Windows.Security.Authentication.Identity.Provider.dll

Description: Secondary Factor Authentication Windows Runtime DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: bc5c464a5138ae9256fa09f169246e70

File Size: 188.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xf340)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xf370)
  • DllGetClassObject (Ordinal: 3, Address: 0xf390)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1002b0b4)
  • CoCreateInstance (Address: 0x1002b0ac)
  • CoDecrementMTAUsage (Address: 0x1002b0bc)
  • CoGetInterfaceAndReleaseStream (Address: 0x1002b0b8)
  • CoGetMalloc (Address: 0x1002b0cc)
  • CoIncrementMTAUsage (Address: 0x1002b0c0)
  • CoMarshalInterface (Address: 0x1002b0d4)
  • CoReleaseMarshalData (Address: 0x1002b0c4)
  • CoTaskMemAlloc (Address: 0x1002b0b0)
  • CoTaskMemFree (Address: 0x1002b0d0)
  • CreateStreamOnHGlobal (Address: 0x1002b0c8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1002b0dc)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x1002b124)
  • CStdStubBuffer2_CountRefs (Address: 0x1002b104)
  • CStdStubBuffer2_Disconnect (Address: 0x1002b118)
  • CStdStubBuffer2_QueryInterface (Address: 0x1002b11c)
  • NdrProxyForwardingFunction3 (Address: 0x1002b130)
  • NdrProxyForwardingFunction4 (Address: 0x1002b108)
  • NdrProxyForwardingFunction5 (Address: 0x1002b0fc)
  • ObjectStublessClient10 (Address: 0x1002b0e4)
  • ObjectStublessClient11 (Address: 0x1002b10c)
  • ObjectStublessClient12 (Address: 0x1002b120)
  • ObjectStublessClient13 (Address: 0x1002b12c)
  • ObjectStublessClient14 (Address: 0x1002b114)
  • ObjectStublessClient15 (Address: 0x1002b0ec)
  • ObjectStublessClient16 (Address: 0x1002b110)
  • ObjectStublessClient17 (Address: 0x1002b0e8)
  • ObjectStublessClient3 (Address: 0x1002b100)
  • ObjectStublessClient6 (Address: 0x1002b0f8)
  • ObjectStublessClient7 (Address: 0x1002b128)
  • ObjectStublessClient8 (Address: 0x1002b0f4)
  • ObjectStublessClient9 (Address: 0x1002b0f0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1002b140)
  • IsDebuggerPresent (Address: 0x1002b138)
  • OutputDebugStringW (Address: 0x1002b13c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1002b148)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1002b150)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1002b160)
  • RaiseException (Address: 0x1002b15c)
  • SetLastError (Address: 0x1002b158)
  • SetUnhandledExceptionFilter (Address: 0x1002b164)
  • UnhandledExceptionFilter (Address: 0x1002b168)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1002b170)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002b17c)
  • HeapAlloc (Address: 0x1002b180)
  • HeapFree (Address: 0x1002b178)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1002b18c)
  • LocalFree (Address: 0x1002b188)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1002b194)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • WTSGetActiveConsoleSessionId (Address: 0x1002b19c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1002b1b0)
  • FreeLibrary (Address: 0x1002b1ac)
  • GetModuleFileNameA (Address: 0x1002b1b4)
  • GetModuleHandleExW (Address: 0x1002b1a4)
  • GetModuleHandleW (Address: 0x1002b1a8)
  • GetProcAddress (Address: 0x1002b1b8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002b1c0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1002b1dc)
  • GetCurrentProcessId (Address: 0x1002b1d4)
  • GetCurrentThread (Address: 0x1002b1cc)
  • GetCurrentThreadId (Address: 0x1002b1d0)
  • OpenProcessToken (Address: 0x1002b1e0)
  • OpenThreadToken (Address: 0x1002b1d8)
  • TerminateProcess (Address: 0x1002b1c8)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1002b1e8)
