webauthn.dll

Description: Web Authentication

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6093

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7f02021d2f1765373301068bd1508f9f

File Size: 409.0 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CryptsvcDllCtrl (Ordinal: 1, Address: 0x211b0)
  • I_WebAuthNCtapDecodeGetAssertionRpcResponse (Ordinal: 2, Address: 0x12c20)
  • I_WebAuthNCtapDecodeMakeCredentialRpcResponse (Ordinal: 3, Address: 0x110b0)
  • I_WebAuthNCtapEncodeGetAssertionRpcRequest (Ordinal: 4, Address: 0x127e0)
  • I_WebAuthNCtapEncodeMakeCredentialRpcRequest (Ordinal: 5, Address: 0x10da0)
  • VirtualChannelGetInstance (Ordinal: 6, Address: 0x21550)
  • WebAuthNAuthenticatorGetAssertion (Ordinal: 7, Address: 0x195e0)
  • WebAuthNAuthenticatorMakeCredential (Ordinal: 8, Address: 0x19020)
  • WebAuthNCancelCurrentOperation (Ordinal: 9, Address: 0x19b30)
  • WebAuthNCtapChangeClientPin (Ordinal: 10, Address: 0x120e0)
  • WebAuthNCtapChangeClientPinForSelectedDevice (Ordinal: 11, Address: 0x138f0)
  • WebAuthNCtapFreeSelectedDeviceInformation (Ordinal: 12, Address: 0x13200)
  • WebAuthNCtapGetAssertion (Ordinal: 13, Address: 0x13220)
  • WebAuthNCtapGetSupportedTransports (Ordinal: 14, Address: 0x14a60)
  • WebAuthNCtapGetWnfLocalizedString (Ordinal: 15, Address: 0x179c0)
  • WebAuthNCtapIsStopSendCommandError (Ordinal: 16, Address: 0x143b0)
  • WebAuthNCtapMakeCredential (Ordinal: 17, Address: 0x12290)
  • WebAuthNCtapManageAuthenticatePin (Ordinal: 18, Address: 0x16b50)
  • WebAuthNCtapManageCancelEnrollFingerprint (Ordinal: 19, Address: 0x170a0)
  • WebAuthNCtapManageChangePin (Ordinal: 20, Address: 0x16d30)
  • WebAuthNCtapManageClose (Ordinal: 21, Address: 0x163a0)
  • WebAuthNCtapManageDeleteCredential (Ordinal: 22, Address: 0x17940)
  • WebAuthNCtapManageEnrollFingerprint (Ordinal: 23, Address: 0x16e80)
  • WebAuthNCtapManageFreeDisplayCredentials (Ordinal: 24, Address: 0x174b0)
  • WebAuthNCtapManageGetDisplayCredentials (Ordinal: 25, Address: 0x17500)
  • WebAuthNCtapManageRemoveFingerprints (Ordinal: 26, Address: 0x17150)
  • WebAuthNCtapManageResetDevice (Ordinal: 27, Address: 0x16960)
  • WebAuthNCtapManageSelect (Ordinal: 28, Address: 0x168a0)
  • WebAuthNCtapManageSetPin (Ordinal: 29, Address: 0x16c50)
  • WebAuthNCtapParseAuthenticatorData (Ordinal: 30, Address: 0x13cc0)
  • WebAuthNCtapResetDevice (Ordinal: 31, Address: 0x12220)
  • WebAuthNCtapRpcGetAssertionUserList (Ordinal: 32, Address: 0x14520)
  • WebAuthNCtapRpcGetCborCommand (Ordinal: 33, Address: 0x14400)
  • WebAuthNCtapRpcSelectGetAssertion (Ordinal: 34, Address: 0x14840)
  • WebAuthNCtapSendCommand (Ordinal: 35, Address: 0x13d50)
  • WebAuthNCtapSetClientPin (Ordinal: 36, Address: 0x12000)
  • WebAuthNCtapStartDeviceChangeNotify (Ordinal: 37, Address: 0x14d50)
  • WebAuthNCtapStopDeviceChangeNotify (Ordinal: 38, Address: 0x14d60)
  • WebAuthNCtapVerifyGetAssertion (Ordinal: 39, Address: 0x13b30)
  • WebAuthNDecodeAccountInformation (Ordinal: 40, Address: 0x1e840)
  • WebAuthNDeletePlatformCredential (Ordinal: 41, Address: 0x1e8d0)
  • WebAuthNEncodeAccountInformation (Ordinal: 42, Address: 0x1e7b0)
  • WebAuthNFreeAssertion (Ordinal: 43, Address: 0x13200)
  • WebAuthNFreeCredentialAttestation (Ordinal: 44, Address: 0x10d50)
  • WebAuthNFreeDecodedAccountInformation (Ordinal: 45, Address: 0x13200)
  • WebAuthNFreeEncodedAccountInformation (Ordinal: 46, Address: 0x13200)
  • WebAuthNFreePlatformCredentials (Ordinal: 47, Address: 0x174b0)
  • WebAuthNFreeUserEntityList (Ordinal: 48, Address: 0x13200)
  • WebAuthNGetApiVersionNumber (Ordinal: 49, Address: 0x19c30)
  • WebAuthNGetCancellationId (Ordinal: 50, Address: 0x19b00)
  • WebAuthNGetCoseAlgorithmIdentifier (Ordinal: 51, Address: 0x18f40)
  • WebAuthNGetCredentialIdFromAuthenticatorData (Ordinal: 52, Address: 0x14d70)
  • WebAuthNGetErrorName (Ordinal: 53, Address: 0x14350)
  • WebAuthNGetPlatformCredentials (Ordinal: 54, Address: 0x1ed60)
  • WebAuthNGetW3CExceptionDOMError (Ordinal: 55, Address: 0x14380)
  • WebAuthNIsUserVerifyingPlatformAuthenticatorAvailable (Ordinal: 56, Address: 0x1e6b0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x10057000)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatA (Address: 0x1005700c)
