wincredui.dll

Description: Credential Manager User Internal Interface

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 5305a46b61ad6caa373c837a25976fcf

File Size: 161.0 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CredUIInternalCmdLinePromptForCredentialsA (Ordinal: 1, Address: 0xd480)
  • CredUIInternalCmdLinePromptForCredentialsW (Ordinal: 2, Address: 0xd430)
  • CredUIInternalConfirmCredentialsA (Ordinal: 3, Address: 0xd3c0)
  • CredUIInternalConfirmCredentialsW (Ordinal: 4, Address: 0xd390)
  • CredUIInternalInitControls (Ordinal: 5, Address: 0xd040)
  • CredUIInternalPromptForCredentialsA (Ordinal: 6, Address: 0xb8c0)
  • CredUIInternalPromptForCredentialsW (Ordinal: 7, Address: 0xb820)
  • CredUIInternalPromptForWindowsCredentialsA (Ordinal: 8, Address: 0xd030)
  • CredUIInternalPromptForWindowsCredentialsW (Ordinal: 9, Address: 0xcf60)
  • CredUIInternalPromptForWindowsCredentialsWorker (Ordinal: 10, Address: 0xc6c0)
  • DllCanUnloadNow (Ordinal: 11, Address: 0xd190)
  • DllGetClassObject (Ordinal: 12, Address: 0xd1b0)
  • DllRegisterServer (Ordinal: 13, Address: 0xd250)
  • DllUnregisterServer (Ordinal: 14, Address: 0xd330)

