wdigest.dll

Description: Microsoft Digest Access

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: 1531d83690106712a67fcd19d0f7d67e

File Size: 278.0 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

SpInitialize (Ordinal: 1, Address: 0x3090)
CredentialUpdateRegister (Ordinal: 2, Address: 0x28740)
SsiCredentialsUpdateNotify (Ordinal: 3, Address: 0x2a640)
CredentialUpdateFree (Ordinal: 4, Address: 0x28770)
CredentialUpdateNotify (Ordinal: 5, Address: 0x28790)
DllMain (Ordinal: 6, Address: 0xecc0)
SpLsaModeInitialize (Ordinal: 7, Address: 0x4570)
SpUserModeInitialize (Ordinal: 8, Address: 0x2660)
SsiCredentialsUpdateFree (Ordinal: 9, Address: 0x2cb10)
SpInstanceInit (Ordinal: 32, Address: 0x27c0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18003b588)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003b598)
IsDebuggerPresent (Address: 0x18003b5a0)
OutputDebugStringW (Address: 0x18003b5a8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18003b5b8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18003b5c8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003b5f0)
SetLastError (Address: 0x18003b5e8)
SetUnhandledExceptionFilter (Address: 0x18003b5d8)
UnhandledExceptionFilter (Address: 0x18003b5e0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18003b600)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x18003b610)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003b620)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003b638)
HeapAlloc (Address: 0x18003b630)
HeapFree (Address: 0x18003b640)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003b650)
LocalFree (Address: 0x18003b658)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18003b668)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18003b678)
GetModuleFileNameA (Address: 0x18003b698)
GetModuleFileNameW (Address: 0x18003b6a0)
GetModuleHandleExW (Address: 0x18003b690)
GetModuleHandleW (Address: 0x18003b688)
GetProcAddress (Address: 0x18003b680)
LoadLibraryExW (Address: 0x18003b6a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003b6b8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18003b6d0)
MapViewOfFileEx (Address: 0x18003b6d8)
OpenFileMappingW (Address: 0x18003b6e8)
UnmapViewOfFile (Address: 0x18003b6c8)
VirtualAlloc (Address: 0x18003b6e0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18003b700)
GetCurrentDirectoryW (Address: 0x18003b710)
GetEnvironmentVariableW (Address: 0x18003b6f8)
SetCurrentDirectoryW (Address: 0x18003b708)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003b738)
GetCurrentProcessId (Address: 0x18003b730)
GetCurrentThreadId (Address: 0x18003b748)
OpenProcessToken (Address: 0x18003b728)
SetThreadToken (Address: 0x18003b740)
TerminateProcess (Address: 0x18003b720)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18003b758)
OpenProcess (Address: 0x18003b760)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003b770)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18003b780)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18003b798)
RegCreateKeyExW (Address: 0x18003b7a0)
RegNotifyChangeKeyValue (Address: 0x18003b790)
RegOpenKeyExW (Address: 0x18003b7a8)
RegQueryValueExW (Address: 0x18003b7b0)
RegSetValueExW (Address: 0x18003b7b8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18003b7c8)
RtlCompareMemory (Address: 0x18003b7d8)
RtlLookupFunctionEntry (Address: 0x18003b7d0)
RtlVirtualUnwind (Address: 0x18003b7e0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18003b7f8)
WideCharToMultiByte (Address: 0x18003b7f0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003b898)
AcquireSRWLockShared (Address: 0x18003b858)
CreateEventW (Address: 0x18003b810)
CreateMutexExW (Address: 0x18003b860)
CreateSemaphoreExW (Address: 0x18003b868)
DeleteCriticalSection (Address: 0x18003b890)
EnterCriticalSection (Address: 0x18003b870)
InitializeCriticalSection (Address: 0x18003b878)
InitializeCriticalSectionEx (Address: 0x18003b818)
InitializeSRWLock (Address: 0x18003b828)
LeaveCriticalSection (Address: 0x18003b830)
OpenSemaphoreW (Address: 0x18003b850)
ReleaseMutex (Address: 0x18003b848)
ReleaseSemaphore (Address: 0x18003b838)
ReleaseSRWLockExclusive (Address: 0x18003b888)
ReleaseSRWLockShared (Address: 0x18003b880)
TryAcquireSRWLockExclusive (Address: 0x18003b808)
WaitForSingleObject (Address: 0x18003b820)
WaitForSingleObjectEx (Address: 0x18003b840)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18003b8a8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18003b8d0)
GetSystemInfo (Address: 0x18003b8d8)
GetSystemTimeAsFileTime (Address: 0x18003b8c0)
GetVersionExW (Address: 0x18003b8c8)
GetWindowsDirectoryW (Address: 0x18003b8b8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18003b8e8)
CreateThreadpoolTimer (Address: 0x18003b900)
SetThreadpoolTimer (Address: 0x18003b8f8)
WaitForThreadpoolTimerCallbacks (Address: 0x18003b8f0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

