vaultcli.dll

Description: Credential Vault Client Library

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 1741299fe38ca46a6fe70de43d7ec774

File Size: 209.5 KB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 101, Address: 0x15370)
(Ordinal: 102, Address: 0x155a0)
(Ordinal: 103, Address: 0x152d0)
(Ordinal: 104, Address: 0x15660)
(Ordinal: 105, Address: 0x15700)
(Ordinal: 106, Address: 0x15170)
(Ordinal: 107, Address: 0x15410)
DllCanUnloadNow (Ordinal: 108, Address: 0xfde0)
DllGetActivationFactory (Ordinal: 109, Address: 0xfce0)
DllGetClassObject (Ordinal: 110, Address: 0xdd10)
VaultAddItem (Ordinal: 111, Address: 0x158b0)
VaultCloseVault (Ordinal: 112, Address: 0xfee0)
VaultCreateItemType (Ordinal: 113, Address: 0x15940)
VaultDeleteItemType (Ordinal: 114, Address: 0x15a00)
VaultEnumerateItemTypes (Ordinal: 115, Address: 0x15ac0)
VaultEnumerateItems (Ordinal: 116, Address: 0x15bc0)
VaultEnumerateVaults (Ordinal: 117, Address: 0x15c80)
VaultFindItems (Ordinal: 118, Address: 0x15d30)
VaultFree (Ordinal: 119, Address: 0x15240)
VaultGetInformation (Ordinal: 120, Address: 0x15e00)
VaultGetItem (Ordinal: 121, Address: 0x15e90)
VaultGetItemType (Ordinal: 122, Address: 0x15f40)
VaultOpenVault (Ordinal: 123, Address: 0xfe60)
VaultRemoveItem (Ordinal: 124, Address: 0x15ff0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10030074)
CoCreateInstance (Address: 0x10030064)
CoDecrementMTAUsage (Address: 0x1003007c)
CoGetCallContext (Address: 0x1003006c)
CoIncrementMTAUsage (Address: 0x10030060)
CoMarshalInterface (Address: 0x10030068)
CoReleaseMarshalData (Address: 0x10030058)
CoSetProxyBlanket (Address: 0x10030070)
CoTaskMemAlloc (Address: 0x10030078)
CoTaskMemFree (Address: 0x10030080)
CreateStreamOnHGlobal (Address: 0x1003005c)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10030088)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100300bc)
CStdStubBuffer2_CountRefs (Address: 0x100300b0)
CStdStubBuffer2_Disconnect (Address: 0x100300d4)
CStdStubBuffer2_QueryInterface (Address: 0x100300c8)
NdrProxyForwardingFunction3 (Address: 0x10030094)
NdrProxyForwardingFunction4 (Address: 0x100300b8)
NdrProxyForwardingFunction5 (Address: 0x100300b4)
ObjectStublessClient10 (Address: 0x1003009c)
ObjectStublessClient11 (Address: 0x10030090)
ObjectStublessClient12 (Address: 0x100300c0)
ObjectStublessClient13 (Address: 0x100300cc)
ObjectStublessClient14 (Address: 0x100300d8)
ObjectStublessClient15 (Address: 0x100300c4)
ObjectStublessClient16 (Address: 0x10030098)
ObjectStublessClient17 (Address: 0x100300a0)
ObjectStublessClient6 (Address: 0x100300ac)
ObjectStublessClient7 (Address: 0x100300d0)
ObjectStublessClient8 (Address: 0x100300a8)
ObjectStublessClient9 (Address: 0x100300a4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100300e4)
IsDebuggerPresent (Address: 0x100300e0)
OutputDebugStringW (Address: 0x100300e8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100300f4)
RaiseException (Address: 0x10030100)
SetLastError (Address: 0x100300f0)
SetUnhandledExceptionFilter (Address: 0x100300f8)
UnhandledExceptionFilter (Address: 0x100300fc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10030108)
DuplicateHandle (Address: 0x1003010c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10030120)
HeapAlloc (Address: 0x10030118)
HeapFree (Address: 0x1003011c)
HeapSize (Address: 0x10030114)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10030128)
LocalFree (Address: 0x1003012c)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalSize (Address: 0x10030134)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1003013c)
GetModuleFileNameA (Address: 0x10030148)
GetModuleHandleExW (Address: 0x1003014c)
GetModuleHandleW (Address: 0x10030144)
GetProcAddress (Address: 0x10030140)
LoadStringW (Address: 0x10030150)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10030158)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10030160)
GetCurrentProcessId (Address: 0x10030174)
GetCurrentThread (Address: 0x1003017c)
GetCurrentThreadId (Address: 0x10030164)
OpenProcessToken (Address: 0x10030170)
OpenThreadToken (Address: 0x10030178)
SetThreadToken (Address: 0x10030168)
TerminateProcess (Address: 0x1003016c)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10030184)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003018c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100301a4)
AcquireSRWLockShared (Address: 0x100301c0)
CreateMutexExW (Address: 0x100301b8)
CreateSemaphoreExW (Address: 0x1003019c)
InitializeSRWLock (Address: 0x10030194)
OpenSemaphoreW (Address: 0x100301b4)
ReleaseMutex (Address: 0x100301b0)
ReleaseSemaphore (Address: 0x100301a8)
ReleaseSRWLockExclusive (Address: 0x100301bc)
ReleaseSRWLockShared (Address: 0x10030198)
WaitForSingleObject (Address: 0x100301ac)
WaitForSingleObjectEx (Address: 0x100301a0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100301d0)
InitOnceComplete (Address: 0x100301d4)
InitOnceExecuteOnce (Address: 0x100301cc)
Sleep (Address: 0x100301c8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100301e0)
GetTickCount (Address: 0x100301dc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpool (Address: 0x100301fc)
CloseThreadpoolWork (Address: 0x100301e8)
CreateThreadpool (Address: 0x100301f8)
CreateThreadpoolWork (Address: 0x100301ec)
FreeLibraryWhenCallbackReturns (Address: 0x100301f0)
SubmitThreadpoolWork (Address: 0x100301f4)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10030204)
EncodePointer (Address: 0x10030208)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10030214)
RoOriginateError (Address: 0x1003021c)
RoOriginateErrorW (Address: 0x10030210)
RoTransformError (Address: 0x10030220)
SetRestrictedErrorInfo (Address: 0x10030218)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10030230)
RoGetMatchingRestrictedErrorInfo (Address: 0x1003022c)
RoReportFailedDelegate (Address: 0x10030228)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10030244)
RoGetActivationFactory (Address: 0x1003023c)
RoInitialize (Address: 0x10030240)
RoUninitialize (Address: 0x10030238)

