422ac)
_o___std_exception_destroy (Address: 0x100422a8)
_o___std_type_info_destroy_list (Address: 0x100422a4)
_o___stdio_common_vsnprintf_s (Address: 0x10042298)
_o___stdio_common_vswprintf (Address: 0x10042294)
_o__callnewh (Address: 0x100422a0)
_o__cexit (Address: 0x1004229c)
_o__configure_narrow_argv (Address: 0x1004228c)
_o__crt_atexit (Address: 0x10042290)
_o__errno (Address: 0x1004224c)
_o__execute_onexit_table (Address: 0x10042250)
_o__get_errno (Address: 0x10042254)
_o__initialize_narrow_environment (Address: 0x10042258)
_o__initialize_onexit_table (Address: 0x1004225c)
_o__invalid_parameter_noinfo (Address: 0x10042260)
_o__purecall (Address: 0x10042264)
_o__register_onexit_function (Address: 0x10042268)
_o__seh_filter_dll (Address: 0x1004226c)
_o__set_errno (Address: 0x10042270)
_o_free (Address: 0x10042278)
_o_malloc (Address: 0x1004227c)
_o_realloc (Address: 0x10042280)
_o_terminate (Address: 0x10042284)
memcmp (Address: 0x100422bc)
memcpy (Address: 0x100422c0)
memmove (Address: 0x10042274)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100422cc)
_initterm_e (Address: 0x100422c8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100422d4)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100422dc)
EventSetInformation (Address: 0x100422e0)
EventUnregister (Address: 0x100422e8)
EventWriteTransfer (Address: 0x100422e4)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

IsGUIThread (Address: 0x100422f0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x100422f8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x10042300)
SHTaskPoolQueueTask (Address: 0x10042304)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThreadWithHandle (Address: 0x1004230c)

USER32.dll

DeleteMenu (Address: 0x10042000)
GetSystemMenu (Address: 0x10042004)