wdigest.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 10
SpInitialize
#1 · 0x5530
CredentialUpdateRegister
#2 · 0x23b70
SsiCredentialsUpdateNotify
#3 · 0x253d0
CredentialUpdateFree
#4 · 0x23b90
CredentialUpdateNotify
#5 · 0x23bb0
DllMain
#6 · 0xdc40
SpLsaModeInitialize
#7 · 0x5c00
SpUserModeInitialize
#8 · 0x4bb0
SsiCredentialsUpdateFree
#9 · 0x27430
SpInstanceInit
#32 · 0x4ca0
No function matches your filter.
Imported DLLs & functions 213
ApiSetQueryApiSetPresence
0x10035000
DebugBreak
0x10035010
IsDebuggerPresent
0x10035008
OutputDebugStringW
0x1003500c
DelayLoadFailureHook
0x10035018
ResolveDelayLoadedAPI
0x10035020
GetLastError
0x10035030
SetLastError
0x10035028
SetUnhandledExceptionFilter
0x1003502c
UnhandledExceptionFilter
0x10035034
CreateDirectoryW
0x1003503c
MoveFileExW
0x10035044
CloseHandle
0x1003504c
GetProcessHeap
0x10035058
HeapAlloc
0x1003505c
HeapFree
0x10035054
InitializeSListHead
0x10035070
FreeLibrary
0x10035084
GetModuleFileNameA
0x1003508c
GetModuleFileNameW
0x10035080
GetModuleHandleExW
0x10035088
GetModuleHandleW
0x1003507c
GetProcAddress
0x10035090
LoadLibraryExW
0x10035078
FormatMessageW
0x10035098
CreateFileMappingW
0x100350a8
MapViewOfFileEx
0x100350b0
OpenFileMappingW
0x100350ac
UnmapViewOfFile
0x100350a0
VirtualAlloc
0x100350a4
ExpandEnvironmentStringsW
0x100350c4
GetCurrentDirectoryW
0x100350c0
GetEnvironmentVariableW
0x100350b8
SetCurrentDirectoryW
0x100350bc
GetCurrentProcess
0x100350d0
GetCurrentProcessId
0x100350e0
GetCurrentThreadId
0x100350d4
OpenProcessToken
0x100350cc
SetThreadToken
0x100350dc
TerminateProcess
0x100350d8
IsProcessorFeaturePresent
0x100350ec
OpenProcess
0x100350e8
QueryPerformanceCounter
0x100350f4
QueryFullProcessImageNameW
0x100350fc
RegCloseKey
0x10035108
RegCreateKeyExW
0x10035114
RegNotifyChangeKeyValue
0x10035110
RegOpenKeyExW
0x10035118
RegQueryValueExW
0x10035104
RegSetValueExW
0x1003510c
RtlCompareMemory
0x10035120
AcquireSRWLockExclusive
0x10035168
AcquireSRWLockShared
0x1003515c
CreateEventW
0x10035138
CreateMutexExW
0x10035160
CreateSemaphoreExW
0x10035140
DeleteCriticalSection
0x10035158
EnterCriticalSection
0x10035164
InitializeCriticalSection
0x10035178
InitializeCriticalSectionEx
0x1003517c
InitializeSRWLock
0x1003513c
LeaveCriticalSection
0x10035154
OpenSemaphoreW
0x10035174
ReleaseMutex
0x10035150
ReleaseSemaphore
0x10035148
ReleaseSRWLockExclusive
0x10035144
ReleaseSRWLockShared
0x10035170
TryAcquireSRWLockExclusive
0x10035134
WaitForSingleObject
0x1003514c
WaitForSingleObjectEx
0x1003516c
Sleep
0x10035184
GetComputerNameExW
0x1003519c
GetSystemInfo
0x10035194
GetSystemTimeAsFileTime
0x1003518c
GetVersionExW
0x10035198
GetWindowsDirectoryW
0x10035190
CloseThreadpoolTimer
0x100351a8
CreateThreadpoolTimer
0x100351a4
SetThreadpoolTimer
0x100351b0
WaitForThreadpoolTimerCallbacks
0x100351ac
ChangeTimerQueueTimer
0x100351c0
CreateTimerQueueTimer
0x100351b8
DeleteTimerQueueTimer
0x100351c4
UnregisterWaitEx
0x100351bc
RegisterWaitForSingleObjectEx
0x100351cc
GetFileVersionInfoExW
0x100351d4
GetFileVersionInfoSizeExW
0x100351dc
VerQueryValueW
0x100351d8
__CxxFrameHandler3
0x10035284
__std_terminate
0x10035280
_CxxThrowException
0x1003527c
_except_handler4_common
0x10035248
_o___std_exception_copy
0x1003526c
_o___std_exception_destroy
0x10035268
