vaultcli.dll

Description: Credential Vault Client Library

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: 1e925549693afd479467216a976a66f1

File Size: 314.0 KB

Uploaded At: Dec. 1, 2025, 7:41 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 101, Address: 0x1b170)
(Ordinal: 102, Address: 0x1b210)
(Ordinal: 103, Address: 0x1b0e0)
(Ordinal: 104, Address: 0x1b2f0)
(Ordinal: 105, Address: 0x1b380)
(Ordinal: 106, Address: 0x1ad30)
(Ordinal: 107, Address: 0x36b0)
DllCanUnloadNow (Ordinal: 108, Address: 0xe920)
DllGetActivationFactory (Ordinal: 109, Address: 0xea90)
DllGetClassObject (Ordinal: 110, Address: 0x17d70)
VaultAddItem (Ordinal: 111, Address: 0x1b510)
VaultCloseVault (Ordinal: 112, Address: 0x3620)
VaultCreateItemType (Ordinal: 113, Address: 0x1b5d0)
VaultDeleteItemType (Ordinal: 114, Address: 0x1b6e0)
VaultEnumerateItemTypes (Ordinal: 115, Address: 0x1b7c0)
VaultEnumerateItems (Ordinal: 116, Address: 0x2820)
VaultEnumerateVaults (Ordinal: 117, Address: 0x1b900)
VaultFindItems (Ordinal: 118, Address: 0x1b9d0)
VaultFree (Ordinal: 119, Address: 0x17610)
VaultGetInformation (Ordinal: 120, Address: 0x1bb00)
VaultGetItem (Ordinal: 121, Address: 0x3500)
VaultGetItemType (Ordinal: 122, Address: 0x3400)
VaultOpenVault (Ordinal: 123, Address: 0x38f0)
VaultRemoveItem (Ordinal: 124, Address: 0x1bb90)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18003b668)
CoCreateInstance (Address: 0x18003b660)
CoDecrementMTAUsage (Address: 0x18003b688)
CoGetCallContext (Address: 0x18003b640)
CoIncrementMTAUsage (Address: 0x18003b650)
CoMarshalInterface (Address: 0x18003b648)
CoReleaseMarshalData (Address: 0x18003b638)
CoSetProxyBlanket (Address: 0x18003b670)
CoTaskMemAlloc (Address: 0x18003b678)
CoTaskMemFree (Address: 0x18003b658)
CreateStreamOnHGlobal (Address: 0x18003b680)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18003b698)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18003b6c0)
CStdStubBuffer2_CountRefs (Address: 0x18003b720)
CStdStubBuffer2_Disconnect (Address: 0x18003b6b0)
CStdStubBuffer2_QueryInterface (Address: 0x18003b6e0)
NdrProxyForwardingFunction3 (Address: 0x18003b6d0)
NdrProxyForwardingFunction4 (Address: 0x18003b718)
NdrProxyForwardingFunction5 (Address: 0x18003b738)
ObjectStublessClient10 (Address: 0x18003b6f0)
ObjectStublessClient11 (Address: 0x18003b6c8)
ObjectStublessClient12 (Address: 0x18003b6e8)
ObjectStublessClient13 (Address: 0x18003b700)
ObjectStublessClient14 (Address: 0x18003b708)
ObjectStublessClient15 (Address: 0x18003b6a8)
ObjectStublessClient16 (Address: 0x18003b6d8)
ObjectStublessClient17 (Address: 0x18003b6f8)
ObjectStublessClient6 (Address: 0x18003b730)
ObjectStublessClient7 (Address: 0x18003b6b8)
ObjectStublessClient8 (Address: 0x18003b728)
ObjectStublessClient9 (Address: 0x18003b710)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003b758)
IsDebuggerPresent (Address: 0x18003b750)
OutputDebugStringW (Address: 0x18003b748)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003b780)
RaiseException (Address: 0x18003b768)
SetLastError (Address: 0x18003b788)
SetUnhandledExceptionFilter (Address: 0x18003b778)
UnhandledExceptionFilter (Address: 0x18003b770)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003b7a0)
DuplicateHandle (Address: 0x18003b798)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003b7b0)
HeapAlloc (Address: 0x18003b7c0)
HeapFree (Address: 0x18003b7b8)
HeapSize (Address: 0x18003b7c8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003b7e0)
LocalFree (Address: 0x18003b7d8)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalSize (Address: 0x18003b7f0)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18003b818)
GetModuleFileNameA (Address: 0x18003b800)
GetModuleHandleExW (Address: 0x18003b810)
GetModuleHandleW (Address: 0x18003b820)
GetProcAddress (Address: 0x18003b808)
LoadStringW (Address: 0x18003b828)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003b838)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003b878)
GetCurrentProcessId (Address: 0x18003b860)
GetCurrentThread (Address: 0x18003b868)
GetCurrentThreadId (Address: 0x18003b850)
OpenProcessToken (Address: 0x18003b858)
OpenThreadToken (Address: 0x18003b848)
SetThreadToken (Address: 0x18003b870)
TerminateProcess (Address: 0x18003b880)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18003b890)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003b8a0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18003b8b0)
RtlLookupFunctionEntry (Address: 0x18003b8c0)
RtlVirtualUnwind (Address: 0x18003b8b8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003b8d0)
AcquireSRWLockShared (Address: 0x18003b920)
CreateMutexExW (Address: 0x18003b900)
CreateSemaphoreExW (Address: 0x18003b8e8)
InitializeSRWLock (Address: 0x18003b8f0)
OpenSemaphoreW (Address: 0x18003b918)
ReleaseMutex (Address: 0x18003b8e0)
ReleaseSemaphore (Address: 0x18003b8f8)
ReleaseSRWLockExclusive (Address: 0x18003b8d8)
ReleaseSRWLockShared (Address: 0x18003b928)
WaitForSingleObject (Address: 0x18003b910)
WaitForSingleObjectEx (Address: 0x18003b908)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18003b948)
InitOnceComplete (Address: 0x18003b938)
InitOnceExecuteOnce (Address: 0x18003b950)
Sleep (Address: 0x18003b940)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18003b968)
GetTickCount (Address: 0x18003b960)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpool (Address: 0x18003b988)
CloseThreadpoolWork (Address: 0x18003b998)
CreateThreadpool (Address: 0x18003b9a0)
CreateThreadpoolWork (Address: 0x18003b978)
FreeLibraryWhenCallbackReturns (Address: 0x18003b980)
SubmitThreadpoolWork (Address: 0x18003b990)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18003b9b0)
EncodePointer (Address: 0x18003b9b8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18003b9d0)
RoOriginateError (Address: 0x18003b9d8)
RoOriginateErrorW (Address: 0x18003b9c8)
RoTransformError (Address: 0x18003b9e8)
SetRestrictedErrorInfo (Address: 0x18003b9e0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18003ba08)
RoGetMatchingRestrictedErrorInfo (Address: 0x18003ba00)
RoReportFailedDelegate (Address: 0x18003b9f8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18003ba20)
RoGetActivationFactory (Address: 0x18003ba28)
RoInitialize (Address: 0x18003ba18)
RoUninitialize (Address: 0x18003ba30)

