wdigest.dll
v10.0.19041.6328
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 10
SpInitialize
#1 · 0x3090
CredentialUpdateRegister
#2 · 0x28740
SsiCredentialsUpdateNotify
#3 · 0x2a640
CredentialUpdateFree
#4 · 0x28770
CredentialUpdateNotify
#5 · 0x28790
DllMain
#6 · 0xecc0
SpLsaModeInitialize
#7 · 0x4570
SpUserModeInitialize
#8 · 0x2660
SsiCredentialsUpdateFree
#9 · 0x2cb10
SpInstanceInit
#32 · 0x27c0
No function matches your filter.
Imported DLLs & functions 217
ApiSetQueryApiSetPresence
0x18003b588
DebugBreak
0x18003b598
IsDebuggerPresent
0x18003b5a0
OutputDebugStringW
0x18003b5a8
DelayLoadFailureHook
0x18003b5b8
ResolveDelayLoadedAPI
0x18003b5c8
GetLastError
0x18003b5f0
SetLastError
0x18003b5e8
SetUnhandledExceptionFilter
0x18003b5d8
UnhandledExceptionFilter
0x18003b5e0
CreateDirectoryW
0x18003b600
MoveFileExW
0x18003b610
CloseHandle
0x18003b620
GetProcessHeap
0x18003b638
HeapAlloc
0x18003b630
HeapFree
0x18003b640
InitializeSListHead
0x18003b668
FreeLibrary
0x18003b678
GetModuleFileNameA
0x18003b698
GetModuleFileNameW
0x18003b6a0
GetModuleHandleExW
0x18003b690
GetModuleHandleW
0x18003b688
GetProcAddress
0x18003b680
LoadLibraryExW
0x18003b6a8
FormatMessageW
0x18003b6b8
CreateFileMappingW
0x18003b6d0
MapViewOfFileEx
0x18003b6d8
OpenFileMappingW
0x18003b6e8
UnmapViewOfFile
0x18003b6c8
VirtualAlloc
0x18003b6e0
ExpandEnvironmentStringsW
0x18003b700
GetCurrentDirectoryW
0x18003b710
GetEnvironmentVariableW
0x18003b6f8
SetCurrentDirectoryW
0x18003b708
GetCurrentProcess
0x18003b738
GetCurrentProcessId
0x18003b730
GetCurrentThreadId
0x18003b748
OpenProcessToken
0x18003b728
SetThreadToken
0x18003b740
TerminateProcess
0x18003b720
IsProcessorFeaturePresent
0x18003b758
OpenProcess
0x18003b760
QueryPerformanceCounter
0x18003b770
QueryFullProcessImageNameW
0x18003b780
RegCloseKey
0x18003b798
RegCreateKeyExW
0x18003b7a0
RegNotifyChangeKeyValue
0x18003b790
RegOpenKeyExW
0x18003b7a8
RegQueryValueExW
0x18003b7b0
RegSetValueExW
0x18003b7b8
RtlCaptureContext
0x18003b7c8
RtlCompareMemory
0x18003b7d8
RtlLookupFunctionEntry
0x18003b7d0
RtlVirtualUnwind
0x18003b7e0
AcquireSRWLockExclusive
0x18003b898
AcquireSRWLockShared
0x18003b858
CreateEventW
0x18003b810
CreateMutexExW
0x18003b860
CreateSemaphoreExW
0x18003b868
DeleteCriticalSection
0x18003b890
EnterCriticalSection
0x18003b870
InitializeCriticalSection
0x18003b878
InitializeCriticalSectionEx
0x18003b818
InitializeSRWLock
0x18003b828
LeaveCriticalSection
0x18003b830
OpenSemaphoreW
0x18003b850
ReleaseMutex
0x18003b848
ReleaseSemaphore
0x18003b838
ReleaseSRWLockExclusive
0x18003b888
ReleaseSRWLockShared
0x18003b880
TryAcquireSRWLockExclusive
0x18003b808
WaitForSingleObject
0x18003b820
WaitForSingleObjectEx
0x18003b840
Sleep
0x18003b8a8
GetComputerNameExW
0x18003b8d0
GetSystemInfo
0x18003b8d8
GetSystemTimeAsFileTime
0x18003b8c0
GetVersionExW
0x18003b8c8
GetWindowsDirectoryW
0x18003b8b8
CloseThreadpoolTimer
0x18003b8e8
CreateThreadpoolTimer
0x18003b900
SetThreadpoolTimer
0x18003b8f8
WaitForThreadpoolTimerCallbacks
0x18003b8f0
ChangeTimerQueueTimer
0x18003b918
CreateTimerQueueTimer
0x18003b920
DeleteTimerQueueTimer
0x18003b928
UnregisterWaitEx
0x18003b910
RegisterWaitForSingleObjectEx
0x18003b938
GetFileVersionInfoExW
0x18003b948
GetFileVersionInfoSizeExW
0x18003b958
VerQueryValueW
0x18003b950
__C_specific_handler
0x18003ba80
__CxxFrameHandler3
0x18003baa0
__CxxFrameHandler4
0x18003bab0
__std_terminate
0x18003baa8
_CxxThrowException
0x18003ba98
_o___std_exception_copy
