Windows.UI.CredDialogController.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0xb270
DllGetClassObject
#2 · 0xb240
No function matches your filter.
Imported DLLs & functions 184
CoGetCallContext
0x10030094
DebugBreak
0x100300a0
IsDebuggerPresent
0x100300a4
OutputDebugStringW
0x1003009c
DelayLoadFailureHook
0x100300ac
ResolveDelayLoadedAPI
0x100300b4
GetLastError
0x100300c0
RaiseException
0x100300cc
SetLastError
0x100300bc
SetUnhandledExceptionFilter
0x100300c8
UnhandledExceptionFilter
0x100300c4
GetProcessHeap
0x100300e8
HeapAlloc
0x100300e0
HeapFree
0x100300e4
LocalFree
0x100300f0
InitializeSListHead
0x100300f8
WTSGetActiveConsoleSessionId
0x10030100
DisableThreadLibraryCalls
0x10030110
FindResourceExW
0x10030108
GetModuleFileNameA
0x1003011c
GetModuleHandleExW
0x1003010c
GetModuleHandleW
0x10030124
GetProcAddress
0x10030118
LoadResource
0x10030120
LockResource
0x10030114
FormatMessageW
0x1003012c
ExpandEnvironmentStringsW
0x10030134
CreateThread
0x10030144
GetCurrentProcess
0x10030158
GetCurrentProcessId
0x1003014c
GetCurrentThreadId
0x1003013c
GetProcessId
0x10030140
OpenProcessToken
0x10030148
QueueUserAPC
0x10030150
TerminateProcess
0x10030154
IsProcessorFeaturePresent
0x10030164
OpenProcess
0x10030160
QueryPerformanceCounter
0x1003016c
QueryFullProcessImageNameW
0x10030174
RegCloseKey
0x10030184
RegGetValueW
0x10030188
RegOpenKeyExW
0x1003017c
RegQueryValueExW
0x10030180
PathFindFileNameW
0x10030190
QISearch
0x10030198
CompareStringOrdinal
0x100301a0
AcquireSRWLockExclusive
0x100301ac
AcquireSRWLockShared
0x100301c0
CreateEventExW
0x100301e0
CreateEventW
0x100301f8
CreateMutexExW
0x100301b8
CreateSemaphoreExW
0x100301bc
DeleteCriticalSection
0x100301c4
EnterCriticalSection
0x100301b4
InitializeCriticalSectionEx
0x100301d0
InitializeSRWLock
0x100301f4
LeaveCriticalSection
0x100301b0
OpenEventW
0x100301f0
OpenSemaphoreW
0x100301c8
ReleaseMutex
0x100301dc
ReleaseSemaphore
0x100301ec
ReleaseSRWLockExclusive
0x100301d8
ReleaseSRWLockShared
0x100301a8
SetEvent
0x100301d4
SleepEx
0x100301e8
WaitForSingleObject
0x100301e4
WaitForSingleObjectEx
0x100301cc
InitOnceBeginInitialize
0x10030208
InitOnceComplete
0x10030204
InitOnceExecuteOnce
0x10030200
CloseThreadpoolTimer
0x10030224
CreateThreadpoolTimer
0x1003021c
SetThreadpoolTimer
0x10030220
WaitForThreadpoolTimerCallbacks
0x10030228
GetRestrictedErrorInfo
0x10030240
RoOriginateError
0x1003024c
RoOriginateErrorW
0x10030248
RoTransformError
0x10030244
SetRestrictedErrorInfo
0x1003023c
IsErrorPropagationEnabled
0x1003025c
RoGetMatchingRestrictedErrorInfo
0x10030254
RoReportFailedDelegate
0x10030258
WindowsCreateString
0x1003027c
WindowsCreateStringReference
0x10030270
WindowsDeleteString
0x10030280
WindowsDuplicateString
0x10030278
WindowsGetStringRawBuffer
0x10030274
IsWow64Process
0x10030288
__CxxFrameHandler3
0x10030300
__std_terminate
0x100302fc
_CxxThrowException
0x100302f8
_except_handler4_common
0x100302c4
_o___std_exception_copy
0x100302f0
_o___std_exception_destroy
0x100302ec
_o___std_type_info_destroy_list
0x100302e8
_o___stdio_common_vsnprintf_s
0x100302e4
_o___stdio_common_vswprintf
0x100302e0
_o__callnewh
0x100302d4
_o__cexit
0x100302d0
_o__configure_narrow_argv
0x100302cc
_o__crt_atexit
0x100302c8
_o__errno
0x100302dc
_o__execute_onexit_table
0x100302d8
_o__get_errno
0x10030290
_o__initialize_narrow_environment
0x10030294
_o__initialize_onexit_table
0x10030298
_o__invalid_parameter_noinfo
0x1003029c
_o__purecall
0x100302a0
_o__register_onexit_function
0x100302a4
_o__seh_filter_dll
0x100302a8
_o__set_errno
0x100302ac
_o_free
0x100302b4
_o_malloc
0x100302b8
_o_realloc
0x100302bc
_o_terminate
0x100302c0
memcmp
0x10030304
memcpy
0x10030308
memmove
0x100302b0
wcschr
0x100302f4
memset
0x1003031c
EventActivityIdControl
0x10030334
EventRegister
0x10030340
EventSetInformation
0x10030338
EventUnregister
0x1003033c
EventWriteTransfer
0x10030330
PowerDeterminePlatformRoleEx
0x10030348
GetTokenInformation
0x10030350
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x10030358
ConvertStringSidToSidW
0x1003035c
0x10030364
CreateRandomAccessStreamOnFile
0x10030370
CreateRandomAccessStreamOverStream
0x1003036c
NtQueryInformationToken
0x1003038c
NtQueryWnfStateData
0x10030384
RtlAllocateHeap
0x10030398
RtlCompareUnicodeString
0x1003037c
RtlFreeHeap
0x10030390
RtlInitUnicodeString
0x10030388
RtlNtStatusToDosErrorNoTeb
0x10030380
RtlSubscribeWnfStateChangeNotification
0x10030378
RtlUnsubscribeWnfNotificationWaitForCompletion
0x10030394
SafeArrayAccessData
0x10030014
SafeArrayCreate
0x10030010
SafeArrayDestroy
0x10030018
SafeArrayUnaccessData
0x1003000c
RPCRT4.dll
10
I_RpcExceptionFilter
0x1003003c
NdrAsyncClientCall2
0x10030030
RpcAsyncCancelCall
0x10030020
RpcAsyncCompleteCall
0x10030024
RpcAsyncInitializeHandle
0x10030038
RpcBindingFree
0x10030044
RpcBindingFromStringBindingW
0x10030034
RpcBindingSetAuthInfoExW
0x10030028
RpcStringBindingComposeW
0x1003002c
RpcStringFreeW
0x10030040
0x10030054
SHCreateMemStream
0x10030058
SHTaskPoolAllowThreadReuse
0x1003004c
SHTaskPoolQueueTask
0x10030050
0x10030060
USER32.dll
10
CalculatePopupWindowPosition
0x10030070
DestroyIcon
0x10030088
GetDC
0x10030078
GetIconInfo
0x10030080
GetRawInputDeviceList
0x1003008c
GetThreadDesktop
0x1003006c
GetUserObjectInformationW
0x10030074
LoadImageW
0x10030084
ReleaseDC
0x1003007c
SetThreadDesktop
0x10030068
No function matches your filter.