wdigest.dll

Description: Microsoft Digest Access

Version: 10.0.19041.6328

Architecture: 32-bit

Operating System: Windows NT

SHA256: 90e4f41c568bd08ec877a9fa511dc0df

File Size: 226.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 20

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

SpInitialize (Ordinal: 1, Address: 0x5530)
CredentialUpdateRegister (Ordinal: 2, Address: 0x23b70)
SsiCredentialsUpdateNotify (Ordinal: 3, Address: 0x253d0)
CredentialUpdateFree (Ordinal: 4, Address: 0x23b90)
CredentialUpdateNotify (Ordinal: 5, Address: 0x23bb0)
DllMain (Ordinal: 6, Address: 0xdc40)
SpLsaModeInitialize (Ordinal: 7, Address: 0x5c00)
SpUserModeInitialize (Ordinal: 8, Address: 0x4bb0)
SsiCredentialsUpdateFree (Ordinal: 9, Address: 0x27430)
SpInstanceInit (Ordinal: 32, Address: 0x4ca0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10035000)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10035010)
IsDebuggerPresent (Address: 0x10035008)
OutputDebugStringW (Address: 0x1003500c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10035018)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10035020)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10035030)
SetLastError (Address: 0x10035028)
SetUnhandledExceptionFilter (Address: 0x1003502c)
UnhandledExceptionFilter (Address: 0x10035034)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1003503c)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x10035044)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1003504c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10035058)
HeapAlloc (Address: 0x1003505c)
HeapFree (Address: 0x10035054)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10035064)
LocalFree (Address: 0x10035068)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x10035070)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x10035084)
GetModuleFileNameA (Address: 0x1003508c)
GetModuleFileNameW (Address: 0x10035080)
GetModuleHandleExW (Address: 0x10035088)
GetModuleHandleW (Address: 0x1003507c)
GetProcAddress (Address: 0x10035090)
LoadLibraryExW (Address: 0x10035078)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10035098)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100350a8)
MapViewOfFileEx (Address: 0x100350b0)
OpenFileMappingW (Address: 0x100350ac)
UnmapViewOfFile (Address: 0x100350a0)
VirtualAlloc (Address: 0x100350a4)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x100350c4)
GetCurrentDirectoryW (Address: 0x100350c0)
GetEnvironmentVariableW (Address: 0x100350b8)
SetCurrentDirectoryW (Address: 0x100350bc)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100350d0)
GetCurrentProcessId (Address: 0x100350e0)
GetCurrentThreadId (Address: 0x100350d4)
OpenProcessToken (Address: 0x100350cc)
SetThreadToken (Address: 0x100350dc)
TerminateProcess (Address: 0x100350d8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x100350ec)
OpenProcess (Address: 0x100350e8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100350f4)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x100350fc)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10035108)
RegCreateKeyExW (Address: 0x10035114)
RegNotifyChangeKeyValue (Address: 0x10035110)
RegOpenKeyExW (Address: 0x10035118)
RegQueryValueExW (Address: 0x10035104)
RegSetValueExW (Address: 0x1003510c)