Imported DLLs & Functions

api-ms-win-core-console-l1-1-0.dll
  • GetConsoleMode (Address: 0x1002300c)
  • GetConsoleOutputCP (Address: 0x10023004)
  • ReadConsoleW (Address: 0x10023008)
  • SetConsoleMode (Address: 0x10023010)
  • WriteConsoleW (Address: 0x10023000)
api-ms-win-core-console-l1-2-0.dll
  • PeekConsoleInputW (Address: 0x10023018)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10023028)
  • IsDebuggerPresent (Address: 0x10023024)
  • OutputDebugStringW (Address: 0x10023020)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10023030)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10023038)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10023044)
  • RaiseException (Address: 0x10023040)
  • SetLastError (Address: 0x1002304c)
  • SetUnhandledExceptionFilter (Address: 0x10023050)
  • UnhandledExceptionFilter (Address: 0x10023048)
api-ms-win-core-file-l1-1-0.dll
  • GetFileType (Address: 0x10023058)
  • WriteFile (Address: 0x1002305c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10023064)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002306c)
  • HeapAlloc (Address: 0x10023078)
  • HeapFree (Address: 0x10023074)
  • HeapReAlloc (Address: 0x10023070)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x10023080)
  • LocalFree (Address: 0x10023084)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x100230a4)
  • FreeLibrary (Address: 0x100230ac)
  • GetModuleFileNameA (Address: 0x1002309c)
  • GetModuleFileNameW (Address: 0x1002308c)
  • GetModuleHandleExW (Address: 0x100230b0)
  • GetModuleHandleW (Address: 0x10023090)
  • GetProcAddress (Address: 0x10023098)
  • LoadLibraryExA (Address: 0x100230a8)
  • LoadLibraryExW (Address: 0x100230a0)
  • LoadStringW (Address: 0x10023094)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100230bc)
  • GetThreadUILanguage (Address: 0x100230b8)
  • SetThreadUILanguage (Address: 0x100230c0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsA (Address: 0x100230c8)
  • GetStdHandle (Address: 0x100230cc)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x100230fc)
  • GetCurrentProcess (Address: 0x100230e0)
  • GetCurrentProcessId (Address: 0x100230dc)
  • GetCurrentThread (Address: 0x100230e8)
  • GetCurrentThreadId (Address: 0x100230d8)
  • GetExitCodeThread (Address: 0x100230f8)
  • GetProcessId (Address: 0x10023100)
  • OpenProcessToken (Address: 0x100230e4)
  • OpenThreadToken (Address: 0x100230ec)
  • ProcessIdToSessionId (Address: 0x100230f4)
  • ResumeThread (Address: 0x100230f0)
  • TerminateProcess (Address: 0x100230d4)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x10023108)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10023110)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x10023118)
api-ms-win-core-quirks-l1-1-0.dll
  • QuirkIsEnabled (Address: 0x10023120)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x10023140)
  • RegCreateKeyExW (Address: 0x1002313c)
  • RegDeleteKeyExW (Address: 0x10023138)
  • RegEnumKeyExW (Address: 0x10023128)
  • RegGetValueW (Address: 0x10023130)
  • RegOpenKeyExA (Address: 0x1002314c)
  • RegOpenKeyExW (Address: 0x10023134)
  • RegQueryInfoKeyW (Address: 0x10023148)
  • RegQueryValueExA (Address: 0x10023144)
  • RegQueryValueExW (Address: 0x10023150)
  • RegSetValueExW (Address: 0x1002312c)
api-ms-win-core-rtlsupport-l1-2-0.dll
  • RtlCompareMemory (Address: 0x10023158)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x10023160)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x10023174)
  • CreateActCtxW (Address: 0x10023168)
  • DeactivateActCtx (Address: 0x10023170)
  • ReleaseActCtx (Address: 0x1002316c)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10023180)
  • MultiByteToWideChar (Address: 0x1002317c)
  • WideCharToMultiByte (Address: 0x10023184)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpW (Address: 0x1002318c)
  • lstrlenW (Address: 0x10023190)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100231a0)
  • AcquireSRWLockShared (Address: 0x100231a8)
  • CreateEventW (Address: 0x10023198)
  • CreateMutexExW (Address: 0x100231cc)
  • CreateSemaphoreExW (Address: 0x100231d8)
  • DeleteCriticalSection (Address: 0x100231c0)
  • EnterCriticalSection (Address: 0x100231b4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100231bc)
  • InitializeCriticalSectionEx (Address: 0x100231c8)
  • LeaveCriticalSection (Address: 0x100231dc)
  • OpenSemaphoreW (Address: 0x100231b8)
  • ReleaseMutex (Address: 0x100231d0)
  • ReleaseSemaphore (Address: 0x100231e0)
  • ReleaseSRWLockExclusive (Address: 0x100231a4)
  • ReleaseSRWLockShared (Address: 0x100231ac)
  • SetEvent (Address: 0x1002319c)
  • WaitForMultipleObjectsEx (Address: 0x100231b0)
  • WaitForSingleObject (Address: 0x100231c4)
  • WaitForSingleObjectEx (Address: 0x100231d4)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100231f0)
  • InitOnceComplete (Address: 0x100231e8)
  • Sleep (Address: 0x100231ec)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x100231f8)
  • GetSystemTimeAsFileTime (Address: 0x10023200)
  • GetTickCount (Address: 0x100231fc)
  • GetVersionExW (Address: 0x10023204)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x10023218)
  • CreateThreadpoolTimer (Address: 0x10023210)
  • SetThreadpoolTimer (Address: 0x1002320c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10023214)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x10023230)
  • EventRegister (Address: 0x1002322c)
  • EventSetInformation (Address: 0x10023224)
  • EventUnregister (Address: 0x10023228)
  • EventWriteTransfer (Address: 0x10023220)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x10023240)
  • EqualSid (Address: 0x10023258)
  • FreeSid (Address: 0x10023238)
  • GetSidIdentifierAuthority (Address: 0x10023248)
  • GetSidLengthRequired (Address: 0x10023250)
  • GetSidSubAuthority (Address: 0x10023244)
  • GetSidSubAuthorityCount (Address: 0x10023254)
  • GetTokenInformation (Address: 0x1002323c)
  • InitializeSid (Address: 0x1002324c)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x100232c0)
  • __dllonexit (Address: 0x100232b8)
  • __iob_func (Address: 0x100232a0)
  • _amsg_exit (Address: 0x1002326c)
  • _callnewh (Address: 0x10023264)
  • _except_handler4_common (Address: 0x100232c4)
  • _initterm (Address: 0x10023274)
  • _lock (Address: 0x10023278)
  • _onexit (Address: 0x100232bc)
  • _purecall (Address: 0x10023294)
  • _resetstkoflw (Address: 0x10023290)
  • _unlock (Address: 0x100232b4)
  • _vsnwprintf (Address: 0x10023270)
  • _wcsicmp (Address: 0x10023298)
  • _wcsnicmp (Address: 0x100232a8)
  • _XcptFilter (Address: 0x10023260)
  • fputs (Address: 0x1002328c)
  • free (Address: 0x10023268)
  • malloc (Address: 0x100232d8)
  • memcmp (Address: 0x100232c8)
  • memcpy (Address: 0x100232cc)
  • memcpy_s (Address: 0x100232d4)
  • memmove (Address: 0x100232d0)
  • memmove_s (Address: 0x1002329c)
  • memset (Address: 0x100232dc)
  • putchar (Address: 0x100232b0)
  • toupper (Address: 0x10023284)
  • wcschr (Address: 0x1002327c)
  • wcscpy_s (Address: 0x100232a4)
  • wcsrchr (Address: 0x10023280)
  • wcsstr (Address: 0x100232ac)
  • wcstol (Address: 0x10023288)
ntdll.dll
  • EtwEventRegister (Address: 0x100232e8)
  • EtwEventUnregister (Address: 0x10023308)
  • EtwEventWrite (Address: 0x100232e4)
  • NtQueryInformationToken (Address: 0x100232f0)
  • RtlAllocateHeap (Address: 0x100232f4)
  • RtlCompareUnicodeString (Address: 0x100232fc)
  • RtlFreeHeap (Address: 0x100232ec)
  • RtlInitString (Address: 0x10023304)
  • RtlInitUnicodeString (Address: 0x10023300)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x100232f8)
ole32.dll
  • CreateBindCtx (Address: 0x10023314)
  • MkParseDisplayName (Address: 0x10023310)