DaOtpCredentialProvider.dll

Description: DirectAccess One-Time Password Credential Provider

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 29805a279ead03751e8790d0586a9c0e

File Size: 320.0 KB

Uploaded At: Dec. 1, 2025, 7:25 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x16f0)
DllGetClassObject (Ordinal: 2, Address: 0x1710)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x180034988)
CoCreateInstance (Address: 0x180034978)
CoInitializeEx (Address: 0x1800349a8)
CoInitializeSecurity (Address: 0x180034970)
CoSetProxyBlanket (Address: 0x1800349b0)
CoTaskMemAlloc (Address: 0x180034998)
CoTaskMemFree (Address: 0x180034990)
CoUninitialize (Address: 0x1800349a0)
StringFromCLSID (Address: 0x180034980)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800349c0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800349d0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800349e8)
SetUnhandledExceptionFilter (Address: 0x1800349e0)
UnhandledExceptionFilter (Address: 0x1800349f0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180034a00)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180034a20)
HeapAlloc (Address: 0x180034a10)
HeapCreate (Address: 0x180034a38)
HeapDestroy (Address: 0x180034a18)
HeapFree (Address: 0x180034a28)
HeapReAlloc (Address: 0x180034a30)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180034a68)
FindResourceExW (Address: 0x180034a48)
LoadResource (Address: 0x180034a50)
LoadStringW (Address: 0x180034a60)
LockResource (Address: 0x180034a58)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180034a78)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180034a90)
GetCurrentProcess (Address: 0x180034a98)
GetCurrentProcessId (Address: 0x180034a88)
GetCurrentThreadId (Address: 0x180034aa8)
TerminateProcess (Address: 0x180034aa0)
TerminateThread (Address: 0x180034ab0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180034ac0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180034ad0)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180034ae0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180034af0)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180034b00)
DeleteCriticalSection (Address: 0x180034b28)
EnterCriticalSection (Address: 0x180034b20)
InitializeCriticalSection (Address: 0x180034b40)
InitializeCriticalSectionAndSpinCount (Address: 0x180034b30)
LeaveCriticalSection (Address: 0x180034b08)
ResetEvent (Address: 0x180034b38)
SetEvent (Address: 0x180034b18)
WaitForSingleObject (Address: 0x180034b10)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180034b50)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180034b68)
GetTickCount (Address: 0x180034b70)
GetTickCount64 (Address: 0x180034b60)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180034b88)
EncodePointer (Address: 0x180034b80)

DSPARSE.dll

DsGetRdnW (Address: 0x180034820)
DsUnquoteRdnValueW (Address: 0x180034818)

KERNEL32.dll

FindResourceW (Address: 0x180034830)
FormatMessageW (Address: 0x180034870)
FreeLibrary (Address: 0x180034848)
GetModuleHandleExW (Address: 0x180034840)
GlobalFree (Address: 0x180034860)
LocalAlloc (Address: 0x180034878)
LocalFree (Address: 0x180034868)
RegCreateKeyExW (Address: 0x180034838)
RegSetValueExW (Address: 0x180034858)
SizeofResource (Address: 0x180034850)

