Windows.Security.Credentials.UI.CredentialPicker.dll

Description: WinRT Credential Picker Server

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 957a2b9635ea47c1e923c2f16934c896

File Size: 85.9 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 20

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x47f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x4850)
DllGetClassObject (Ordinal: 3, Address: 0x4870)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x10012084)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x100120a8)
CoCreateGuid (Address: 0x1001209c)
CoCreateInstance (Address: 0x10012094)
CoGetCallContext (Address: 0x1001208c)
CoGetCallerTID (Address: 0x100120ac)
CoGetMalloc (Address: 0x10012098)
CoImpersonateClient (Address: 0x100120a0)
CoRevertToSelf (Address: 0x10012090)
CoTaskMemAlloc (Address: 0x100120b0)
CoTaskMemFree (Address: 0x100120a4)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x10012118)
CStdStubBuffer2_CountRefs (Address: 0x100120dc)
CStdStubBuffer2_Disconnect (Address: 0x100120c4)
CStdStubBuffer2_QueryInterface (Address: 0x100120d4)
NdrProxyForwardingFunction3 (Address: 0x10012124)
NdrProxyForwardingFunction4 (Address: 0x100120e4)
NdrProxyForwardingFunction5 (Address: 0x100120e8)
ObjectStublessClient10 (Address: 0x10012100)
ObjectStublessClient11 (Address: 0x100120e0)
ObjectStublessClient12 (Address: 0x10012104)
ObjectStublessClient13 (Address: 0x100120cc)
ObjectStublessClient14 (Address: 0x100120f8)
ObjectStublessClient15 (Address: 0x100120bc)
ObjectStublessClient16 (Address: 0x10012114)
ObjectStublessClient17 (Address: 0x100120fc)
ObjectStublessClient18 (Address: 0x10012108)
ObjectStublessClient19 (Address: 0x100120d8)
ObjectStublessClient20 (Address: 0x100120b8)
ObjectStublessClient21 (Address: 0x10012120)
ObjectStublessClient22 (Address: 0x1001211c)
ObjectStublessClient23 (Address: 0x100120c0)
ObjectStublessClient24 (Address: 0x10012110)
ObjectStublessClient25 (Address: 0x1001210c)
ObjectStublessClient3 (Address: 0x100120d0)
ObjectStublessClient6 (Address: 0x100120ec)
ObjectStublessClient7 (Address: 0x100120c8)
ObjectStublessClient8 (Address: 0x100120f0)
ObjectStublessClient9 (Address: 0x100120f4)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x1001212c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1001213c)
IsDebuggerPresent (Address: 0x10012134)
OutputDebugStringW (Address: 0x10012138)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10012144)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1001214c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10012158)
RaiseException (Address: 0x10012154)
SetLastError (Address: 0x10012164)
SetUnhandledExceptionFilter (Address: 0x10012160)
UnhandledExceptionFilter (Address: 0x1001215c)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1001216c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10012174)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001217c)
HeapAlloc (Address: 0x10012184)
HeapFree (Address: 0x10012180)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10012190)
LocalFree (Address: 0x1001218c)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100121a4)
GetModuleFileNameA (Address: 0x1001219c)
GetModuleHandleExW (Address: 0x100121a0)
GetModuleHandleW (Address: 0x100121a8)
GetProcAddress (Address: 0x10012198)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100121b0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x100121c0)
VirtualProtect (Address: 0x100121bc)
VirtualQuery (Address: 0x100121b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100121c8)
GetCurrentProcessId (Address: 0x100121d8)
GetCurrentThread (Address: 0x100121d4)
GetCurrentThreadId (Address: 0x100121dc)
GetProcessId (Address: 0x100121e0)
OpenProcessToken (Address: 0x100121cc)
OpenThreadToken (Address: 0x100121e4)
SetThreadStackGuarantee (Address: 0x100121e8)
TerminateProcess (Address: 0x100121d0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100121f0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100121f8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10012200)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10012230)
AcquireSRWLockShared (Address: 0x10012208)
CreateEventExW (Address: 0x10012244)
CreateMutexExW (Address: 0x10012240)
CreateMutexW (Address: 0x1001222c)
CreateSemaphoreExW (Address: 0x1001220c)
DeleteCriticalSection (Address: 0x10012238)
InitializeCriticalSection (Address: 0x10012224)
OpenSemaphoreW (Address: 0x10012220)
ReleaseMutex (Address: 0x1001223c)
ReleaseSemaphore (Address: 0x10012210)
ReleaseSRWLockExclusive (Address: 0x10012218)
ReleaseSRWLockShared (Address: 0x10012214)
SetEvent (Address: 0x10012228)
WaitForSingleObject (Address: 0x10012234)
WaitForSingleObjectEx (Address: 0x1001221c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1001224c)
Sleep (Address: 0x10012250)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x10012260)
GetSystemTimeAsFileTime (Address: 0x1001225c)
GetTickCount (Address: 0x10012258)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x10012274)
CreateThreadpoolWork (Address: 0x1001226c)
FreeLibraryWhenCallbackReturns (Address: 0x10012270)
SubmitThreadpoolWork (Address: 0x10012268)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10012280)
EncodePointer (Address: 0x1001227c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10012294)
RoOriginateError (Address: 0x1001228c)
RoOriginateErrorW (Address: 0x10012290)
RoTransformError (Address: 0x10012288)
SetRestrictedErrorInfo (Address: 0x10012298)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x100122a4)
RoGetMatchingRestrictedErrorInfo (Address: 0x100122a0)
RoReportFailedDelegate (Address: 0x100122a8)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x100122b0)
RoInitialize (Address: 0x100122b4)
RoUninitialize (Address: 0x100122b8)

