Windows.UI.CredDialogController.dll

Description: Credential UX Dialog Controller

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: b916a67a5ce296b2ca23886c7a92f1f1

File Size: 250.5 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 20

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xb270)
DllGetClassObject (Ordinal: 2, Address: 0xb240)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoGetCallContext (Address: 0x10030094)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100300a0)
IsDebuggerPresent (Address: 0x100300a4)
OutputDebugStringW (Address: 0x1003009c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100300ac)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100300b4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100300c0)
RaiseException (Address: 0x100300cc)
SetLastError (Address: 0x100300bc)
SetUnhandledExceptionFilter (Address: 0x100300c8)
UnhandledExceptionFilter (Address: 0x100300c4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100300d8)
DuplicateHandle (Address: 0x100300d4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100300e8)
HeapAlloc (Address: 0x100300e0)
HeapFree (Address: 0x100300e4)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree (Address: 0x100300f0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x100300f8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

WTSGetActiveConsoleSessionId (Address: 0x10030100)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10030110)
FindResourceExW (Address: 0x10030108)
GetModuleFileNameA (Address: 0x1003011c)
GetModuleHandleExW (Address: 0x1003010c)
GetModuleHandleW (Address: 0x10030124)
GetProcAddress (Address: 0x10030118)
LoadResource (Address: 0x10030120)
LockResource (Address: 0x10030114)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1003012c)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x10030134)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x10030144)
GetCurrentProcess (Address: 0x10030158)
GetCurrentProcessId (Address: 0x1003014c)
GetCurrentThreadId (Address: 0x1003013c)
GetProcessId (Address: 0x10030140)
OpenProcessToken (Address: 0x10030148)
QueueUserAPC (Address: 0x10030150)
TerminateProcess (Address: 0x10030154)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x10030164)
OpenProcess (Address: 0x10030160)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003016c)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x10030174)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10030184)
RegGetValueW (Address: 0x10030188)
RegOpenKeyExW (Address: 0x1003017c)
RegQueryValueExW (Address: 0x10030180)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x10030190)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x10030198)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100301a0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100301ac)
AcquireSRWLockShared (Address: 0x100301c0)
CreateEventExW (Address: 0x100301e0)
CreateEventW (Address: 0x100301f8)
CreateMutexExW (Address: 0x100301b8)
CreateSemaphoreExW (Address: 0x100301bc)
DeleteCriticalSection (Address: 0x100301c4)
EnterCriticalSection (Address: 0x100301b4)
InitializeCriticalSectionEx (Address: 0x100301d0)
InitializeSRWLock (Address: 0x100301f4)
LeaveCriticalSection (Address: 0x100301b0)
OpenEventW (Address: 0x100301f0)
OpenSemaphoreW (Address: 0x100301c8)
ReleaseMutex (Address: 0x100301dc)
ReleaseSemaphore (Address: 0x100301ec)
ReleaseSRWLockExclusive (Address: 0x100301d8)
ReleaseSRWLockShared (Address: 0x100301a8)
SetEvent (Address: 0x100301d4)
SleepEx (Address: 0x100301e8)
WaitForSingleObject (Address: 0x100301e4)
WaitForSingleObjectEx (Address: 0x100301cc)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x10030208)
InitOnceComplete (Address: 0x10030204)
InitOnceExecuteOnce (Address: 0x10030200)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10030210)
GetVersionExW (Address: 0x10030214)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10030224)
CreateThreadpoolTimer (Address: 0x1003021c)
SetThreadpoolTimer (Address: 0x10030220)
WaitForThreadpoolTimerCallbacks (Address: 0x10030228)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10030234)
EncodePointer (Address: 0x10030230)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10030240)
RoOriginateError (Address: 0x1003024c)
RoOriginateErrorW (Address: 0x10030248)
RoTransformError (Address: 0x10030244)
SetRestrictedErrorInfo (Address: 0x1003023c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1003025c)
RoGetMatchingRestrictedErrorInfo (Address: 0x10030254)
RoReportFailedDelegate (Address: 0x10030258)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10030264)
RoGetActivationFactory (Address: 0x10030268)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1003027c)
WindowsCreateStringReference (Address: 0x10030270)
WindowsDeleteString (Address: 0x10030280)
WindowsDuplicateString (Address: 0x10030278)
WindowsGetStringRawBuffer (Address: 0x10030274)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x10030288)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x10030300)
__std_terminate (Address: 0x100302fc)
_CxxThrowException (Address: 0x100302f8)
_except_handler4_common (Address: 0x100302c4)
_o___std_exception_copy (Address: 0x100302f0)
_o___std_exception_destroy (Address: 0x100302ec)
_o___std_type_info_destroy_list (Address: 0x100302e8)
_o___stdio_common_vsnprintf_s (Address: 0x100302e4)
_o___stdio_common_vswprintf (Address: 0x100302e0)
_o__callnewh (Address: 0x100302d4)
_o__cexit (Address: 0x100302d0)
_o__configure_narrow_argv (Address: 0x100302cc)
_o__crt_atexit (Address: 0x100302c8)
_o__errno (Address: 0x100302dc)
_o__execute_onexit_table (Address: 0x100302d8)
_o__get_errno (Address: 0x10030290)
_o__initialize_narrow_environment (Address: 0x10030294)
_o__initialize_onexit_table (Address: 0x10030298)
_o__invalid_parameter_noinfo (Address: 0x1003029c)
_o__purecall (Address: 0x100302a0)
_o__register_onexit_function (Address: 0x100302a4)
_o__seh_filter_dll (Address: 0x100302a8)
_o__set_errno (Address: 0x100302ac)
_o_free (Address: 0x100302b4)
_o_malloc (Address: 0x100302b8)
_o_realloc (Address: 0x100302bc)
_o_terminate (Address: 0x100302c0)
memcmp (Address: 0x10030304)
memcpy (Address: 0x10030308)
memmove (Address: 0x100302b0)
wcschr (Address: 0x100302f4)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x10030314)
_initterm_e (Address: 0x10030310)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1003031c)