msvcrt.dll

___lc_codepage_func (Address: 0x180034bd0)
___lc_handle_func (Address: 0x180034bc8)
__C_specific_handler (Address: 0x180034cf8)
__crtLCMapStringA (Address: 0x180034bd8)
__CxxFrameHandler3 (Address: 0x180034c18)
__dllonexit (Address: 0x180034c38)
__pctype_func (Address: 0x180034bb8)
__uncaught_exception (Address: 0x180034bb0)
_amsg_exit (Address: 0x180034c70)
_CxxThrowException (Address: 0x180034c80)
_initterm (Address: 0x180034c60)
_lock (Address: 0x180034c48)
_ltow_s (Address: 0x180034c10)
_onexit (Address: 0x180034c30)
_stricmp (Address: 0x180034ce0)
_ultow_s (Address: 0x180034c98)
_unlock (Address: 0x180034c40)
_vsnwprintf (Address: 0x180034cf0)
_wcsicmp (Address: 0x180034c88)
_wcsnicmp (Address: 0x180034cb8)
_XcptFilter (Address: 0x180034c78)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180034cd0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180034ca8)
??0exception@@QEAA@XZ (Address: 0x180034d08)
??1exception@@UEAA@XZ (Address: 0x180034cc8)
??1type_info@@UEAA@XZ (Address: 0x180034c50)
?terminate@@YAXXZ (Address: 0x180034c58)
?what@exception@@UEBAPEBDXZ (Address: 0x180034c90)
abort (Address: 0x180034bf0)
calloc (Address: 0x180034be0)
free (Address: 0x180034cd8)
islower (Address: 0x180034be8)
isupper (Address: 0x180034bc0)
localeconv (Address: 0x180034c00)
malloc (Address: 0x180034c68)
memchr (Address: 0x180034c20)
memcpy (Address: 0x180034ba0)
memcpy_s (Address: 0x180034cb0)
memmove (Address: 0x180034ba8)
memmove_s (Address: 0x180034c08)
memset (Address: 0x180034c28)
setlocale (Address: 0x180034d00)
sprintf_s (Address: 0x180034cc0)
strcspn (Address: 0x180034bf8)
strerror (Address: 0x180034b98)
swscanf_s (Address: 0x180034d10)
wcscmp (Address: 0x180034d18)
wcscpy_s (Address: 0x180034ca0)
wcsstr (Address: 0x180034ce8)

ntdll.dll

EtwEventRegister (Address: 0x180034d68)
EtwEventUnregister (Address: 0x180034d60)
EtwEventWriteTransfer (Address: 0x180034d50)
EtwGetTraceEnableFlags (Address: 0x180034d80)
EtwGetTraceEnableLevel (Address: 0x180034d88)
EtwGetTraceLoggerHandle (Address: 0x180034d90)
EtwRegisterTraceGuidsW (Address: 0x180034d78)
EtwTraceMessage (Address: 0x180034d58)
EtwUnregisterTraceGuids (Address: 0x180034d70)
RtlCaptureContext (Address: 0x180034d38)
RtlInitString (Address: 0x180034d40)
RtlLookupFunctionEntry (Address: 0x180034d30)
RtlNtStatusToDosError (Address: 0x180034d48)
RtlVirtualUnwind (Address: 0x180034d28)

OLEAUT32.dll

GetErrorInfo (Address: 0x180034888)
SysAllocString (Address: 0x1800348a8)
SysAllocStringByteLen (Address: 0x1800348a0)
SysAllocStringLen (Address: 0x180034890)
SysFreeString (Address: 0x180034898)
SysStringByteLen (Address: 0x1800348b0)
SysStringLen (Address: 0x1800348b8)
VariantClear (Address: 0x1800348c8)
VariantInit (Address: 0x1800348c0)

SHLWAPI.dll

(Address: 0x1800348d8)

USER32.dll

LoadImageW (Address: 0x1800348f0)
wsprintfW (Address: 0x1800348e8)

WINHTTP.dll

WinHttpAddRequestHeaders (Address: 0x180034930)
WinHttpCloseHandle (Address: 0x180034908)
WinHttpConnect (Address: 0x180034958)
WinHttpOpen (Address: 0x180034928)
WinHttpOpenRequest (Address: 0x180034940)
WinHttpQueryHeaders (Address: 0x180034960)
WinHttpQueryOption (Address: 0x180034900)
WinHttpReadData (Address: 0x180034918)
WinHttpReceiveResponse (Address: 0x180034910)
WinHttpSendRequest (Address: 0x180034920)
WinHttpSetOption (Address: 0x180034948)
WinHttpSetStatusCallback (Address: 0x180034950)
WinHttpSetTimeouts (Address: 0x180034938)