ConsoleLogon.dll

Description: Console Logon User Experience

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: 83538f2aab3ed6b6dc26778dd68c1408

File Size: 379.5 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x2070)
DllGetActivationFactory (Ordinal: 2, Address: 0x1d90)
DllGetClassObject (Ordinal: 3, Address: 0x1f70)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18004e998)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18004e9b0)
CoCreateInstance (Address: 0x18004e9c0)
CoGetInterfaceAndReleaseStream (Address: 0x18004e9f8)
CoGetMalloc (Address: 0x18004e9c8)
CoMarshalInterface (Address: 0x18004e9f0)
CoReleaseMarshalData (Address: 0x18004e9e0)
CoTaskMemAlloc (Address: 0x18004e9a8)
CoTaskMemFree (Address: 0x18004e9b8)
CoTaskMemRealloc (Address: 0x18004e9d8)
CoWaitForMultipleHandles (Address: 0x18004e9d0)
CreateStreamOnHGlobal (Address: 0x18004e9e8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18004ea08)

api-ms-win-core-console-l1-1-0.dll

AllocConsole (Address: 0x18004ea20)
ReadConsoleInputW (Address: 0x18004ea18)

api-ms-win-core-console-l1-2-0.dll

AttachConsole (Address: 0x18004ea40)
FreeConsole (Address: 0x18004ea30)
PeekConsoleInputW (Address: 0x18004ea38)

api-ms-win-core-console-l2-1-0.dll

CreateConsoleScreenBuffer (Address: 0x18004ea58)
FillConsoleOutputAttribute (Address: 0x18004ea78)
FillConsoleOutputCharacterW (Address: 0x18004ea70)
GetConsoleScreenBufferInfo (Address: 0x18004ea60)
ReadConsoleOutputA (Address: 0x18004ea90)
ScrollConsoleScreenBufferW (Address: 0x18004ea98)
SetConsoleActiveScreenBuffer (Address: 0x18004ea68)
SetConsoleCursorInfo (Address: 0x18004ea80)
SetConsoleCursorPosition (Address: 0x18004ea88)
SetConsoleOutputCP (Address: 0x18004ea50)
WriteConsoleOutputCharacterW (Address: 0x18004eaa0)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x18004eab0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004eac0)
IsDebuggerPresent (Address: 0x18004eac8)
OutputDebugStringW (Address: 0x18004ead0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004eae0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004eaf0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004eb18)
RaiseException (Address: 0x18004eb20)
SetLastError (Address: 0x18004eb00)
SetUnhandledExceptionFilter (Address: 0x18004eb10)
UnhandledExceptionFilter (Address: 0x18004eb08)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004eb30)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004eb40)
HeapAlloc (Address: 0x18004eb48)
HeapFree (Address: 0x18004eb50)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18004eb60)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18004eb98)
FindResourceExW (Address: 0x18004eb70)
GetModuleFileNameA (Address: 0x18004eb90)
GetModuleHandleExW (Address: 0x18004eba0)
GetModuleHandleW (Address: 0x18004eb80)
GetProcAddress (Address: 0x18004eba8)
LoadResource (Address: 0x18004eb78)
LockResource (Address: 0x18004eb88)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004ebc8)
GetLocaleInfoEx (Address: 0x18004ebd0)
GetThreadUILanguage (Address: 0x18004ebc0)
SetThreadUILanguage (Address: 0x18004ebb8)