ChangeTimerQueueTimer (Address: 0x18003b918)
CreateTimerQueueTimer (Address: 0x18003b920)
DeleteTimerQueueTimer (Address: 0x18003b928)
UnregisterWaitEx (Address: 0x18003b910)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x18003b938)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18003b948)
GetFileVersionInfoSizeExW (Address: 0x18003b958)
VerQueryValueW (Address: 0x18003b950)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18003ba80)
__CxxFrameHandler3 (Address: 0x18003baa0)
__CxxFrameHandler4 (Address: 0x18003bab0)
__std_terminate (Address: 0x18003baa8)
_CxxThrowException (Address: 0x18003ba98)
_o___std_exception_copy (Address: 0x18003ba70)
_o___std_exception_destroy (Address: 0x18003ba68)
_o___std_type_info_destroy_list (Address: 0x18003ba60)
_o___stdio_common_vsnprintf_s (Address: 0x18003ba58)
_o___stdio_common_vsnwprintf_s (Address: 0x18003ba50)
_o___stdio_common_vsprintf_s (Address: 0x18003ba48)
_o___stdio_common_vswprintf (Address: 0x18003ba40)
_o__callnewh (Address: 0x18003ba38)
_o__cexit (Address: 0x18003ba30)
_o__configure_narrow_argv (Address: 0x18003ba28)
_o__crt_atexit (Address: 0x18003ba20)
_o__errno (Address: 0x18003b968)
_o__execute_onexit_table (Address: 0x18003b970)
_o__initialize_narrow_environment (Address: 0x18003b978)
_o__initialize_onexit_table (Address: 0x18003b980)
_o__invalid_parameter_noinfo (Address: 0x18003b988)
_o__purecall (Address: 0x18003b990)
_o__register_onexit_function (Address: 0x18003b998)
_o__seh_filter_dll (Address: 0x18003b9a0)
_o__strnicmp (Address: 0x18003b9a8)
_o__wcsnicmp (Address: 0x18003b9b8)
_o__wsplitpath_s (Address: 0x18003b9c0)
_o_free (Address: 0x18003b9c8)
_o_isspace (Address: 0x18003b9d0)
_o_malloc (Address: 0x18003b9d8)
_o_strcat_s (Address: 0x18003b9e0)
_o_strcpy_s (Address: 0x18003b9e8)
_o_strncat_s (Address: 0x18003b9f0)
_o_strtok_s (Address: 0x18003b9f8)
_o_wcscat_s (Address: 0x18003ba00)
_o_wcscpy_s (Address: 0x18003ba08)
_o_wcsncat_s (Address: 0x18003ba10)
_o_wcsncpy_s (Address: 0x18003ba18)
memcmp (Address: 0x18003ba88)
memcpy (Address: 0x18003ba90)
memmove (Address: 0x18003b9b0)
wcschr (Address: 0x18003ba78)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18003bac8)
_initterm_e (Address: 0x18003bac0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18003bad8)
strncmp (Address: 0x18003bae8)
strnlen (Address: 0x18003bae0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18003bb10)
GetTraceEnableLevel (Address: 0x18003bb08)
GetTraceLoggerHandle (Address: 0x18003bb18)
RegisterTraceGuidsW (Address: 0x18003bb00)
TraceMessage (Address: 0x18003bb20)
UnregisterTraceGuids (Address: 0x18003baf8)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x18003bb40)
EnableTraceEx2 (Address: 0x18003bb38)
StartTraceW (Address: 0x18003bb30)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18003bb60)
EventSetInformation (Address: 0x18003bb68)
EventUnregister (Address: 0x18003bb50)
EventWriteTransfer (Address: 0x18003bb58)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18003bb80)
RevertToSelf (Address: 0x18003bb78)

