Windows.Security.Authentication.Identity.Provider.dll

Description: Secondary Factor Authentication Windows Runtime DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 824b205a3bee0fbda4f985f5e23551ae

File Size: 264.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x44c0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x4530)
  • DllGetClassObject (Ordinal: 3, Address: 0x4710)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1800319e8)
  • CoCreateInstance (Address: 0x1800319d8)
  • CoDecrementMTAUsage (Address: 0x1800319f0)
  • CoGetInterfaceAndReleaseStream (Address: 0x180031a20)
  • CoGetMalloc (Address: 0x180031a28)
  • CoIncrementMTAUsage (Address: 0x1800319f8)
  • CoMarshalInterface (Address: 0x180031a10)
  • CoReleaseMarshalData (Address: 0x180031a00)
  • CoTaskMemAlloc (Address: 0x1800319e0)
  • CoTaskMemFree (Address: 0x180031a18)
  • CreateStreamOnHGlobal (Address: 0x180031a08)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x180031a38)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x180031ad0)
  • CStdStubBuffer2_CountRefs (Address: 0x180031a68)
  • CStdStubBuffer2_Disconnect (Address: 0x180031aa0)
  • CStdStubBuffer2_QueryInterface (Address: 0x180031a98)
  • NdrProxyForwardingFunction3 (Address: 0x180031ad8)
  • NdrProxyForwardingFunction4 (Address: 0x180031a90)
  • NdrProxyForwardingFunction5 (Address: 0x180031ac0)
  • ObjectStublessClient10 (Address: 0x180031a48)
  • ObjectStublessClient11 (Address: 0x180031a58)
  • ObjectStublessClient12 (Address: 0x180031a70)
  • ObjectStublessClient13 (Address: 0x180031a50)
  • ObjectStublessClient14 (Address: 0x180031a60)
  • ObjectStublessClient15 (Address: 0x180031ae0)
  • ObjectStublessClient16 (Address: 0x180031aa8)
  • ObjectStublessClient17 (Address: 0x180031ab0)
  • ObjectStublessClient3 (Address: 0x180031a88)
  • ObjectStublessClient6 (Address: 0x180031ab8)
  • ObjectStublessClient7 (Address: 0x180031ac8)
  • ObjectStublessClient8 (Address: 0x180031a80)
  • ObjectStublessClient9 (Address: 0x180031a78)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180031b00)
  • IsDebuggerPresent (Address: 0x180031af0)
  • OutputDebugStringW (Address: 0x180031af8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180031b10)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180031b20)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180031b40)
  • RaiseException (Address: 0x180031b30)
  • SetLastError (Address: 0x180031b38)
  • SetUnhandledExceptionFilter (Address: 0x180031b48)
  • UnhandledExceptionFilter (Address: 0x180031b50)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180031b60)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180031b80)
  • HeapAlloc (Address: 0x180031b70)
  • HeapFree (Address: 0x180031b78)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180031b90)
  • LocalFree (Address: 0x180031b98)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180031ba8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • WTSGetActiveConsoleSessionId (Address: 0x180031bb8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180031be0)
  • FreeLibrary (Address: 0x180031be8)
  • GetModuleFileNameA (Address: 0x180031bc8)
  • GetModuleHandleExW (Address: 0x180031bd0)
  • GetModuleHandleW (Address: 0x180031bd8)
  • GetProcAddress (Address: 0x180031bf0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180031c00)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180031c10)
  • GetCurrentProcessId (Address: 0x180031c28)
  • GetCurrentThread (Address: 0x180031c38)
  • GetCurrentThreadId (Address: 0x180031c18)
  • OpenProcessToken (Address: 0x180031c40)
  • OpenThreadToken (Address: 0x180031c30)
  • TerminateProcess (Address: 0x180031c20)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x180031c50)
  • OpenProcess (Address: 0x180031c58)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180031c68)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180031c78)
