CredDialogBroker.dll

Description: Credential Dialog Broker

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 06a05b4d84540f80f06d875613a836a2

File Size: 134.5 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x47a0)
DllGetActivationFactory (Ordinal: 2, Address: 0x44c0)
DllGetClassObject (Ordinal: 3, Address: 0x46a0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18001ac30)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x18001ac40)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001ac78)
CoCreateInstance (Address: 0x18001ac60)
CoGetCallContext (Address: 0x18001ac80)
CoGetInterfaceAndReleaseStream (Address: 0x18001ac70)
CoMarshalInterface (Address: 0x18001ac68)
CoReleaseMarshalData (Address: 0x18001ac50)
CoTaskMemAlloc (Address: 0x18001ac98)
CoTaskMemFree (Address: 0x18001ac58)
CoTaskMemRealloc (Address: 0x18001ac90)
CreateStreamOnHGlobal (Address: 0x18001ac88)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18001aca8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001acc8)
IsDebuggerPresent (Address: 0x18001acc0)
OutputDebugStringW (Address: 0x18001acb8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001acd8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001ace8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001ad00)
RaiseException (Address: 0x18001ad08)
SetLastError (Address: 0x18001ad18)
SetUnhandledExceptionFilter (Address: 0x18001ad10)
UnhandledExceptionFilter (Address: 0x18001acf8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001ad28)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001ad48)
HeapAlloc (Address: 0x18001ad40)
HeapFree (Address: 0x18001ad38)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001ad60)
LocalFree (Address: 0x18001ad58)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001ada0)
FindResourceExW (Address: 0x18001ad80)
GetModuleFileNameA (Address: 0x18001ad90)
GetModuleHandleExW (Address: 0x18001ad70)
GetModuleHandleW (Address: 0x18001ad88)
GetProcAddress (Address: 0x18001ada8)
LoadResource (Address: 0x18001ad98)
LockResource (Address: 0x18001ad78)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001adb8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18001adc8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18001ade8)
GetCurrentProcessId (Address: 0x18001adf0)
GetCurrentThreadId (Address: 0x18001ae00)
GetProcessId (Address: 0x18001add8)
OpenProcessToken (Address: 0x18001adf8)
TerminateProcess (Address: 0x18001ade0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18001ae10)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001ae20)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18001ae30)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001ae40)
RtlLookupFunctionEntry (Address: 0x18001ae48)
RtlVirtualUnwind (Address: 0x18001ae50)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18001ae60)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001aee8)
AcquireSRWLockShared (Address: 0x18001ae78)
CreateMutexExW (Address: 0x18001aea0)
CreateSemaphoreExW (Address: 0x18001aea8)
DeleteCriticalSection (Address: 0x18001aec8)
EnterCriticalSection (Address: 0x18001aed0)
InitializeCriticalSectionEx (Address: 0x18001aec0)
InitializeSRWLock (Address: 0x18001ae70)
LeaveCriticalSection (Address: 0x18001aed8)
OpenSemaphoreW (Address: 0x18001ae90)
ReleaseMutex (Address: 0x18001aeb0)
ReleaseSemaphore (Address: 0x18001aee0)
ReleaseSRWLockExclusive (Address: 0x18001aeb8)
ReleaseSRWLockShared (Address: 0x18001ae88)
WaitForSingleObject (Address: 0x18001ae98)
WaitForSingleObjectEx (Address: 0x18001ae80)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18001af10)
InitOnceComplete (Address: 0x18001aef8)
InitOnceExecuteOnce (Address: 0x18001af00)
Sleep (Address: 0x18001af08)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001af28)
GetTickCount (Address: 0x18001af20)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18001af50)
CreateThreadpoolTimer (Address: 0x18001af40)
SetThreadpoolTimer (Address: 0x18001af38)
WaitForThreadpoolTimerCallbacks (Address: 0x18001af48)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18001af60)
EncodePointer (Address: 0x18001af68)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18001af80)
RoOriginateError (Address: 0x18001af78)
RoOriginateErrorW (Address: 0x18001af88)
RoTransformError (Address: 0x18001af98)
SetRestrictedErrorInfo (Address: 0x18001af90)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18001afb0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18001afa8)
RoReportFailedDelegate (Address: 0x18001afb8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18001afc8)
RoGetActivationFactory (Address: 0x18001afd0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x18001b008)
WindowsCreateStringReference (Address: 0x18001aff0)
WindowsDeleteString (Address: 0x18001b010)
WindowsDuplicateString (Address: 0x18001b018)
WindowsGetStringRawBuffer (Address: 0x18001b000)
WindowsIsStringEmpty (Address: 0x18001afe0)
WindowsStringHasEmbeddedNull (Address: 0x18001aff8)
WindowsSubstringWithSpecifiedLength (Address: 0x18001afe8)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x18001b038)
EventRegister (Address: 0x18001b040)
EventSetInformation (Address: 0x18001b048)
EventUnregister (Address: 0x18001b030)
EventWriteTransfer (Address: 0x18001b028)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

GetWindowBand (Address: 0x18001b058)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

GetPropW (Address: 0x18001b068)
GetWindowThreadProcessId (Address: 0x18001b070)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18001b090)
GetLengthSid (Address: 0x18001b088)
GetTokenInformation (Address: 0x18001b080)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18001b0a0)
SHTaskPoolQueueTask (Address: 0x18001b0a8)

msvcrt.dll

__C_specific_handler (Address: 0x18001b0f8)
__CxxFrameHandler3 (Address: 0x18001b140)
__dllonexit (Address: 0x18001b0d8)
_amsg_exit (Address: 0x18001b110)
_callnewh (Address: 0x18001b150)
_initterm (Address: 0x18001b100)
_lock (Address: 0x18001b0f0)
_onexit (Address: 0x18001b0d0)
_purecall (Address: 0x18001b130)
_unlock (Address: 0x18001b0e0)
_vsnwprintf (Address: 0x18001b148)
_wcsicmp (Address: 0x18001b0b8)
_XcptFilter (Address: 0x18001b120)
free (Address: 0x18001b128)
malloc (Address: 0x18001b168)
memcmp (Address: 0x18001b158)
memcpy (Address: 0x18001b160)
memcpy_s (Address: 0x18001b138)
memmove (Address: 0x18001b0c8)
memmove_s (Address: 0x18001b108)
memset (Address: 0x18001b170)
toupper (Address: 0x18001b118)
wcschr (Address: 0x18001b0e8)
wcscspn (Address: 0x18001b0c0)

ntdll.dll

NtQueryInformationToken (Address: 0x18001b188)
RtlAllocateHeap (Address: 0x18001b1a0)
RtlCompareUnicodeString (Address: 0x18001b1b0)
RtlEqualSid (Address: 0x18001b198)
RtlFreeHeap (Address: 0x18001b180)
RtlInitUnicodeString (Address: 0x18001b190)
RtlNtStatusToDosErrorNoTeb (Address: 0x18001b1a8)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x18001ac20)