api-ms-win-service-private-l1-1-0.dll

I_QueryTagInformation (Address: 0x18003bb90)

ntdll.dll

EtwUnregisterTraceGuids (Address: 0x18003bbe0)
NtAllocateLocallyUniqueId (Address: 0x18003bd28)
NtClose (Address: 0x18003bc30)
NtCreateEvent (Address: 0x18003bbe8)
NtCreateToken (Address: 0x18003bc58)
NtOpenEvent (Address: 0x18003bbd0)
NtOpenProcessToken (Address: 0x18003bc18)
NtOpenThreadToken (Address: 0x18003bca8)
NtQueryInformationToken (Address: 0x18003bcd0)
NtQuerySystemInformation (Address: 0x18003bbc8)
NtQuerySystemTime (Address: 0x18003bbc0)
NtSetEvent (Address: 0x18003bbf0)
NtSetSecurityObject (Address: 0x18003bc10)
NtWaitForSingleObject (Address: 0x18003bd30)
RtlAcquireResourceExclusive (Address: 0x18003bd70)
RtlAcquireResourceShared (Address: 0x18003bc40)
RtlAddAccessAllowedAce (Address: 0x18003bcc8)
RtlAllocateAndInitializeSid (Address: 0x18003bcc0)
RtlAllocateHeap (Address: 0x18003bbb0)
RtlAnsiStringToUnicodeString (Address: 0x18003bba8)
RtlAppendUnicodeStringToString (Address: 0x18003bd00)
RtlAppendUnicodeToString (Address: 0x18003bcf8)
RtlCharToInteger (Address: 0x18003bd40)
RtlCompareString (Address: 0x18003bd60)
RtlCompareUnicodeString (Address: 0x18003bce0)
RtlConvertSharedToExclusive (Address: 0x18003bd58)
RtlCopySid (Address: 0x18003bd50)
RtlCopyUnicodeString (Address: 0x18003bc08)
RtlCreateAcl (Address: 0x18003bcb8)
RtlCreateSecurityDescriptor (Address: 0x18003bc80)
RtlDeleteCriticalSection (Address: 0x18003bc98)
RtlDeleteResource (Address: 0x18003bc50)
RtlDeregisterWait (Address: 0x18003bcf0)
RtlDeregisterWaitEx (Address: 0x18003bd08)
RtlDowncaseUnicodeString (Address: 0x18003bc60)
RtlDuplicateUnicodeString (Address: 0x18003bd68)
RtlEnterCriticalSection (Address: 0x18003bc88)
RtlEqualDomainName (Address: 0x18003bd20)
RtlEqualSid (Address: 0x18003bba0)
RtlEqualString (Address: 0x18003bd48)
RtlEqualUnicodeString (Address: 0x18003bc90)
RtlFreeHeap (Address: 0x18003bbb8)
RtlFreeUnicodeString (Address: 0x18003bbd8)
RtlGetNtProductType (Address: 0x18003bc48)
RtlInitializeCriticalSection (Address: 0x18003bc78)
RtlInitializeResource (Address: 0x18003bc28)
RtlInitString (Address: 0x18003bca0)
RtlInitUnicodeString (Address: 0x18003bc68)
RtlLeaveCriticalSection (Address: 0x18003bc70)
RtlLengthRequiredSid (Address: 0x18003bc00)
RtlLengthSid (Address: 0x18003bd10)
RtlNtStatusToDosError (Address: 0x18003bbf8)
RtlRegisterWait (Address: 0x18003bce8)
RtlReleaseResource (Address: 0x18003bc38)
RtlSetDaclSecurityDescriptor (Address: 0x18003bcd8)
RtlSubAuthorityCountSid (Address: 0x18003bc20)
RtlSubAuthoritySid (Address: 0x18003bd38)
RtlUpcaseUnicodeString (Address: 0x18003bd18)
RtlValidSid (Address: 0x18003bcb0)