Windows.Security.Credentials.UI.CredentialPicker.dll

Description: WinRT Credential Picker Server

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: bfb4e7eec07a18dd1ca8c6b52354c68c

File Size: 113.2 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1ae0)
DllGetActivationFactory (Ordinal: 2, Address: 0x1b70)
DllGetClassObject (Ordinal: 3, Address: 0x1d50)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x180014530)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180014560)
CoCreateGuid (Address: 0x180014558)
CoCreateInstance (Address: 0x180014568)
CoGetCallContext (Address: 0x180014540)
CoGetCallerTID (Address: 0x180014578)
CoImpersonateClient (Address: 0x180014550)
CoRevertToSelf (Address: 0x180014548)
CoTaskMemAlloc (Address: 0x180014570)
CoTaskMemFree (Address: 0x180014580)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1800145d8)
CStdStubBuffer2_CountRefs (Address: 0x1800145e0)
CStdStubBuffer2_Disconnect (Address: 0x1800145a8)
CStdStubBuffer2_QueryInterface (Address: 0x1800145c8)
NdrProxyForwardingFunction3 (Address: 0x180014648)
NdrProxyForwardingFunction4 (Address: 0x1800145e8)
NdrProxyForwardingFunction5 (Address: 0x1800145f0)
ObjectStublessClient10 (Address: 0x180014628)
ObjectStublessClient11 (Address: 0x180014640)
ObjectStublessClient12 (Address: 0x180014668)
ObjectStublessClient13 (Address: 0x180014618)
ObjectStublessClient14 (Address: 0x180014650)
ObjectStublessClient15 (Address: 0x180014598)
ObjectStublessClient16 (Address: 0x180014658)
ObjectStublessClient17 (Address: 0x180014620)
ObjectStublessClient18 (Address: 0x180014610)
ObjectStublessClient19 (Address: 0x1800145d0)
ObjectStublessClient20 (Address: 0x180014590)
ObjectStublessClient21 (Address: 0x180014660)
ObjectStublessClient22 (Address: 0x1800145c0)
ObjectStublessClient23 (Address: 0x1800145a0)
ObjectStublessClient24 (Address: 0x180014630)
ObjectStublessClient25 (Address: 0x180014638)
ObjectStublessClient3 (Address: 0x1800145b8)
ObjectStublessClient6 (Address: 0x1800145f8)
ObjectStublessClient7 (Address: 0x1800145b0)
ObjectStublessClient8 (Address: 0x180014600)
ObjectStublessClient9 (Address: 0x180014608)

api-ms-win-core-console-l3-2-0.dll

GetConsoleWindow (Address: 0x180014678)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180014690)
IsDebuggerPresent (Address: 0x180014688)
OutputDebugStringW (Address: 0x180014698)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800146a8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800146b8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800146e0)
RaiseException (Address: 0x1800146e8)
SetLastError (Address: 0x1800146c8)
SetUnhandledExceptionFilter (Address: 0x1800146d8)
UnhandledExceptionFilter (Address: 0x1800146d0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800146f8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180014708)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180014718)
HeapAlloc (Address: 0x180014720)
HeapFree (Address: 0x180014728)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180014740)
LocalFree (Address: 0x180014738)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180014750)
GetModuleFileNameA (Address: 0x180014758)
GetModuleHandleExW (Address: 0x180014760)
GetModuleHandleW (Address: 0x180014770)
GetProcAddress (Address: 0x180014768)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180014780)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180014790)
VirtualProtect (Address: 0x180014798)
VirtualQuery (Address: 0x1800147a0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800147c0)
GetCurrentProcessId (Address: 0x1800147b0)
GetCurrentThread (Address: 0x1800147d8)
GetCurrentThreadId (Address: 0x1800147c8)
GetProcessId (Address: 0x1800147e8)
OpenProcessToken (Address: 0x1800147e0)
OpenThreadToken (Address: 0x1800147d0)
SetThreadStackGuarantee (Address: 0x1800147b8)
TerminateProcess (Address: 0x1800147f0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180014800)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180014810)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180014830)
RtlLookupFunctionEntry (Address: 0x180014820)
RtlVirtualUnwind (Address: 0x180014828)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180014840)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180014878)
AcquireSRWLockShared (Address: 0x1800148c8)
CreateEventExW (Address: 0x180014850)
CreateMutexExW (Address: 0x180014898)
CreateMutexW (Address: 0x180014880)
CreateSemaphoreExW (Address: 0x1800148b0)
DeleteCriticalSection (Address: 0x180014888)
InitializeCriticalSection (Address: 0x180014858)
OpenSemaphoreW (Address: 0x1800148c0)
ReleaseMutex (Address: 0x180014870)
ReleaseSemaphore (Address: 0x180014868)
ReleaseSRWLockExclusive (Address: 0x180014860)
ReleaseSRWLockShared (Address: 0x1800148b8)
SetEvent (Address: 0x1800148a0)
WaitForSingleObject (Address: 0x180014890)
WaitForSingleObjectEx (Address: 0x1800148a8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800148d8)
Sleep (Address: 0x1800148e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1800148f8)
GetSystemTimeAsFileTime (Address: 0x1800148f0)
GetTickCount (Address: 0x180014900)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x180014928)
CreateThreadpoolWork (Address: 0x180014918)
FreeLibraryWhenCallbackReturns (Address: 0x180014920)
SubmitThreadpoolWork (Address: 0x180014910)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180014938)
EncodePointer (Address: 0x180014940)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180014958)
RoOriginateError (Address: 0x180014950)
RoOriginateErrorW (Address: 0x180014970)
RoTransformError (Address: 0x180014968)
SetRestrictedErrorInfo (Address: 0x180014960)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180014980)
RoGetMatchingRestrictedErrorInfo (Address: 0x180014990)
RoReportFailedDelegate (Address: 0x180014988)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1800149b0)
RoInitialize (Address: 0x1800149a8)
RoUninitialize (Address: 0x1800149a0)