0x18003ba70
_o___std_exception_destroy
0x18003ba68
_o___std_type_info_destroy_list
0x18003ba60
_o___stdio_common_vsnprintf_s
0x18003ba58
_o___stdio_common_vsnwprintf_s
0x18003ba50
_o___stdio_common_vsprintf_s
0x18003ba48
_o___stdio_common_vswprintf
0x18003ba40
_o__callnewh
0x18003ba38
_o__cexit
0x18003ba30
_o__configure_narrow_argv
0x18003ba28
_o__crt_atexit
0x18003ba20
_o__errno
0x18003b968
_o__execute_onexit_table
0x18003b970
_o__initialize_narrow_environment
0x18003b978
_o__initialize_onexit_table
0x18003b980
_o__invalid_parameter_noinfo
0x18003b988
_o__purecall
0x18003b990
_o__register_onexit_function
0x18003b998
_o__seh_filter_dll
0x18003b9a0
_o__strnicmp
0x18003b9a8
_o__wcsnicmp
0x18003b9b8
_o__wsplitpath_s
0x18003b9c0
_o_free
0x18003b9c8
_o_isspace
0x18003b9d0
_o_malloc
0x18003b9d8
_o_strcat_s
0x18003b9e0
_o_strcpy_s
0x18003b9e8
_o_strncat_s
0x18003b9f0
_o_strtok_s
0x18003b9f8
_o_wcscat_s
0x18003ba00
_o_wcscpy_s
0x18003ba08
_o_wcsncat_s
0x18003ba10
_o_wcsncpy_s
0x18003ba18
memcmp
0x18003ba88
memcpy
0x18003ba90
memmove
0x18003b9b0
wcschr
0x18003ba78
GetTraceEnableFlags
0x18003bb10
GetTraceEnableLevel
0x18003bb08
GetTraceLoggerHandle
0x18003bb18
RegisterTraceGuidsW
0x18003bb00
TraceMessage
0x18003bb20
UnregisterTraceGuids
0x18003baf8
ControlTraceW
0x18003bb40
EnableTraceEx2
0x18003bb38
StartTraceW
0x18003bb30
EventRegister
0x18003bb60
EventSetInformation
0x18003bb68
EventUnregister
0x18003bb50
EventWriteTransfer
0x18003bb58
I_QueryTagInformation
0x18003bb90
ntdll.dll
59
EtwUnregisterTraceGuids
0x18003bbe0
NtAllocateLocallyUniqueId
0x18003bd28
NtClose
0x18003bc30
NtCreateEvent
0x18003bbe8
NtCreateToken
0x18003bc58
NtOpenEvent
0x18003bbd0
NtOpenProcessToken
0x18003bc18
NtOpenThreadToken
0x18003bca8
NtQueryInformationToken
0x18003bcd0
NtQuerySystemInformation
0x18003bbc8
NtQuerySystemTime
0x18003bbc0
NtSetEvent
0x18003bbf0
NtSetSecurityObject
0x18003bc10
NtWaitForSingleObject
0x18003bd30
RtlAcquireResourceExclusive
0x18003bd70
RtlAcquireResourceShared
0x18003bc40
RtlAddAccessAllowedAce
0x18003bcc8
RtlAllocateAndInitializeSid
0x18003bcc0
RtlAllocateHeap
0x18003bbb0
RtlAnsiStringToUnicodeString
0x18003bba8
RtlAppendUnicodeStringToString
0x18003bd00
RtlAppendUnicodeToString
0x18003bcf8
RtlCharToInteger
0x18003bd40
RtlCompareString
0x18003bd60
RtlCompareUnicodeString
0x18003bce0
RtlConvertSharedToExclusive
0x18003bd58
RtlCopySid
0x18003bd50
RtlCopyUnicodeString
0x18003bc08
RtlCreateAcl
0x18003bcb8
RtlCreateSecurityDescriptor
0x18003bc80
RtlDeleteCriticalSection
0x18003bc98
RtlDeleteResource
0x18003bc50
RtlDeregisterWait
0x18003bcf0
RtlDeregisterWaitEx
0x18003bd08
RtlDowncaseUnicodeString
0x18003bc60
RtlDuplicateUnicodeString
0x18003bd68
RtlEnterCriticalSection
0x18003bc88
RtlEqualDomainName
0x18003bd20
RtlEqualSid
0x18003bba0
RtlEqualString
0x18003bd48
RtlEqualUnicodeString
0x18003bc90
RtlFreeHeap
0x18003bbb8
RtlFreeUnicodeString
0x18003bbd8
RtlGetNtProductType
0x18003bc48
RtlInitializeCriticalSection
0x18003bc78
RtlInitializeResource
0x18003bc28
RtlInitString
0x18003bca0
RtlInitUnicodeString
0x18003bc68
RtlLeaveCriticalSection
0x18003bc70
RtlLengthRequiredSid
0x18003bc00
RtlLengthSid
0x18003bd10
RtlNtStatusToDosError
0x18003bbf8
RtlRegisterWait
0x18003bce8
RtlReleaseResource
0x18003bc38
RtlSetDaclSecurityDescriptor
0x18003bcd8
RtlSubAuthorityCountSid
0x18003bc20
RtlSubAuthoritySid
0x18003bd38
RtlUpcaseUnicodeString
0x18003bd18
RtlValidSid
0x18003bcb0
No function matches your filter.