  • RtlLookupFunctionEntry (Address: 0x180031c88)
  • RtlVirtualUnwind (Address: 0x180031c80)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180031c98)
  • AcquireSRWLockShared (Address: 0x180031cf0)
  • CreateEventW (Address: 0x180031cd8)
  • CreateMutexExW (Address: 0x180031d18)
  • CreateSemaphoreExW (Address: 0x180031d10)
  • DeleteCriticalSection (Address: 0x180031d28)
  • EnterCriticalSection (Address: 0x180031cc0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180031ce8)
  • InitializeSRWLock (Address: 0x180031d00)
  • LeaveCriticalSection (Address: 0x180031cb8)
  • OpenSemaphoreW (Address: 0x180031ca8)
  • ReleaseMutex (Address: 0x180031cd0)
  • ReleaseSemaphore (Address: 0x180031cf8)
  • ReleaseSRWLockExclusive (Address: 0x180031d08)
  • ReleaseSRWLockShared (Address: 0x180031cb0)
  • ResetEvent (Address: 0x180031cc8)
  • SetEvent (Address: 0x180031d20)
  • WaitForSingleObject (Address: 0x180031ce0)
  • WaitForSingleObjectEx (Address: 0x180031ca0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x180031d38)
  • Sleep (Address: 0x180031d50)
  • WaitOnAddress (Address: 0x180031d40)
  • WakeByAddressAll (Address: 0x180031d48)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180031d68)
  • GetTickCount (Address: 0x180031d60)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWork (Address: 0x180031d90)
  • CreateThreadpoolWork (Address: 0x180031d78)
  • FreeLibraryWhenCallbackReturns (Address: 0x180031d88)
  • SubmitThreadpoolWork (Address: 0x180031d80)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180031da8)
  • EncodePointer (Address: 0x180031da0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180031dd0)
  • RoOriginateError (Address: 0x180031db8)
  • RoOriginateErrorW (Address: 0x180031dc8)
  • RoTransformError (Address: 0x180031dd8)
  • SetRestrictedErrorInfo (Address: 0x180031dc0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x180031de8)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x180031df0)
  • RoReportFailedDelegate (Address: 0x180031df8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x180031e08)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x180031e18)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x180031e60)
  • HSTRING_UserFree64 (Address: 0x180031e70)
  • HSTRING_UserMarshal (Address: 0x180031e78)
  • HSTRING_UserMarshal64 (Address: 0x180031e58)
  • HSTRING_UserSize (Address: 0x180031e80)
  • HSTRING_UserSize64 (Address: 0x180031e68)
  • HSTRING_UserUnmarshal (Address: 0x180031e50)
  • HSTRING_UserUnmarshal64 (Address: 0x180031e48)
  • WindowsCreateString (Address: 0x180031e40)
  • WindowsCreateStringReference (Address: 0x180031e28)
  • WindowsDeleteString (Address: 0x180031e30)
  • WindowsDuplicateString (Address: 0x180031e38)
  • WindowsGetStringRawBuffer (Address: 0x180031e88)
  • WindowsIsStringEmpty (Address: 0x180031e90)
  • WindowsStringHasEmbeddedNull (Address: 0x180031e98)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180031f08)
  • __CxxFrameHandler3 (Address: 0x180031f68)
  • __CxxFrameHandler4 (Address: 0x180031f80)
  • __std_terminate (Address: 0x180031f78)
  • _CxxThrowException (Address: 0x180031f70)
  • _o___std_exception_copy (Address: 0x180031f60)
  • _o___std_exception_destroy (Address: 0x180031f58)
  • _o___std_type_info_destroy_list (Address: 0x180031f50)
  • _o___stdio_common_vsnprintf_s (Address: 0x180031f48)
  • _o___stdio_common_vswprintf (Address: 0x180031f40)
  • _o__callnewh (Address: 0x180031f38)
  • _o__cexit (Address: 0x180031f30)
  • _o__configure_narrow_argv (Address: 0x180031f28)
  • _o__crt_atexit (Address: 0x180031f20)
  • _o__errno (Address: 0x180031f18)
  • _o__execute_onexit_table (Address: 0x180031f10)
  • _o__initialize_narrow_environment (Address: 0x180031ea8)
  • _o__initialize_onexit_table (Address: 0x180031eb0)
