wincredui.dll

Description: Credential Manager User Internal Interface

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 95b55c3bb63cdad636f7a03103efb2bd

File Size: 211.5 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CredUIInternalCmdLinePromptForCredentialsA (Ordinal: 1, Address: 0xd1a0)
CredUIInternalCmdLinePromptForCredentialsW (Ordinal: 2, Address: 0xd130)
CredUIInternalConfirmCredentialsA (Ordinal: 3, Address: 0xd0a0)
CredUIInternalConfirmCredentialsW (Ordinal: 4, Address: 0xd080)
CredUIInternalInitControls (Ordinal: 5, Address: 0xcb90)
CredUIInternalPromptForCredentialsA (Ordinal: 6, Address: 0xad10)
CredUIInternalPromptForCredentialsW (Ordinal: 7, Address: 0xac30)
CredUIInternalPromptForWindowsCredentialsA (Ordinal: 8, Address: 0xcb80)
CredUIInternalPromptForWindowsCredentialsW (Ordinal: 9, Address: 0xca10)
CredUIInternalPromptForWindowsCredentialsWorker (Ordinal: 10, Address: 0xbdb0)
DllCanUnloadNow (Ordinal: 11, Address: 0xcdb0)
DllGetClassObject (Ordinal: 12, Address: 0xcdd0)
DllRegisterServer (Ordinal: 13, Address: 0xcea0)
DllUnregisterServer (Ordinal: 14, Address: 0xd000)

Imported DLLs & Functions

api-ms-win-core-console-l1-1-0.dll

GetConsoleMode (Address: 0x180024400)
GetConsoleOutputCP (Address: 0x1800243f0)
ReadConsoleW (Address: 0x1800243f8)
SetConsoleMode (Address: 0x1800243e8)
WriteConsoleW (Address: 0x180024408)

api-ms-win-core-console-l1-2-0.dll

PeekConsoleInputW (Address: 0x180024418)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180024438)
IsDebuggerPresent (Address: 0x180024430)
OutputDebugStringW (Address: 0x180024428)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180024448)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180024458)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180024478)
RaiseException (Address: 0x180024468)
SetLastError (Address: 0x180024480)
SetUnhandledExceptionFilter (Address: 0x180024488)
UnhandledExceptionFilter (Address: 0x180024470)