api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x1003024c)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10030268)
HSTRING_UserMarshal (Address: 0x1003026c)
HSTRING_UserSize (Address: 0x10030284)
HSTRING_UserUnmarshal (Address: 0x10030264)
WindowsCompareStringOrdinal (Address: 0x1003025c)
WindowsCreateString (Address: 0x10030254)
WindowsCreateStringReference (Address: 0x10030260)
WindowsDeleteString (Address: 0x10030274)
WindowsDuplicateString (Address: 0x10030270)
WindowsGetStringLen (Address: 0x10030278)
WindowsGetStringRawBuffer (Address: 0x1003027c)
WindowsIsStringEmpty (Address: 0x10030258)
WindowsStringHasEmbeddedNull (Address: 0x10030280)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x10030294)
GetTraceEnableLevel (Address: 0x10030290)
GetTraceLoggerHandle (Address: 0x10030298)
RegisterTraceGuidsW (Address: 0x1003028c)
TraceMessage (Address: 0x1003029c)
UnregisterTraceGuids (Address: 0x100302a0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100302b8)
EventRegister (Address: 0x100302ac)
EventSetInformation (Address: 0x100302b4)
EventUnregister (Address: 0x100302a8)
EventWriteTransfer (Address: 0x100302b0)

api-ms-win-security-base-l1-1-0.dll

DuplicateToken (Address: 0x100302c8)
GetTokenInformation (Address: 0x100302c4)
RevertToSelf (Address: 0x100302c0)

api-ms-win-security-base-l1-2-0.dll

CheckTokenCapability (Address: 0x100302d0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSidToSidW (Address: 0x100302d8)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x100302ec)
OpenSCManagerW (Address: 0x100302e4)
OpenServiceW (Address: 0x100302e8)
StartServiceW (Address: 0x100302e0)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x100302f4)

bcrypt.dll

BCryptGenRandom (Address: 0x100302fc)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x10030380)
__dllonexit (Address: 0x1003030c)
_amsg_exit (Address: 0x10030370)
_callnewh (Address: 0x10030338)
_CxxThrowException (Address: 0x10030348)
_except_handler4_common (Address: 0x10030360)
_ftol2 (Address: 0x10030388)
_initterm (Address: 0x10030364)
_lock (Address: 0x10030308)
_onexit (Address: 0x10030310)
_purecall (Address: 0x10030378)
_unlock (Address: 0x10030304)
_vsnprintf_s (Address: 0x10030328)
_vsnwprintf (Address: 0x10030314)
_XcptFilter (Address: 0x10030374)
??_V@YAXPAX@Z (Address: 0x10030358)
??0exception@@QAE@ABQBD@Z (Address: 0x1003033c)
??0exception@@QAE@ABQBDH@Z (Address: 0x10030340)
??0exception@@QAE@ABV0@@Z (Address: 0x10030324)
??0exception@@QAE@XZ (Address: 0x10030320)
??1exception@@UAE@XZ (Address: 0x1003031c)
??1type_info@@UAE@XZ (Address: 0x10030354)
??3@YAXPAX@Z (Address: 0x1003037c)
?terminate@@YAXXZ (Address: 0x1003035c)
?what@exception@@UBEPBDXZ (Address: 0x10030344)
free (Address: 0x1003036c)
malloc (Address: 0x10030368)
memcmp (Address: 0x10030384)
memcpy (Address: 0x1003034c)
memcpy_s (Address: 0x10030318)
memmove (Address: 0x10030350)
memmove_s (Address: 0x10030330)
memset (Address: 0x1003038c)
realloc (Address: 0x1003032c)
wcsncmp (Address: 0x10030334)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1003002c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10030038)
CStdStubBuffer_DebugServerRelease (Address: 0x1003001c)
CStdStubBuffer_Invoke (Address: 0x1003004c)
CStdStubBuffer_IsIIDSupported (Address: 0x10030014)
I_RpcExceptionFilter (Address: 0x10030050)
IUnknown_AddRef_Proxy (Address: 0x1003003c)
IUnknown_QueryInterface_Proxy (Address: 0x10030018)
IUnknown_Release_Proxy (Address: 0x10030028)
NdrClientCall4 (Address: 0x10030000)
NdrCStdStubBuffer2_Release (Address: 0x10030008)
NdrDllCanUnloadNow (Address: 0x10030024)
NdrDllGetClassObject (Address: 0x10030010)
NdrOleAllocate (Address: 0x10030020)
NdrOleFree (Address: 0x10030030)
NdrStubCall2 (Address: 0x10030044)
NdrStubForwardingFunction (Address: 0x10030048)
RpcBindingBind (Address: 0x10030040)
RpcBindingCreateW (Address: 0x10030034)
RpcBindingFree (Address: 0x1003000c)
RpcBindingUnbind (Address: 0x10030004)