api-ms-win-core-rtlsupport-l1-2-0.dll

RtlCompareMemory (Address: 0x10035120)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x10035128)
WideCharToMultiByte (Address: 0x1003512c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10035168)
AcquireSRWLockShared (Address: 0x1003515c)
CreateEventW (Address: 0x10035138)
CreateMutexExW (Address: 0x10035160)
CreateSemaphoreExW (Address: 0x10035140)
DeleteCriticalSection (Address: 0x10035158)
EnterCriticalSection (Address: 0x10035164)
InitializeCriticalSection (Address: 0x10035178)
InitializeCriticalSectionEx (Address: 0x1003517c)
InitializeSRWLock (Address: 0x1003513c)
LeaveCriticalSection (Address: 0x10035154)
OpenSemaphoreW (Address: 0x10035174)
ReleaseMutex (Address: 0x10035150)
ReleaseSemaphore (Address: 0x10035148)
ReleaseSRWLockExclusive (Address: 0x10035144)
ReleaseSRWLockShared (Address: 0x10035170)
TryAcquireSRWLockExclusive (Address: 0x10035134)
WaitForSingleObject (Address: 0x1003514c)
WaitForSingleObjectEx (Address: 0x1003516c)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x10035184)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1003519c)
GetSystemInfo (Address: 0x10035194)
GetSystemTimeAsFileTime (Address: 0x1003518c)
GetVersionExW (Address: 0x10035198)
GetWindowsDirectoryW (Address: 0x10035190)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100351a8)
CreateThreadpoolTimer (Address: 0x100351a4)
SetThreadpoolTimer (Address: 0x100351b0)
WaitForThreadpoolTimerCallbacks (Address: 0x100351ac)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

ChangeTimerQueueTimer (Address: 0x100351c0)
CreateTimerQueueTimer (Address: 0x100351b8)
DeleteTimerQueueTimer (Address: 0x100351c4)
UnregisterWaitEx (Address: 0x100351bc)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x100351cc)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x100351d4)
GetFileVersionInfoSizeExW (Address: 0x100351dc)
VerQueryValueW (Address: 0x100351d8)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x10035284)
__std_terminate (Address: 0x10035280)
_CxxThrowException (Address: 0x1003527c)
_except_handler4_common (Address: 0x10035248)
_o___std_exception_copy (Address: 0x1003526c)
_o___std_exception_destroy (Address: 0x10035268)
_o___std_type_info_destroy_list (Address: 0x10035264)
_o___stdio_common_vsnprintf_s (Address: 0x10035260)
_o___stdio_common_vsnwprintf_s (Address: 0x1003525c)
_o___stdio_common_vsprintf_s (Address: 0x10035258)
_o___stdio_common_vswprintf (Address: 0x10035254)
_o__callnewh (Address: 0x10035250)
_o__cexit (Address: 0x1003524c)
_o__configure_narrow_argv (Address: 0x100351e4)
_o__crt_atexit (Address: 0x100351e8)
_o__errno (Address: 0x100351ec)
_o__execute_onexit_table (Address: 0x100351f0)
_o__initialize_narrow_environment (Address: 0x100351f4)
_o__initialize_onexit_table (Address: 0x100351f8)
_o__invalid_parameter_noinfo (Address: 0x100351fc)
_o__purecall (Address: 0x10035200)
_o__register_onexit_function (Address: 0x10035204)
_o__seh_filter_dll (Address: 0x10035208)
_o__strnicmp (Address: 0x1003520c)
_o__wcsnicmp (Address: 0x10035214)
_o__wsplitpath_s (Address: 0x10035218)
_o_free (Address: 0x1003521c)
_o_isspace (Address: 0x10035220)
_o_malloc (Address: 0x10035224)
_o_strcat_s (Address: 0x10035228)
_o_strcpy_s (Address: 0x1003522c)
_o_strncat_s (Address: 0x10035230)
_o_strtok_s (Address: 0x10035234)
_o_wcscat_s (Address: 0x10035238)
_o_wcscpy_s (Address: 0x1003523c)
_o_wcsncat_s (Address: 0x10035240)
_o_wcsncpy_s (Address: 0x10035244)
memcmp (Address: 0x10035274)
memcpy (Address: 0x10035278)
memmove (Address: 0x10035210)
wcschr (Address: 0x10035270)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x10035290)
_initterm_e (Address: 0x1003528c)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x10035298)
strncmp (Address: 0x100352a0)
strnlen (Address: 0x1003529c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x100352b4)
GetTraceEnableLevel (Address: 0x100352b0)
GetTraceLoggerHandle (Address: 0x100352b8)
RegisterTraceGuidsW (Address: 0x100352ac)
TraceMessage (Address: 0x100352bc)
UnregisterTraceGuids (Address: 0x100352a8)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x100352cc)
EnableTraceEx2 (Address: 0x100352c8)
StartTraceW (Address: 0x100352c4)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100352dc)
EventSetInformation (Address: 0x100352e0)
EventUnregister (Address: 0x100352d4)
EventWriteTransfer (Address: 0x100352d8)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x100352ec)
RevertToSelf (Address: 0x100352e8)

