creates, lists, and deletes stored user names and passwords or credentials.

Paths:

C:\Windows\System32\cmdkey.exe
C:\Windows\SysWOW64\cmdkey.exe

Detection: Usage of this command could be an IOC

Credentials

List cached credentials

cmdkey /list