  • OpenProcess (Address: 0x1002b1ec)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1002b1f4)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1002b1fc)
  • AcquireSRWLockShared (Address: 0x1002b228)
  • CreateEventW (Address: 0x1002b214)
  • CreateMutexExW (Address: 0x1002b23c)
  • CreateSemaphoreExW (Address: 0x1002b238)
  • DeleteCriticalSection (Address: 0x1002b244)
  • EnterCriticalSection (Address: 0x1002b234)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1002b230)
  • InitializeSRWLock (Address: 0x1002b200)
  • LeaveCriticalSection (Address: 0x1002b204)
  • OpenSemaphoreW (Address: 0x1002b224)
  • ReleaseMutex (Address: 0x1002b218)
  • ReleaseSemaphore (Address: 0x1002b22c)
  • ReleaseSRWLockExclusive (Address: 0x1002b208)
  • ReleaseSRWLockShared (Address: 0x1002b21c)
  • ResetEvent (Address: 0x1002b210)
  • SetEvent (Address: 0x1002b240)
  • WaitForSingleObject (Address: 0x1002b220)
  • WaitForSingleObjectEx (Address: 0x1002b20c)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1002b24c)
  • Sleep (Address: 0x1002b258)
  • WaitOnAddress (Address: 0x1002b250)
  • WakeByAddressAll (Address: 0x1002b254)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1002b264)
  • GetTickCount (Address: 0x1002b260)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWork (Address: 0x1002b278)
  • CreateThreadpoolWork (Address: 0x1002b26c)
  • FreeLibraryWhenCallbackReturns (Address: 0x1002b274)
  • SubmitThreadpoolWork (Address: 0x1002b270)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1002b284)
  • EncodePointer (Address: 0x1002b280)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x1002b298)
  • RoOriginateError (Address: 0x1002b28c)
  • RoOriginateErrorW (Address: 0x1002b294)
  • RoTransformError (Address: 0x1002b29c)
  • SetRestrictedErrorInfo (Address: 0x1002b290)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1002b2a4)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1002b2a8)
  • RoReportFailedDelegate (Address: 0x1002b2ac)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1002b2b4)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x1002b2bc)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x1002b2d8)
  • HSTRING_UserMarshal (Address: 0x1002b2dc)
  • HSTRING_UserSize (Address: 0x1002b2e0)
  • HSTRING_UserUnmarshal (Address: 0x1002b2d4)
  • WindowsCreateString (Address: 0x1002b2d0)
  • WindowsCreateStringReference (Address: 0x1002b2c4)
  • WindowsDeleteString (Address: 0x1002b2c8)
  • WindowsDuplicateString (Address: 0x1002b2cc)
  • WindowsGetStringRawBuffer (Address: 0x1002b2e4)
  • WindowsIsStringEmpty (Address: 0x1002b2e8)
  • WindowsStringHasEmbeddedNull (Address: 0x1002b2ec)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1002b35c)
  • __std_terminate (Address: 0x1002b358)
  • _CxxThrowException (Address: 0x1002b354)
  • _except_handler4_common (Address: 0x1002b324)
  • _o___std_exception_copy (Address: 0x1002b350)
  • _o___std_exception_destroy (Address: 0x1002b34c)
  • _o___std_type_info_destroy_list (Address: 0x1002b348)
  • _o___stdio_common_vsnprintf_s (Address: 0x1002b33c)
  • _o___stdio_common_vswprintf (Address: 0x1002b338)
  • _o__callnewh (Address: 0x1002b334)
  • _o__cexit (Address: 0x1002b330)
  • _o__configure_narrow_argv (Address: 0x1002b32c)
  • _o__crt_atexit (Address: 0x1002b328)
  • _o__errno (Address: 0x1002b344)
  • _o__execute_onexit_table (Address: 0x1002b340)
  • _o__initialize_narrow_environment (Address: 0x1002b2f4)
  • _o__initialize_onexit_table (Address: 0x1002b2f8)
  • _o__invalid_parameter_noinfo (Address: 0x1002b2fc)
  • _o__purecall (Address: 0x1002b300)