api-ms-win-service-private-l1-1-0.dll

I_QueryTagInformation (Address: 0x100352f4)

ntdll.dll

EtwUnregisterTraceGuids (Address: 0x10035320)
NtAllocateLocallyUniqueId (Address: 0x100353ac)
NtClose (Address: 0x10035340)
NtCreateEvent (Address: 0x10035324)
NtCreateToken (Address: 0x10035338)
NtOpenEvent (Address: 0x10035318)
NtOpenProcessToken (Address: 0x10035388)
NtOpenThreadToken (Address: 0x100352fc)
NtQueryInformationToken (Address: 0x1003538c)
NtQuerySystemInformation (Address: 0x10035314)
NtQuerySystemTime (Address: 0x10035310)
NtSetEvent (Address: 0x10035328)
NtSetSecurityObject (Address: 0x1003537c)
NtWaitForSingleObject (Address: 0x10035380)
RtlAcquireResourceExclusive (Address: 0x100353dc)
RtlAcquireResourceShared (Address: 0x10035348)
RtlAddAccessAllowedAce (Address: 0x10035384)
RtlAllocateAndInitializeSid (Address: 0x10035334)
RtlAllocateHeap (Address: 0x10035308)
RtlAnsiStringToUnicodeString (Address: 0x10035304)
RtlAppendUnicodeStringToString (Address: 0x100353a4)
RtlAppendUnicodeToString (Address: 0x10035330)
RtlCharToInteger (Address: 0x100353c8)
RtlCompareString (Address: 0x100353d8)
RtlCompareUnicodeString (Address: 0x10035394)
RtlConvertSharedToExclusive (Address: 0x100353d0)
RtlCopySid (Address: 0x100353b8)
RtlCopyUnicodeString (Address: 0x100353c0)
RtlCreateAcl (Address: 0x10035368)
RtlCreateSecurityDescriptor (Address: 0x10035354)
RtlDeleteCriticalSection (Address: 0x10035374)
RtlDeleteResource (Address: 0x10035350)
RtlDeregisterWait (Address: 0x1003539c)
RtlDeregisterWaitEx (Address: 0x100353a0)
RtlDowncaseUnicodeString (Address: 0x10035358)
RtlDuplicateUnicodeString (Address: 0x100353c4)
RtlEnterCriticalSection (Address: 0x1003536c)
RtlEqualDomainName (Address: 0x100353b4)
RtlEqualSid (Address: 0x10035300)
RtlEqualString (Address: 0x100353cc)
RtlEqualUnicodeString (Address: 0x10035370)
RtlFreeHeap (Address: 0x1003530c)
RtlFreeUnicodeString (Address: 0x1003531c)
RtlGetNtProductType (Address: 0x1003534c)
RtlInitializeCriticalSection (Address: 0x10035364)
RtlInitializeResource (Address: 0x100353e4)
RtlInitString (Address: 0x10035378)
RtlInitUnicodeString (Address: 0x1003535c)
RtlLeaveCriticalSection (Address: 0x10035360)
RtlLengthRequiredSid (Address: 0x100353d4)
RtlLengthSid (Address: 0x100353a8)
RtlNtStatusToDosError (Address: 0x100353e0)
RtlRegisterWait (Address: 0x10035398)
RtlReleaseResource (Address: 0x10035344)
RtlSetDaclSecurityDescriptor (Address: 0x10035390)
RtlSubAuthorityCountSid (Address: 0x1003532c)
RtlSubAuthoritySid (Address: 0x1003533c)
RtlUpcaseUnicodeString (Address: 0x100353b0)
RtlValidSid (Address: 0x100353bc)