api-ms-win-core-processenvironment-l1-1-0.dll

GetStdHandle (Address: 0x18004ebe0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004ec10)
GetCurrentProcessId (Address: 0x18004ebf8)
GetCurrentThreadId (Address: 0x18004ec00)
OpenProcessToken (Address: 0x18004ec08)
TerminateProcess (Address: 0x18004ebf0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18004ec20)
OpenProcess (Address: 0x18004ec28)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004ec38)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x18004ec48)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004ec68)
RtlLookupFunctionEntry (Address: 0x18004ec58)
RtlVirtualUnwind (Address: 0x18004ec60)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004ec88)
AcquireSRWLockShared (Address: 0x18004eca8)
CreateEventExW (Address: 0x18004ec98)
CreateMutexExW (Address: 0x18004ece8)
CreateSemaphoreExW (Address: 0x18004ec80)
DeleteCriticalSection (Address: 0x18004ecc0)
EnterCriticalSection (Address: 0x18004ecc8)
InitializeCriticalSectionEx (Address: 0x18004ecb8)
InitializeSRWLock (Address: 0x18004ece0)
LeaveCriticalSection (Address: 0x18004ecd0)
OpenSemaphoreW (Address: 0x18004ecf0)
ReleaseMutex (Address: 0x18004ed00)
ReleaseSemaphore (Address: 0x18004ecd8)
ReleaseSRWLockExclusive (Address: 0x18004ec78)
ReleaseSRWLockShared (Address: 0x18004ecb0)
ResetEvent (Address: 0x18004ec90)
SetEvent (Address: 0x18004eca0)
WaitForSingleObject (Address: 0x18004ed08)
WaitForSingleObjectEx (Address: 0x18004ecf8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18004ed28)
InitOnceComplete (Address: 0x18004ed18)
InitOnceExecuteOnce (Address: 0x18004ed20)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18004ed38)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004ed58)
CreateThreadpoolTimer (Address: 0x18004ed50)
SetThreadpoolTimer (Address: 0x18004ed60)
WaitForThreadpoolTimerCallbacks (Address: 0x18004ed48)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18004ed70)
EncodePointer (Address: 0x18004ed78)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18004ed90)
RoOriginateError (Address: 0x18004eda8)
RoOriginateErrorW (Address: 0x18004ed98)
RoTransformError (Address: 0x18004ed88)
SetRestrictedErrorInfo (Address: 0x18004eda0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18004edc0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18004edb8)
RoReportFailedDelegate (Address: 0x18004edc8)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18004edd8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsConcatString (Address: 0x18004ede8)
WindowsCreateString (Address: 0x18004ee10)
WindowsCreateStringReference (Address: 0x18004ee08)
WindowsDeleteString (Address: 0x18004ee00)
WindowsDuplicateString (Address: 0x18004edf8)
WindowsGetStringLen (Address: 0x18004edf0)
WindowsGetStringRawBuffer (Address: 0x18004ee18)
WindowsIsStringEmpty (Address: 0x18004ee28)
WindowsStringHasEmbeddedNull (Address: 0x18004ee20)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18004eea0)
__CxxFrameHandler3 (Address: 0x18004eef8)
__CxxFrameHandler4 (Address: 0x18004ef18)
__std_terminate (Address: 0x18004ef10)
_CxxThrowException (Address: 0x18004eef0)
_o___std_exception_copy (Address: 0x18004eed8)
_o___std_exception_destroy (Address: 0x18004eed0)
_o___std_type_info_destroy_list (Address: 0x18004eea8)
_o___stdio_common_vsnprintf_s (Address: 0x18004ef08)
_o___stdio_common_vswprintf (Address: 0x18004eee8)
_o__callnewh (Address: 0x18004eec0)
_o__cexit (Address: 0x18004eeb0)
_o__configure_narrow_argv (Address: 0x18004ef00)
_o__crt_atexit (Address: 0x18004eee0)
_o__errno (Address: 0x18004eec8)
_o__execute_onexit_table (Address: 0x18004eeb8)
_o__get_errno (Address: 0x18004ee38)
_o__initialize_narrow_environment (Address: 0x18004ee40)
_o__initialize_onexit_table (Address: 0x18004ee48)
_o__invalid_parameter_noinfo (Address: 0x18004ee50)
_o__purecall (Address: 0x18004ee58)
_o__register_onexit_function (Address: 0x18004ee60)
_o__seh_filter_dll (Address: 0x18004ee68)
_o__set_errno (Address: 0x18004ee70)
_o_free (Address: 0x18004ee80)
_o_malloc (Address: 0x18004ee88)
_o_realloc (Address: 0x18004ee90)
_o_terminate (Address: 0x18004ee98)
memcmp (Address: 0x18004ef20)
memcpy (Address: 0x18004ef28)
memmove (Address: 0x18004ee78)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18004ef40)
_initterm_e (Address: 0x18004ef38)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18004ef50)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18004ef60)
EventSetInformation (Address: 0x18004ef68)
EventUnregister (Address: 0x18004ef78)
EventWriteTransfer (Address: 0x18004ef70)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

IsGUIThread (Address: 0x18004ef88)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18004ef98)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18004efb0)
SHTaskPoolQueueTask (Address: 0x18004efa8)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThreadWithHandle (Address: 0x18004efc0)

USER32.dll

DeleteMenu (Address: 0x18004e980)
GetSystemMenu (Address: 0x18004e988)