api-ms-win-devices-query-l1-1-0.dll

DevFreeObjects (Address: 0x10030328)
DevGetObjects (Address: 0x10030324)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x10030334)
EventRegister (Address: 0x10030340)
EventSetInformation (Address: 0x10030338)
EventUnregister (Address: 0x1003033c)
EventWriteTransfer (Address: 0x10030330)

api-ms-win-power-base-l1-1-0.dll

PowerDeterminePlatformRoleEx (Address: 0x10030348)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x10030350)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10030358)
ConvertStringSidToSidW (Address: 0x1003035c)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x10030364)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOnFile (Address: 0x10030370)
CreateRandomAccessStreamOverStream (Address: 0x1003036c)

CRYPT32.dll

CertCreateCertificateContext (Address: 0x10030004)
CertFreeCertificateContext (Address: 0x10030000)

ntdll.dll

NtQueryInformationToken (Address: 0x1003038c)
NtQueryWnfStateData (Address: 0x10030384)
RtlAllocateHeap (Address: 0x10030398)
RtlCompareUnicodeString (Address: 0x1003037c)
RtlFreeHeap (Address: 0x10030390)
RtlInitUnicodeString (Address: 0x10030388)
RtlNtStatusToDosErrorNoTeb (Address: 0x10030380)
RtlSubscribeWnfStateChangeNotification (Address: 0x10030378)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10030394)

OLEAUT32.dll

SafeArrayAccessData (Address: 0x10030014)
SafeArrayCreate (Address: 0x10030010)
SafeArrayDestroy (Address: 0x10030018)
SafeArrayUnaccessData (Address: 0x1003000c)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x1003003c)
NdrAsyncClientCall2 (Address: 0x10030030)
RpcAsyncCancelCall (Address: 0x10030020)
RpcAsyncCompleteCall (Address: 0x10030024)
RpcAsyncInitializeHandle (Address: 0x10030038)
RpcBindingFree (Address: 0x10030044)
RpcBindingFromStringBindingW (Address: 0x10030034)
RpcBindingSetAuthInfoExW (Address: 0x10030028)
RpcStringBindingComposeW (Address: 0x1003002c)
RpcStringFreeW (Address: 0x10030040)

SHCORE.dll

(Address: 0x10030054)
SHCreateMemStream (Address: 0x10030058)
SHTaskPoolAllowThreadReuse (Address: 0x1003004c)
SHTaskPoolQueueTask (Address: 0x10030050)

SHLWAPI.dll

(Address: 0x10030060)

USER32.dll

CalculatePopupWindowPosition (Address: 0x10030070)
DestroyIcon (Address: 0x10030088)
GetDC (Address: 0x10030078)
GetIconInfo (Address: 0x10030080)
GetRawInputDeviceList (Address: 0x1003008c)
GetThreadDesktop (Address: 0x1003006c)
GetUserObjectInformationW (Address: 0x10030074)
LoadImageW (Address: 0x10030084)
ReleaseDC (Address: 0x1003007c)
SetThreadDesktop (Address: 0x10030068)