  • GetTimeFormatA (Address: 0x10057008)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1005701c)
  • IsDebuggerPresent (Address: 0x10057018)
  • OutputDebugStringA (Address: 0x10057014)
  • OutputDebugStringW (Address: 0x10057020)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10057028)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10057030)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10057044)
  • RaiseException (Address: 0x10057048)
  • SetLastError (Address: 0x10057038)
  • SetUnhandledExceptionFilter (Address: 0x1005703c)
  • UnhandledExceptionFilter (Address: 0x10057040)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x10057050)
  • CreateFileW (Address: 0x10057058)
  • GetFileSize (Address: 0x10057054)
  • ReadFile (Address: 0x1005705c)
  • SetEndOfFile (Address: 0x10057064)
  • SetFilePointer (Address: 0x10057060)
  • WriteFile (Address: 0x10057068)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10057070)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10057078)
  • HeapAlloc (Address: 0x10057080)
  • HeapFree (Address: 0x1005707c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1005708c)
  • LocalFree (Address: 0x10057090)
  • LocalReAlloc (Address: 0x10057088)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalSize (Address: 0x10057098)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x100570a0)
api-ms-win-core-io-l1-1-0.dll
  • CancelIoEx (Address: 0x100570a8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • GetModuleFileNameA (Address: 0x100570b0)
  • GetModuleHandleExW (Address: 0x100570b8)
  • GetModuleHandleW (Address: 0x100570c0)
  • GetProcAddress (Address: 0x100570b4)
  • LoadStringW (Address: 0x100570bc)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100570c8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100570d0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100570ec)
  • GetCurrentProcessId (Address: 0x100570d8)
  • GetCurrentThread (Address: 0x100570e0)
  • GetCurrentThreadId (Address: 0x100570e4)
  • OpenProcessToken (Address: 0x100570e8)
  • OpenThreadToken (Address: 0x100570f0)
  • SetThreadToken (Address: 0x100570dc)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x100570f8)
  • OpenProcess (Address: 0x100570fc)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x10057104)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1005710c)
  • RegCreateKeyExW (Address: 0x10057114)
  • RegDeleteKeyExW (Address: 0x10057130)
  • RegDeleteValueA (Address: 0x10057124)
  • RegGetValueA (Address: 0x1005712c)
  • RegGetValueW (Address: 0x1005711c)
  • RegOpenKeyExW (Address: 0x10057120)
  • RegQueryValueExW (Address: 0x10057110)
  • RegSetValueExA (Address: 0x10057128)
  • RegSetValueExW (Address: 0x10057118)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10057138)
  • MultiByteToWideChar (Address: 0x10057140)
  • WideCharToMultiByte (Address: 0x1005713c)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10057158)
  • AcquireSRWLockShared (Address: 0x10057148)
  • CreateEventExW (Address: 0x1005718c)
  • CreateEventW (Address: 0x1005719c)
  • CreateMutexExW (Address: 0x1005714c)
  • CreateSemaphoreExW (Address: 0x10057170)
  • DeleteCriticalSection (Address: 0x10057164)
  • EnterCriticalSection (Address: 0x10057188)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10057178)
  • InitializeCriticalSectionEx (Address: 0x1005717c)
  • InitializeSRWLock (Address: 0x1005715c)
  • LeaveCriticalSection (Address: 0x10057180)
  • OpenEventW (Address: 0x10057194)
  • OpenSemaphoreW (Address: 0x10057150)
  • ReleaseMutex (Address: 0x10057168)
  • ReleaseSemaphore (Address: 0x10057184)
  • ReleaseSRWLockExclusive (Address: 0x10057160)
  • ReleaseSRWLockShared (Address: 0x10057198)
  • ResetEvent (Address: 0x10057174)
  • SetEvent (Address: 0x10057190)
  • WaitForSingleObject (Address: 0x1005716c)
  • WaitForSingleObjectEx (Address: 0x10057154)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x100571a8)
  • Sleep (Address: 0x100571a4)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x100571b0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x100571bc)
  • GetSystemTimeAsFileTime (Address: 0x100571b8)
  • GetTickCount64 (Address: 0x100571c4)