  • _o__invalid_parameter_noinfo (Address: 0x180031eb8)
  • _o__purecall (Address: 0x180031ec0)
  • _o__register_onexit_function (Address: 0x180031ec8)
  • _o__seh_filter_dll (Address: 0x180031ed0)
  • _o_free (Address: 0x180031ee0)
  • _o_malloc (Address: 0x180031ee8)
  • _o_realloc (Address: 0x180031ef0)
  • _o_terminate (Address: 0x180031ef8)
  • _o_toupper (Address: 0x180031f00)
  • memcmp (Address: 0x180031f88)
  • memcpy (Address: 0x180031f90)
  • memmove (Address: 0x180031ed8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180031fa8)
  • _initterm_e (Address: 0x180031fa0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180031fc0)
  • wcscmp (Address: 0x180031fb8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x180031fd8)
  • EventRegister (Address: 0x180031ff0)
  • EventSetInformation (Address: 0x180031fe8)
  • EventUnregister (Address: 0x180031fe0)
  • EventWriteTransfer (Address: 0x180031fd0)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x180032008)
  • GetTokenInformation (Address: 0x180032000)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180032018)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180032030)
  • SHTaskPoolQueueTask (Address: 0x180032028)
combase.dll
  • (Address: 0x180032040)
  • (Address: 0x180032048)
DeviceCredential.dll
  • DeviceCredentialAbortAuthentication (Address: 0x180031880)
  • DeviceCredentialAbortProvisioning (Address: 0x1800318a8)
  • DeviceCredentialCompleteAuthentication (Address: 0x1800318a0)
  • DeviceCredentialCompleteProvisioning (Address: 0x1800318d0)
  • DeviceCredentialDeprovision (Address: 0x180031908)
  • DeviceCredentialFindClose (Address: 0x1800318f0)
  • DeviceCredentialFindFirst (Address: 0x1800318e8)
  • DeviceCredentialFindNext (Address: 0x1800318d8)
  • DeviceCredentialFreeBuffer (Address: 0x180031898)
  • DeviceCredentialGetAuthStageData (Address: 0x180031888)
  • DeviceCredentialGetDeviceInfo (Address: 0x1800318e0)
  • DeviceCredentialInitializeAuthentication (Address: 0x180031910)
  • DeviceCredentialInitializeProvisioning (Address: 0x1800318f8)
  • DeviceCredentialRegisterPresenceMonitoring (Address: 0x1800318c8)
  • DeviceCredentialRegisterPresenceMonitoringOnExistingDevice (Address: 0x1800318c0)
  • DeviceCredentialSetOpaqueBlob (Address: 0x180031900)
  • DeviceCredentialShowNotificationMessage (Address: 0x180031890)
  • DeviceCredentialUnregisterPresenceMonitoring (Address: 0x1800318b8)
  • DeviceCredentialUpdatePresenceState (Address: 0x1800318b0)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x180032070)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x180032058)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x180032068)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180032060)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180031970)
  • CStdStubBuffer_Connect (Address: 0x1800319c8)
  • CStdStubBuffer_CountRefs (Address: 0x180031980)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180031990)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1800319a8)
  • CStdStubBuffer_Disconnect (Address: 0x1800319b0)
  • CStdStubBuffer_Invoke (Address: 0x180031928)
  • CStdStubBuffer_IsIIDSupported (Address: 0x180031920)
  • CStdStubBuffer_QueryInterface (Address: 0x180031998)
  • IUnknown_AddRef_Proxy (Address: 0x180031948)
  • IUnknown_QueryInterface_Proxy (Address: 0x1800319b8)
  • IUnknown_Release_Proxy (Address: 0x180031978)
  • NdrCStdStubBuffer_Release (Address: 0x180031930)
  • NdrCStdStubBuffer2_Release (Address: 0x180031988)
  • NdrDllCanUnloadNow (Address: 0x180031938)
  • NdrDllGetClassObject (Address: 0x180031940)
  • NdrOleAllocate (Address: 0x1800319a0)
  • NdrOleFree (Address: 0x180031968)
  • NdrStubCall3 (Address: 0x1800319c0)
  • NdrStubForwardingFunction (Address: 0x180031950)
  • RpcImpersonateClient (Address: 0x180031960)
  • RpcRevertToSelfEx (Address: 0x180031958)