CredProvDataModel.dll

Description: Cred Prov Data Model

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: e6007b0e7ac0614bfc0b21930b2878f6

File Size: 469.0 KB

Uploaded At: Dec. 1, 2025, 7:54 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x296e0)
DllGetActivationFactory (Ordinal: 2, Address: 0x29710)
DllGetClassObject (Ordinal: 3, Address: 0x475e0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1006e008)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1006e028)
CoCreateInstance (Address: 0x1006e018)
CoGetInterfaceAndReleaseStream (Address: 0x1006e024)
CoMarshalInterface (Address: 0x1006e034)
CoReleaseMarshalData (Address: 0x1006e020)
CoTaskMemAlloc (Address: 0x1006e02c)
CoTaskMemFree (Address: 0x1006e030)
CoTaskMemRealloc (Address: 0x1006e01c)
CoWaitForMultipleHandles (Address: 0x1006e010)
CreateStreamOnHGlobal (Address: 0x1006e038)
StringFromCLSID (Address: 0x1006e014)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1006e040)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1006e04c)
IsDebuggerPresent (Address: 0x1006e050)
OutputDebugStringW (Address: 0x1006e048)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1006e058)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1006e060)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1006e074)
RaiseException (Address: 0x1006e078)
SetLastError (Address: 0x1006e068)
SetUnhandledExceptionFilter (Address: 0x1006e06c)
UnhandledExceptionFilter (Address: 0x1006e070)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1006e080)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1006e08c)
HeapAlloc (Address: 0x1006e088)
HeapFree (Address: 0x1006e090)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1006e098)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1006e0a0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1006e0b0)
FreeLibrary (Address: 0x1006e0bc)
GetModuleFileNameA (Address: 0x1006e0b4)
GetModuleHandleExW (Address: 0x1006e0b8)
GetModuleHandleW (Address: 0x1006e0ac)
GetProcAddress (Address: 0x1006e0a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1006e0c4)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1006e0d4)
GetCurrentProcessId (Address: 0x1006e0cc)
GetCurrentThreadId (Address: 0x1006e0d8)
OpenProcessToken (Address: 0x1006e0d0)
TerminateProcess (Address: 0x1006e0dc)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1006e0e8)
OpenProcess (Address: 0x1006e0e4)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1006e0f0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1006e0fc)
RegGetValueW (Address: 0x1006e100)
RegOpenKeyExW (Address: 0x1006e0f8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1006e108)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1006e128)
AcquireSRWLockShared (Address: 0x1006e134)
CreateEventExW (Address: 0x1006e150)
CreateMutexExW (Address: 0x1006e13c)
CreateSemaphoreExW (Address: 0x1006e130)
DeleteCriticalSection (Address: 0x1006e138)
EnterCriticalSection (Address: 0x1006e140)
InitializeCriticalSectionEx (Address: 0x1006e114)
InitializeSRWLock (Address: 0x1006e144)
LeaveCriticalSection (Address: 0x1006e148)
OpenSemaphoreW (Address: 0x1006e120)
ReleaseMutex (Address: 0x1006e14c)
ReleaseSemaphore (Address: 0x1006e118)
ReleaseSRWLockExclusive (Address: 0x1006e12c)
ReleaseSRWLockShared (Address: 0x1006e110)
SetEvent (Address: 0x1006e154)
WaitForSingleObject (Address: 0x1006e124)
WaitForSingleObjectEx (Address: 0x1006e11c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1006e168)
InitOnceComplete (Address: 0x1006e164)
InitOnceExecuteOnce (Address: 0x1006e15c)
Sleep (Address: 0x1006e160)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1006e170)
GetTickCount (Address: 0x1006e174)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1006e184)
CreateThreadpoolTimer (Address: 0x1006e17c)
SetThreadpoolTimer (Address: 0x1006e188)
WaitForThreadpoolTimerCallbacks (Address: 0x1006e180)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1006e190)
EncodePointer (Address: 0x1006e194)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1006e1a8)
RoOriginateError (Address: 0x1006e1a4)
RoOriginateErrorW (Address: 0x1006e1a0)
RoTransformError (Address: 0x1006e1ac)
SetRestrictedErrorInfo (Address: 0x1006e19c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1006e1bc)
RoGetMatchingRestrictedErrorInfo (Address: 0x1006e1b4)
RoReportFailedDelegate (Address: 0x1006e1b8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1006e1c8)
RoGetActivationFactory (Address: 0x1006e1c4)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x1006e1d0)
WindowsCreateString (Address: 0x1006e1e0)
WindowsCreateStringReference (Address: 0x1006e1d4)
WindowsDeleteString (Address: 0x1006e1dc)
WindowsDuplicateString (Address: 0x1006e1d8)
WindowsGetStringRawBuffer (Address: 0x1006e1e4)
WindowsIsStringEmpty (Address: 0x1006e1ec)
WindowsStringHasEmbeddedNull (Address: 0x1006e1e8)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1006e268)
__std_terminate (Address: 0x1006e264)
_CxxThrowException (Address: 0x1006e260)
_except_handler4_common (Address: 0x1006e240)
_o___std_exception_copy (Address: 0x1006e25c)
_o___std_exception_destroy (Address: 0x1006e258)
_o___std_type_info_destroy_list (Address: 0x1006e254)
_o___stdio_common_vsnprintf_s (Address: 0x1006e250)
_o___stdio_common_vswprintf (Address: 0x1006e24c)
_o__callnewh (Address: 0x1006e248)
_o__cexit (Address: 0x1006e244)
_o__configure_narrow_argv (Address: 0x1006e1f4)
_o__crt_atexit (Address: 0x1006e1f8)
_o__errno (Address: 0x1006e1fc)
_o__execute_onexit_table (Address: 0x1006e200)
_o__get_errno (Address: 0x1006e204)
_o__initialize_narrow_environment (Address: 0x1006e208)
_o__initialize_onexit_table (Address: 0x1006e20c)
_o__invalid_parameter_noinfo (Address: 0x1006e210)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1006e214)
_o__purecall (Address: 0x1006e218)
_o__register_onexit_function (Address: 0x1006e21c)
_o__seh_filter_dll (Address: 0x1006e220)
_o__set_errno (Address: 0x1006e224)
_o_free (Address: 0x1006e22c)
_o_malloc (Address: 0x1006e230)
_o_realloc (Address: 0x1006e234)
_o_terminate (Address: 0x1006e238)
_o_toupper (Address: 0x1006e23c)
memcmp (Address: 0x1006e26c)
memcpy (Address: 0x1006e270)
memmove (Address: 0x1006e228)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1006e27c)
_initterm_e (Address: 0x1006e278)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1006e284)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1006e29c)
EventProviderEnabled (Address: 0x1006e298)
EventRegister (Address: 0x1006e2a0)
EventSetInformation (Address: 0x1006e294)
EventUnregister (Address: 0x1006e290)
EventWriteTransfer (Address: 0x1006e28c)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1006e2a8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1006e2b4)
SHTaskPoolQueueTask (Address: 0x1006e2b0)

msvcp_win.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x1006e2bc)

OLEAUT32.dll

SysFreeString (Address: 0x1006e000)