api-ms-win-core-winrt-robuffer-l1-1-0.dll

RoGetBufferMarshaler (Address: 0x100122c0)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x100122f0)
HSTRING_UserMarshal (Address: 0x100122f4)
HSTRING_UserSize (Address: 0x100122d8)
HSTRING_UserUnmarshal (Address: 0x100122cc)
WindowsCreateString (Address: 0x100122dc)
WindowsCreateStringReference (Address: 0x100122e0)
WindowsDeleteString (Address: 0x100122e4)
WindowsDuplicateString (Address: 0x100122e8)
WindowsGetStringLen (Address: 0x100122ec)
WindowsGetStringRawBuffer (Address: 0x100122c8)
WindowsIsStringEmpty (Address: 0x100122d4)
WindowsStringHasEmbeddedNull (Address: 0x100122d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x10012304)
EventSetInformation (Address: 0x10012308)
EventUnregister (Address: 0x100122fc)
EventWriteTransfer (Address: 0x10012300)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

GetWindowBand (Address: 0x10012310)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x10012318)
DuplicateTokenEx (Address: 0x1001232c)
GetLengthSid (Address: 0x10012328)
GetTokenInformation (Address: 0x1001231c)
ImpersonateLoggedOnUser (Address: 0x10012320)
RevertToSelf (Address: 0x10012324)

api-ms-win-security-credentials-l1-1-0.dll

CredFree (Address: 0x1001233c)
CredIsProtectedW (Address: 0x10012334)
CredReadW (Address: 0x10012338)

bcrypt.dll

BCryptGenRandom (Address: 0x10012344)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001234c)
__dllonexit (Address: 0x10012358)
_amsg_exit (Address: 0x10012368)
_callnewh (Address: 0x10012374)
_except_handler4_common (Address: 0x10012350)
_initterm (Address: 0x10012364)
_lock (Address: 0x10012360)
_onexit (Address: 0x10012384)
_purecall (Address: 0x10012378)
_unlock (Address: 0x1001235c)
_XcptFilter (Address: 0x1001236c)
free (Address: 0x10012380)
malloc (Address: 0x10012370)
memcmp (Address: 0x1001237c)
memcpy (Address: 0x10012354)
memset (Address: 0x10012388)

ncrypt.dll

NCryptCloseProtectionDescriptor (Address: 0x10012398)
NCryptCreateProtectionDescriptor (Address: 0x10012390)
NCryptProtectSecret (Address: 0x10012394)

ntdll.dll

_snwprintf_s (Address: 0x100123b0)
_vsnwprintf (Address: 0x100123cc)
memcpy_s (Address: 0x100123d0)
NtQueryInformationToken (Address: 0x100123c4)
RtlAllocateHeap (Address: 0x100123ac)
RtlCompareUnicodeString (Address: 0x100123b8)
RtlEqualSid (Address: 0x100123b4)
RtlFreeHeap (Address: 0x100123a4)
RtlImageNtHeader (Address: 0x100123a8)
RtlInitUnicodeString (Address: 0x100123c0)
RtlLoadString (Address: 0x100123c8)
RtlNtStatusToDosErrorNoTeb (Address: 0x100123bc)
wcschr (Address: 0x100123a0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10012014)
CStdStubBuffer_Connect (Address: 0x1001204c)
CStdStubBuffer_CountRefs (Address: 0x1001200c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10012020)
CStdStubBuffer_DebugServerRelease (Address: 0x10012000)
CStdStubBuffer_Disconnect (Address: 0x10012044)
CStdStubBuffer_Invoke (Address: 0x10012034)
CStdStubBuffer_IsIIDSupported (Address: 0x10012048)
CStdStubBuffer_QueryInterface (Address: 0x10012008)
IUnknown_AddRef_Proxy (Address: 0x10012024)
IUnknown_QueryInterface_Proxy (Address: 0x10012018)
IUnknown_Release_Proxy (Address: 0x10012010)
NdrCStdStubBuffer_Release (Address: 0x10012028)
NdrCStdStubBuffer2_Release (Address: 0x10012038)
NdrDllCanUnloadNow (Address: 0x1001202c)
NdrDllGetClassObject (Address: 0x10012030)
NdrOleAllocate (Address: 0x10012004)
NdrOleFree (Address: 0x1001201c)
NdrStubCall2 (Address: 0x1001203c)
NdrStubForwardingFunction (Address: 0x10012040)

SspiCli.dll

SspiFreeAuthIdentity (Address: 0x10012054)
SspiValidateAuthIdentity (Address: 0x10012058)
SspiZeroAuthIdentity (Address: 0x1001205c)

twinapi.appcore.dll

(Address: 0x100123dc)
(Address: 0x100123d8)

USERENV.dll

(Address: 0x10012064)

VAULTCLI.dll

VaultAddItem (Address: 0x10012074)
VaultCloseVault (Address: 0x10012078)
VaultFree (Address: 0x10012070)
VaultGetItem (Address: 0x1001206c)
VaultOpenVault (Address: 0x1001207c)