CredProvDataModel.dll

Description: Cred Prov Data Model

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8d5080b75689d08e94268dcec246a7ea

File Size: 597.0 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x21290)
DllGetActivationFactory (Ordinal: 2, Address: 0x210e0)
DllGetClassObject (Ordinal: 3, Address: 0x42ec0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18007a0f8)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18007a110)
CoCreateInstance (Address: 0x18007a120)
CoGetInterfaceAndReleaseStream (Address: 0x18007a148)
CoMarshalInterface (Address: 0x18007a130)
CoReleaseMarshalData (Address: 0x18007a118)
CoTaskMemAlloc (Address: 0x18007a138)
CoTaskMemFree (Address: 0x18007a140)
CoTaskMemRealloc (Address: 0x18007a128)
CoWaitForMultipleHandles (Address: 0x18007a108)
CreateStreamOnHGlobal (Address: 0x18007a158)
StringFromCLSID (Address: 0x18007a150)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18007a168)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18007a180)
IsDebuggerPresent (Address: 0x18007a188)
OutputDebugStringW (Address: 0x18007a178)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18007a198)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18007a1a8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18007a1d0)
RaiseException (Address: 0x18007a1c8)
SetLastError (Address: 0x18007a1d8)
SetUnhandledExceptionFilter (Address: 0x18007a1b8)
UnhandledExceptionFilter (Address: 0x18007a1c0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18007a1e8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18007a1f8)
HeapAlloc (Address: 0x18007a208)
HeapFree (Address: 0x18007a200)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18007a218)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18007a228)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18007a258)
FreeLibrary (Address: 0x18007a238)
GetModuleFileNameA (Address: 0x18007a250)
GetModuleHandleExW (Address: 0x18007a240)
GetModuleHandleW (Address: 0x18007a260)
GetProcAddress (Address: 0x18007a248)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18007a270)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18007a288)
GetCurrentProcessId (Address: 0x18007a298)
GetCurrentThreadId (Address: 0x18007a280)
OpenProcessToken (Address: 0x18007a2a0)
TerminateProcess (Address: 0x18007a290)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18007a2b0)
OpenProcess (Address: 0x18007a2b8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18007a2c8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18007a2e8)
RegGetValueW (Address: 0x18007a2e0)
RegOpenKeyExW (Address: 0x18007a2d8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18007a2f8)
RtlLookupFunctionEntry (Address: 0x18007a308)
RtlVirtualUnwind (Address: 0x18007a300)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18007a318)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18007a370)
AcquireSRWLockShared (Address: 0x18007a338)
CreateEventExW (Address: 0x18007a3a8)
CreateMutexExW (Address: 0x18007a360)
CreateSemaphoreExW (Address: 0x18007a390)
DeleteCriticalSection (Address: 0x18007a348)
EnterCriticalSection (Address: 0x18007a330)
InitializeCriticalSectionEx (Address: 0x18007a358)
InitializeSRWLock (Address: 0x18007a398)
LeaveCriticalSection (Address: 0x18007a3b0)
OpenSemaphoreW (Address: 0x18007a3a0)
ReleaseMutex (Address: 0x18007a350)
ReleaseSemaphore (Address: 0x18007a388)
ReleaseSRWLockExclusive (Address: 0x18007a378)
ReleaseSRWLockShared (Address: 0x18007a368)
SetEvent (Address: 0x18007a328)
WaitForSingleObject (Address: 0x18007a380)
WaitForSingleObjectEx (Address: 0x18007a340)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18007a3d0)
InitOnceComplete (Address: 0x18007a3c8)
InitOnceExecuteOnce (Address: 0x18007a3c0)
Sleep (Address: 0x18007a3d8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18007a3e8)
GetTickCount (Address: 0x18007a3f0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18007a410)
CreateThreadpoolTimer (Address: 0x18007a408)
SetThreadpoolTimer (Address: 0x18007a400)
WaitForThreadpoolTimerCallbacks (Address: 0x18007a418)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18007a430)
EncodePointer (Address: 0x18007a428)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18007a448)
RoOriginateError (Address: 0x18007a440)
RoOriginateErrorW (Address: 0x18007a460)
RoTransformError (Address: 0x18007a458)
SetRestrictedErrorInfo (Address: 0x18007a450)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18007a478)
RoGetMatchingRestrictedErrorInfo (Address: 0x18007a480)
RoReportFailedDelegate (Address: 0x18007a470)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18007a490)
RoGetActivationFactory (Address: 0x18007a498)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x18007a4e0)
WindowsCreateString (Address: 0x18007a4c0)
WindowsCreateStringReference (Address: 0x18007a4a8)
WindowsDeleteString (Address: 0x18007a4b8)
WindowsDuplicateString (Address: 0x18007a4b0)
WindowsGetStringRawBuffer (Address: 0x18007a4c8)
WindowsIsStringEmpty (Address: 0x18007a4d8)
WindowsStringHasEmbeddedNull (Address: 0x18007a4d0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18007a578)
__CxxFrameHandler3 (Address: 0x18007a5d0)
__CxxFrameHandler4 (Address: 0x18007a5e0)
__std_terminate (Address: 0x18007a5d8)
_CxxThrowException (Address: 0x18007a5c8)
_o___std_exception_copy (Address: 0x18007a5c0)
_o___std_exception_destroy (Address: 0x18007a5b8)
_o___std_type_info_destroy_list (Address: 0x18007a5b0)
_o___stdio_common_vsnprintf_s (Address: 0x18007a5a8)
_o___stdio_common_vswprintf (Address: 0x18007a5a0)
_o__callnewh (Address: 0x18007a598)
_o__cexit (Address: 0x18007a590)
_o__configure_narrow_argv (Address: 0x18007a588)
_o__crt_atexit (Address: 0x18007a580)
_o__errno (Address: 0x18007a4f0)
_o__execute_onexit_table (Address: 0x18007a4f8)
_o__get_errno (Address: 0x18007a500)
_o__initialize_narrow_environment (Address: 0x18007a508)
_o__initialize_onexit_table (Address: 0x18007a510)
_o__invalid_parameter_noinfo (Address: 0x18007a518)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18007a520)
_o__purecall (Address: 0x18007a528)
_o__register_onexit_function (Address: 0x18007a530)
_o__seh_filter_dll (Address: 0x18007a538)
_o__set_errno (Address: 0x18007a540)
_o_free (Address: 0x18007a550)
_o_malloc (Address: 0x18007a558)
_o_realloc (Address: 0x18007a560)
_o_terminate (Address: 0x18007a568)
_o_toupper (Address: 0x18007a570)
memcmp (Address: 0x18007a5e8)
memcpy (Address: 0x18007a5f0)
memmove (Address: 0x18007a548)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18007a608)
_initterm_e (Address: 0x18007a600)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18007a618)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18007a648)
EventProviderEnabled (Address: 0x18007a640)
EventRegister (Address: 0x18007a650)
EventSetInformation (Address: 0x18007a638)
EventUnregister (Address: 0x18007a630)
EventWriteTransfer (Address: 0x18007a628)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18007a660)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18007a670)
SHTaskPoolQueueTask (Address: 0x18007a678)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18007a688)

OLEAUT32.dll

SysFreeString (Address: 0x18007a0e8)