api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x18003ba40)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18003ba90)
HSTRING_UserFree64 (Address: 0x18003ba70)
HSTRING_UserMarshal (Address: 0x18003ba88)
HSTRING_UserMarshal64 (Address: 0x18003ba80)
HSTRING_UserSize (Address: 0x18003bac8)
HSTRING_UserSize64 (Address: 0x18003bab0)
HSTRING_UserUnmarshal (Address: 0x18003ba78)
HSTRING_UserUnmarshal64 (Address: 0x18003ba60)
WindowsCompareStringOrdinal (Address: 0x18003ba68)
WindowsCreateString (Address: 0x18003bab8)
WindowsCreateStringReference (Address: 0x18003ba58)
WindowsDeleteString (Address: 0x18003ba98)
WindowsDuplicateString (Address: 0x18003baa0)
WindowsGetStringLen (Address: 0x18003ba50)
WindowsGetStringRawBuffer (Address: 0x18003bac0)
WindowsIsStringEmpty (Address: 0x18003baa8)
WindowsStringHasEmbeddedNull (Address: 0x18003bad0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18003bb00)
GetTraceEnableLevel (Address: 0x18003bae0)
GetTraceLoggerHandle (Address: 0x18003bb08)
RegisterTraceGuidsW (Address: 0x18003bae8)
TraceMessage (Address: 0x18003baf8)
UnregisterTraceGuids (Address: 0x18003baf0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18003bb28)
EventRegister (Address: 0x18003bb30)
EventSetInformation (Address: 0x18003bb18)
EventUnregister (Address: 0x18003bb38)
EventWriteTransfer (Address: 0x18003bb20)