  • _o__register_onexit_function (Address: 0x1002b304)
  • _o__seh_filter_dll (Address: 0x1002b308)
  • _o_free (Address: 0x1002b310)
  • _o_malloc (Address: 0x1002b314)
  • _o_realloc (Address: 0x1002b318)
  • _o_terminate (Address: 0x1002b31c)
  • _o_toupper (Address: 0x1002b320)
  • memcmp (Address: 0x1002b360)
  • memcpy (Address: 0x1002b364)
  • memmove (Address: 0x1002b30c)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1002b36c)
  • _initterm_e (Address: 0x1002b370)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1002b378)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x1002b390)
  • EventRegister (Address: 0x1002b38c)
  • EventSetInformation (Address: 0x1002b380)
  • EventUnregister (Address: 0x1002b384)
  • EventWriteTransfer (Address: 0x1002b388)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x1002b398)
  • GetTokenInformation (Address: 0x1002b39c)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1002b3a4)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x1002b3ac)
  • SHTaskPoolQueueTask (Address: 0x1002b3b0)
combase.dll
  • (Address: 0x1002b3b8)
  • (Address: 0x1002b3bc)
DeviceCredential.dll
  • DeviceCredentialAbortAuthentication (Address: 0x1002b000)
  • DeviceCredentialAbortProvisioning (Address: 0x1002b014)
  • DeviceCredentialCompleteAuthentication (Address: 0x1002b010)
  • DeviceCredentialCompleteProvisioning (Address: 0x1002b028)
  • DeviceCredentialDeprovision (Address: 0x1002b044)
  • DeviceCredentialFindClose (Address: 0x1002b038)
  • DeviceCredentialFindFirst (Address: 0x1002b034)
  • DeviceCredentialFindNext (Address: 0x1002b02c)
  • DeviceCredentialFreeBuffer (Address: 0x1002b00c)
  • DeviceCredentialGetAuthStageData (Address: 0x1002b004)
  • DeviceCredentialGetDeviceInfo (Address: 0x1002b030)
  • DeviceCredentialInitializeAuthentication (Address: 0x1002b048)
  • DeviceCredentialInitializeProvisioning (Address: 0x1002b03c)
  • DeviceCredentialRegisterPresenceMonitoring (Address: 0x1002b024)
  • DeviceCredentialRegisterPresenceMonitoringOnExistingDevice (Address: 0x1002b020)
  • DeviceCredentialSetOpaqueBlob (Address: 0x1002b040)
  • DeviceCredentialShowNotificationMessage (Address: 0x1002b008)
  • DeviceCredentialUnregisterPresenceMonitoring (Address: 0x1002b01c)
  • DeviceCredentialUpdatePresenceState (Address: 0x1002b018)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x1002b3c8)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1002b3cc)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1002b3c4)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1002b3d0)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1002b098)
  • CStdStubBuffer_Connect (Address: 0x1002b074)
  • CStdStubBuffer_CountRefs (Address: 0x1002b09c)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1002b090)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1002b07c)
  • CStdStubBuffer_Disconnect (Address: 0x1002b078)
  • CStdStubBuffer_Invoke (Address: 0x1002b068)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1002b060)
  • CStdStubBuffer_QueryInterface (Address: 0x1002b094)
  • IUnknown_AddRef_Proxy (Address: 0x1002b08c)
  • IUnknown_QueryInterface_Proxy (Address: 0x1002b050)
  • IUnknown_Release_Proxy (Address: 0x1002b0a0)
  • NdrCStdStubBuffer_Release (Address: 0x1002b054)
  • NdrCStdStubBuffer2_Release (Address: 0x1002b084)
  • NdrDllCanUnloadNow (Address: 0x1002b058)
  • NdrDllGetClassObject (Address: 0x1002b05c)
  • NdrOleAllocate (Address: 0x1002b080)
  • NdrOleFree (Address: 0x1002b0a4)
  • NdrStubCall2 (Address: 0x1002b088)
  • NdrStubForwardingFunction (Address: 0x1002b064)
  • RpcImpersonateClient (Address: 0x1002b070)
  • RpcRevertToSelfEx (Address: 0x1002b06c)