_o___std_type_info_destroy_list
0x10035264
_o___stdio_common_vsnprintf_s
0x10035260
_o___stdio_common_vsnwprintf_s
0x1003525c
_o___stdio_common_vsprintf_s
0x10035258
_o___stdio_common_vswprintf
0x10035254
_o__callnewh
0x10035250
_o__cexit
0x1003524c
_o__configure_narrow_argv
0x100351e4
_o__crt_atexit
0x100351e8
_o__errno
0x100351ec
_o__execute_onexit_table
0x100351f0
_o__initialize_narrow_environment
0x100351f4
_o__initialize_onexit_table
0x100351f8
_o__invalid_parameter_noinfo
0x100351fc
_o__purecall
0x10035200
_o__register_onexit_function
0x10035204
_o__seh_filter_dll
0x10035208
_o__strnicmp
0x1003520c
_o__wcsnicmp
0x10035214
_o__wsplitpath_s
0x10035218
_o_free
0x1003521c
_o_isspace
0x10035220
_o_malloc
0x10035224
_o_strcat_s
0x10035228
_o_strcpy_s
0x1003522c
_o_strncat_s
0x10035230
_o_strtok_s
0x10035234
_o_wcscat_s
0x10035238
_o_wcscpy_s
0x1003523c
_o_wcsncat_s
0x10035240
_o_wcsncpy_s
0x10035244
memcmp
0x10035274
memcpy
0x10035278
memmove
0x10035210
wcschr
0x10035270
GetTraceEnableFlags
0x100352b4
GetTraceEnableLevel
0x100352b0
GetTraceLoggerHandle
0x100352b8
RegisterTraceGuidsW
0x100352ac
TraceMessage
0x100352bc
UnregisterTraceGuids
0x100352a8
ControlTraceW
0x100352cc
EnableTraceEx2
0x100352c8
StartTraceW
0x100352c4
EventRegister
0x100352dc
EventSetInformation
0x100352e0
EventUnregister
0x100352d4
EventWriteTransfer
0x100352d8
I_QueryTagInformation
0x100352f4
ntdll.dll
59
EtwUnregisterTraceGuids
0x10035320
NtAllocateLocallyUniqueId
0x100353ac
NtClose
0x10035340
NtCreateEvent
0x10035324
NtCreateToken
0x10035338
NtOpenEvent
0x10035318
NtOpenProcessToken
0x10035388
NtOpenThreadToken
0x100352fc
NtQueryInformationToken
0x1003538c
NtQuerySystemInformation
0x10035314
NtQuerySystemTime
0x10035310
NtSetEvent
0x10035328
NtSetSecurityObject
0x1003537c
NtWaitForSingleObject
0x10035380
RtlAcquireResourceExclusive
0x100353dc
RtlAcquireResourceShared
0x10035348
RtlAddAccessAllowedAce
0x10035384
RtlAllocateAndInitializeSid
0x10035334
RtlAllocateHeap
0x10035308
RtlAnsiStringToUnicodeString
0x10035304
RtlAppendUnicodeStringToString
0x100353a4
RtlAppendUnicodeToString
0x10035330
RtlCharToInteger
0x100353c8
RtlCompareString
0x100353d8
RtlCompareUnicodeString
0x10035394
RtlConvertSharedToExclusive
0x100353d0
RtlCopySid
0x100353b8
RtlCopyUnicodeString
0x100353c0
RtlCreateAcl
0x10035368
RtlCreateSecurityDescriptor
0x10035354
RtlDeleteCriticalSection
0x10035374
RtlDeleteResource
0x10035350
RtlDeregisterWait
0x1003539c
RtlDeregisterWaitEx
0x100353a0
RtlDowncaseUnicodeString
0x10035358
RtlDuplicateUnicodeString
0x100353c4
RtlEnterCriticalSection
0x1003536c
RtlEqualDomainName
0x100353b4
RtlEqualSid
0x10035300
RtlEqualString
0x100353cc
RtlEqualUnicodeString
0x10035370
RtlFreeHeap
0x1003530c
RtlFreeUnicodeString
0x1003531c
RtlGetNtProductType
0x1003534c
RtlInitializeCriticalSection
0x10035364
RtlInitializeResource
0x100353e4
RtlInitString
0x10035378
RtlInitUnicodeString
0x1003535c
RtlLeaveCriticalSection
0x10035360
RtlLengthRequiredSid
0x100353d4
RtlLengthSid
0x100353a8
RtlNtStatusToDosError
0x100353e0
RtlRegisterWait
0x10035398
RtlReleaseResource
0x10035344
RtlSetDaclSecurityDescriptor
0x10035390
RtlSubAuthorityCountSid
0x1003532c
RtlSubAuthoritySid
0x1003533c
RtlUpcaseUnicodeString
0x100353b0
RtlValidSid
0x100353bc
No function matches your filter.