api-ms-win-core-file-l1-1-0.dll

GetFileType (Address: 0x180024498)
WriteFile (Address: 0x1800244a0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800244b0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800244c0)
HeapAlloc (Address: 0x1800244d0)
HeapFree (Address: 0x1800244c8)
HeapReAlloc (Address: 0x1800244d8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800244e8)
LocalFree (Address: 0x1800244f0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180024528)
FreeLibrary (Address: 0x180024508)
GetModuleFileNameA (Address: 0x180024538)
GetModuleFileNameW (Address: 0x180024510)
GetModuleHandleExW (Address: 0x180024540)
GetModuleHandleW (Address: 0x180024500)
GetProcAddress (Address: 0x180024548)
LoadLibraryExA (Address: 0x180024520)
LoadLibraryExW (Address: 0x180024518)
LoadStringW (Address: 0x180024530)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180024558)
GetThreadUILanguage (Address: 0x180024560)
SetThreadUILanguage (Address: 0x180024568)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x180024580)
GetStdHandle (Address: 0x180024578)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1800245b8)
GetCurrentProcess (Address: 0x1800245c8)
GetCurrentProcessId (Address: 0x180024598)
GetCurrentThread (Address: 0x1800245d0)
GetCurrentThreadId (Address: 0x180024590)
GetExitCodeThread (Address: 0x1800245a8)
GetProcessId (Address: 0x1800245b0)
OpenProcessToken (Address: 0x1800245c0)
OpenThreadToken (Address: 0x1800245e0)
ProcessIdToSessionId (Address: 0x1800245e8)
ResumeThread (Address: 0x1800245d8)
TerminateProcess (Address: 0x1800245a0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800245f8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180024608)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180024618)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x180024628)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180024638)
RegCreateKeyExW (Address: 0x180024640)
RegDeleteKeyExW (Address: 0x180024660)
RegEnumKeyExW (Address: 0x180024680)
RegGetValueW (Address: 0x180024670)
RegOpenKeyExA (Address: 0x180024658)
RegOpenKeyExW (Address: 0x180024648)
RegQueryInfoKeyW (Address: 0x180024678)
RegQueryValueExA (Address: 0x180024668)
RegQueryValueExW (Address: 0x180024688)
RegSetValueExW (Address: 0x180024650)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800246b0)
RtlCompareMemory (Address: 0x180024698)
RtlLookupFunctionEntry (Address: 0x1800246a8)
RtlVirtualUnwind (Address: 0x1800246a0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x1800246c0)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x1800246d8)
CreateActCtxW (Address: 0x1800246e8)
DeactivateActCtx (Address: 0x1800246d0)
ReleaseActCtx (Address: 0x1800246e0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800246f8)
MultiByteToWideChar (Address: 0x180024700)
WideCharToMultiByte (Address: 0x180024708)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x180024718)
lstrlenW (Address: 0x180024720)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800247c0)
AcquireSRWLockShared (Address: 0x1800247a0)
CreateEventW (Address: 0x180024730)
CreateMutexExW (Address: 0x180024740)
CreateSemaphoreExW (Address: 0x180024768)
DeleteCriticalSection (Address: 0x1800247b0)
EnterCriticalSection (Address: 0x180024788)
InitializeCriticalSectionAndSpinCount (Address: 0x180024778)
InitializeCriticalSectionEx (Address: 0x180024758)
LeaveCriticalSection (Address: 0x180024790)
OpenSemaphoreW (Address: 0x180024780)
ReleaseMutex (Address: 0x180024748)
ReleaseSemaphore (Address: 0x180024750)
ReleaseSRWLockExclusive (Address: 0x1800247b8)
ReleaseSRWLockShared (Address: 0x180024798)
SetEvent (Address: 0x180024738)
WaitForMultipleObjectsEx (Address: 0x180024760)
WaitForSingleObject (Address: 0x1800247a8)
WaitForSingleObjectEx (Address: 0x180024770)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800247e0)
InitOnceComplete (Address: 0x1800247d0)
Sleep (Address: 0x1800247d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180024808)
GetSystemTimeAsFileTime (Address: 0x1800247f0)
GetTickCount (Address: 0x1800247f8)
GetVersionExW (Address: 0x180024800)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180024830)
CreateThreadpoolTimer (Address: 0x180024818)
SetThreadpoolTimer (Address: 0x180024820)
WaitForThreadpoolTimerCallbacks (Address: 0x180024828)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180024840)
EventRegister (Address: 0x180024850)
EventSetInformation (Address: 0x180024860)
EventUnregister (Address: 0x180024848)
EventWriteTransfer (Address: 0x180024858)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x180024880)
EqualSid (Address: 0x180024888)
FreeSid (Address: 0x180024878)
GetSidIdentifierAuthority (Address: 0x1800248a8)
GetSidLengthRequired (Address: 0x180024898)
GetSidSubAuthority (Address: 0x1800248b0)
GetSidSubAuthorityCount (Address: 0x1800248a0)
GetTokenInformation (Address: 0x180024870)
InitializeSid (Address: 0x180024890)

msvcrt.dll

__C_specific_handler (Address: 0x180024930)
__CxxFrameHandler3 (Address: 0x1800249c0)
__dllonexit (Address: 0x180024928)
__iob_func (Address: 0x180024940)
_amsg_exit (Address: 0x1800248d0)
_callnewh (Address: 0x1800248e0)
_initterm (Address: 0x1800248c8)
_lock (Address: 0x1800248c0)
_onexit (Address: 0x180024990)
_purecall (Address: 0x180024938)
_resetstkoflw (Address: 0x180024998)
_unlock (Address: 0x180024988)
_vsnwprintf (Address: 0x1800249a0)
_wcsicmp (Address: 0x1800249a8)
_wcsnicmp (Address: 0x180024950)
_XcptFilter (Address: 0x1800248d8)
fputs (Address: 0x180024920)
free (Address: 0x1800248f0)
malloc (Address: 0x1800248f8)
memcmp (Address: 0x180024968)
memcpy (Address: 0x180024970)
memcpy_s (Address: 0x1800249b8)
memmove (Address: 0x180024978)
memmove_s (Address: 0x1800249b0)
memset (Address: 0x180024980)
putchar (Address: 0x180024960)
strcmp (Address: 0x1800248e8)
toupper (Address: 0x180024910)
wcschr (Address: 0x180024900)
wcscmp (Address: 0x1800249c8)
wcscpy_s (Address: 0x180024948)
wcsrchr (Address: 0x180024908)
wcsstr (Address: 0x180024958)
wcstol (Address: 0x180024918)

ntdll.dll

EtwEventRegister (Address: 0x1800249e0)
EtwEventUnregister (Address: 0x180024a20)
EtwEventWrite (Address: 0x1800249d8)
NtQueryInformationToken (Address: 0x1800249f0)
RtlAllocateHeap (Address: 0x1800249f8)
RtlCompareUnicodeString (Address: 0x180024a08)
RtlFreeHeap (Address: 0x1800249e8)
RtlInitString (Address: 0x180024a18)
RtlInitUnicodeString (Address: 0x180024a10)
RtlNtStatusToDosErrorNoTeb (Address: 0x180024a00)

ole32.dll

CreateBindCtx (Address: 0x180024a38)
MkParseDisplayName (Address: 0x180024a30)