  • GetVersionExW (Address: 0x100571c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100571f0)
  • CloseThreadpoolWait (Address: 0x100571d4)
  • CreateThreadpoolTimer (Address: 0x100571dc)
  • CreateThreadpoolWait (Address: 0x100571e8)
  • FreeLibraryWhenCallbackReturns (Address: 0x100571d0)
  • SetThreadpoolTimer (Address: 0x100571e0)
  • SetThreadpoolWait (Address: 0x100571e4)
  • TrySubmitThreadpoolCallback (Address: 0x100571cc)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100571d8)
  • WaitForThreadpoolWaitCallbacks (Address: 0x100571ec)
api-ms-win-core-timezone-l1-1-0.dll
  • SystemTimeToFileTime (Address: 0x100571f8)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1005728c)
  • __std_terminate (Address: 0x10057288)
  • _CxxThrowException (Address: 0x10057260)
  • _except_handler4_common (Address: 0x1005725c)
  • _o___acrt_iob_func (Address: 0x10057274)
  • _o___std_exception_copy (Address: 0x1005722c)
  • _o___std_exception_destroy (Address: 0x1005729c)
  • _o___std_type_info_destroy_list (Address: 0x10057294)
  • _o___stdio_common_vfprintf (Address: 0x10057290)
  • _o___stdio_common_vfwprintf_s (Address: 0x10057284)
  • _o___stdio_common_vsnprintf_s (Address: 0x10057280)
  • _o___stdio_common_vsprintf (Address: 0x1005727c)
  • _o___stdio_common_vswprintf (Address: 0x10057278)
  • _o__callnewh (Address: 0x10057268)
  • _o__cexit (Address: 0x10057264)
  • _o__configure_narrow_argv (Address: 0x10057200)
  • _o__crt_atexit (Address: 0x10057204)
  • _o__errno (Address: 0x10057208)
  • _o__execute_onexit_table (Address: 0x1005720c)
  • _o__initialize_narrow_environment (Address: 0x10057210)
  • _o__initialize_onexit_table (Address: 0x10057214)
  • _o__invalid_parameter_noinfo (Address: 0x10057218)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1005721c)
  • _o__purecall (Address: 0x10057220)
  • _o__register_onexit_function (Address: 0x10057224)
  • _o__seh_filter_dll (Address: 0x10057228)
  • _o__wcsicmp (Address: 0x10057234)
  • _o__wcsnicmp (Address: 0x10057238)
  • _o__wcstoui64 (Address: 0x1005723c)
  • _o_free (Address: 0x10057240)
  • _o_iswspace (Address: 0x10057244)
  • _o_malloc (Address: 0x10057248)
  • _o_qsort (Address: 0x1005724c)
  • _o_towlower (Address: 0x10057250)
  • _o_towupper (Address: 0x10057254)
  • _o_wcstoul (Address: 0x10057258)
  • memcmp (Address: 0x10057298)
  • memcpy (Address: 0x100572a0)
  • memmove (Address: 0x10057230)
  • wcsrchr (Address: 0x1005726c)
  • wcsstr (Address: 0x10057270)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100572a8)
  • _initterm_e (Address: 0x100572ac)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x100572b8)
  • wcscspn (Address: 0x100572b4)
  • wcsncmp (Address: 0x100572bc)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100572d4)
  • EventRegister (Address: 0x100572cc)
  • EventSetInformation (Address: 0x100572c8)
  • EventUnregister (Address: 0x100572c4)
  • EventWriteTransfer (Address: 0x100572d0)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x100572e4)
  • BCryptCreateHash (Address: 0x1005731c)
  • BCryptDecrypt (Address: 0x10057328)
  • BCryptDeriveKey (Address: 0x100572f8)
  • BCryptDestroyHash (Address: 0x1005730c)
  • BCryptDestroyKey (Address: 0x10057324)
  • BCryptDestroySecret (Address: 0x10057310)
  • BCryptEncrypt (Address: 0x10057320)
  • BCryptExportKey (Address: 0x100572f0)
  • BCryptFinalizeKeyPair (Address: 0x100572ec)
  • BCryptFinishHash (Address: 0x10057314)
  • BCryptGenerateKeyPair (Address: 0x100572e0)
  • BCryptGenerateSymmetricKey (Address: 0x10057304)
  • BCryptHashData (Address: 0x10057318)
  • BCryptImportKeyPair (Address: 0x100572e8)
  • BCryptOpenAlgorithmProvider (Address: 0x10057308)
  • BCryptSecretAgreement (Address: 0x100572f4)
  • BCryptSetProperty (Address: 0x100572fc)
  • BCryptSignHash (Address: 0x10057300)
  • BCryptVerifySignature (Address: 0x100572dc)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10057330)
ntdll.dll
  • NtQueryInformationToken (Address: 0x1005733c)
  • NtTerminateProcess (Address: 0x1005734c)
  • RtlCompareUnicodeString (Address: 0x10057338)
  • RtlIsMultiSessionSku (Address: 0x10057348)
  • RtlPublishWnfStateData (Address: 0x10057344)
  • RtlUnhandledExceptionFilter (Address: 0x10057340)