api-ms-win-security-base-l1-1-0.dll

DuplicateToken (Address: 0x18003bb48)
GetTokenInformation (Address: 0x18003bb58)
RevertToSelf (Address: 0x18003bb50)

api-ms-win-security-base-l1-2-0.dll

CheckTokenCapability (Address: 0x18003bb68)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x18003bb78)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18003bb88)
OpenSCManagerW (Address: 0x18003bb98)
OpenServiceW (Address: 0x18003bba0)
StartServiceW (Address: 0x18003bb90)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x18003bbb0)

bcrypt.dll

BCryptGenRandom (Address: 0x18003bbc0)

msvcrt.dll

__C_specific_handler (Address: 0x18003bcc0)
__CxxFrameHandler3 (Address: 0x18003bc78)
__dllonexit (Address: 0x18003bbd0)
_amsg_exit (Address: 0x18003bca0)
_callnewh (Address: 0x18003bc30)
_CxxThrowException (Address: 0x18003bc50)
_initterm (Address: 0x18003bc88)
_lock (Address: 0x18003bcd0)
_onexit (Address: 0x18003bcc8)
_purecall (Address: 0x18003bcb0)
_unlock (Address: 0x18003bbd8)
_vsnprintf_s (Address: 0x18003bc10)
_vsnwprintf (Address: 0x18003bbe8)
_XcptFilter (Address: 0x18003bca8)
??_V@YAXPEAX@Z (Address: 0x18003bc70)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18003bc38)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18003bc40)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18003bc08)
??0exception@@QEAA@XZ (Address: 0x18003bc00)
??1exception@@UEAA@XZ (Address: 0x18003bbf8)
??1type_info@@UEAA@XZ (Address: 0x18003bc68)
??3@YAXPEAX@Z (Address: 0x18003bcb8)
?terminate@@YAXXZ (Address: 0x18003bc80)
?what@exception@@UEBAPEBDXZ (Address: 0x18003bc48)
free (Address: 0x18003bc98)
malloc (Address: 0x18003bc90)
memcmp (Address: 0x18003bbe0)
memcpy (Address: 0x18003bc58)
memcpy_s (Address: 0x18003bbf0)
memmove (Address: 0x18003bc60)
memmove_s (Address: 0x18003bc20)
memset (Address: 0x18003bcd8)
realloc (Address: 0x18003bc18)
wcsncmp (Address: 0x18003bc28)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18003b5e0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003b5f8)
CStdStubBuffer_DebugServerRelease (Address: 0x18003b5c0)
CStdStubBuffer_Invoke (Address: 0x18003b620)
CStdStubBuffer_IsIIDSupported (Address: 0x18003b5a8)
I_RpcExceptionFilter (Address: 0x18003b610)
IUnknown_AddRef_Proxy (Address: 0x18003b600)
IUnknown_QueryInterface_Proxy (Address: 0x18003b5b8)
IUnknown_Release_Proxy (Address: 0x18003b5d8)
NdrClientCall3 (Address: 0x18003b590)
NdrCStdStubBuffer2_Release (Address: 0x18003b5b0)
NdrDllCanUnloadNow (Address: 0x18003b628)
NdrDllGetClassObject (Address: 0x18003b5d0)
NdrOleAllocate (Address: 0x18003b5c8)
NdrOleFree (Address: 0x18003b5e8)
NdrStubCall3 (Address: 0x18003b588)
NdrStubForwardingFunction (Address: 0x18003b618)
RpcBindingBind (Address: 0x18003b608)
RpcBindingCreateW (Address: 0x18003b5f0)
RpcBindingFree (Address: 0x18003b5a0)
RpcBindingUnbind (Address: 0x18003b598)