api-ms-win-core-winrt-robuffer-l1-1-0.dll

RoGetBufferMarshaler (Address: 0x1800149c0)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x180014a08)
HSTRING_UserFree64 (Address: 0x1800149d0)
HSTRING_UserMarshal (Address: 0x1800149f0)
HSTRING_UserMarshal64 (Address: 0x180014a10)
HSTRING_UserSize (Address: 0x180014a48)
HSTRING_UserSize64 (Address: 0x1800149e0)
HSTRING_UserUnmarshal (Address: 0x180014a20)
HSTRING_UserUnmarshal64 (Address: 0x180014a28)
WindowsCreateString (Address: 0x1800149d8)
WindowsCreateStringReference (Address: 0x180014a38)
WindowsDeleteString (Address: 0x1800149e8)
WindowsDuplicateString (Address: 0x180014a40)
WindowsGetStringLen (Address: 0x1800149f8)
WindowsGetStringRawBuffer (Address: 0x180014a30)
WindowsIsStringEmpty (Address: 0x180014a00)
WindowsStringHasEmbeddedNull (Address: 0x180014a18)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180014a68)
EventSetInformation (Address: 0x180014a70)
EventUnregister (Address: 0x180014a60)
EventWriteTransfer (Address: 0x180014a58)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

GetWindowBand (Address: 0x180014a80)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180014ab0)
DuplicateTokenEx (Address: 0x180014ab8)
GetLengthSid (Address: 0x180014aa8)
GetTokenInformation (Address: 0x180014a98)
ImpersonateLoggedOnUser (Address: 0x180014a90)
RevertToSelf (Address: 0x180014aa0)

api-ms-win-security-credentials-l1-1-0.dll

CredFree (Address: 0x180014ac8)
CredIsProtectedW (Address: 0x180014ad0)
CredReadW (Address: 0x180014ad8)

bcrypt.dll

BCryptGenRandom (Address: 0x180014ae8)

msvcrt.dll

__C_specific_handler (Address: 0x180014b38)
__CxxFrameHandler3 (Address: 0x180014b48)
__dllonexit (Address: 0x180014b30)
_amsg_exit (Address: 0x180014b10)
_callnewh (Address: 0x180014b08)
_initterm (Address: 0x180014b00)
_lock (Address: 0x180014af8)
_onexit (Address: 0x180014b40)
_purecall (Address: 0x180014b60)
_unlock (Address: 0x180014b28)
_XcptFilter (Address: 0x180014b68)
free (Address: 0x180014b58)
malloc (Address: 0x180014b18)
memcmp (Address: 0x180014b50)
memcpy (Address: 0x180014b20)
memset (Address: 0x180014b70)

ncrypt.dll

NCryptCloseProtectionDescriptor (Address: 0x180014b90)
NCryptCreateProtectionDescriptor (Address: 0x180014b80)
NCryptProtectSecret (Address: 0x180014b88)

ntdll.dll

_snwprintf_s (Address: 0x180014bc0)
_vsnwprintf (Address: 0x180014bf8)
memcpy_s (Address: 0x180014c00)
NtQueryInformationToken (Address: 0x180014be8)
RtlAllocateHeap (Address: 0x180014bb8)
RtlCompareUnicodeString (Address: 0x180014bd0)
RtlEqualSid (Address: 0x180014bc8)
RtlFreeHeap (Address: 0x180014ba8)
RtlImageNtHeader (Address: 0x180014bb0)
RtlInitUnicodeString (Address: 0x180014be0)
RtlLoadString (Address: 0x180014bf0)
RtlNtStatusToDosErrorNoTeb (Address: 0x180014bd8)
wcschr (Address: 0x180014ba0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x180014438)
CStdStubBuffer_Connect (Address: 0x180014470)
CStdStubBuffer_CountRefs (Address: 0x1800144a0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x180014428)
CStdStubBuffer_DebugServerRelease (Address: 0x1800144a8)
CStdStubBuffer_Disconnect (Address: 0x180014498)
CStdStubBuffer_Invoke (Address: 0x1800144c0)
CStdStubBuffer_IsIIDSupported (Address: 0x180014478)
CStdStubBuffer_QueryInterface (Address: 0x1800144b8)
IUnknown_AddRef_Proxy (Address: 0x180014430)
IUnknown_QueryInterface_Proxy (Address: 0x180014488)
IUnknown_Release_Proxy (Address: 0x180014490)
NdrCStdStubBuffer_Release (Address: 0x180014450)
NdrCStdStubBuffer2_Release (Address: 0x180014468)
NdrDllCanUnloadNow (Address: 0x180014458)
NdrDllGetClassObject (Address: 0x180014460)
NdrOleAllocate (Address: 0x1800144b0)
NdrOleFree (Address: 0x180014448)
NdrStubCall3 (Address: 0x180014480)
NdrStubForwardingFunction (Address: 0x180014440)

SspiCli.dll

SspiFreeAuthIdentity (Address: 0x1800144d8)
SspiValidateAuthIdentity (Address: 0x1800144d0)
SspiZeroAuthIdentity (Address: 0x1800144e0)

twinapi.appcore.dll

(Address: 0x180014c18)
(Address: 0x180014c10)

USERENV.dll

(Address: 0x1800144f0)

VAULTCLI.dll

VaultAddItem (Address: 0x180014518)
VaultCloseVault (Address: 0x180014508)
VaultFree (Address: 0x180014520)
VaultGetItem (Address: 0x180014500)
VaultOpenVault (Address: 0x180014510)