wldp.dll
- File Path:
C:\Windows\system32\wldp.dll
- Description: Windows Lockdown Policy
Hashes
Type |
Hash |
MD5 |
8482B38653241529ABB357FCB4369B7F |
SHA1 |
05B68544744563B27D6E05501C141A2A636EE475 |
SHA256 |
F9491E4C7077061BE9E689B354202B43852D1B82C631183B7F7A4A27B9288B84 |
SHA384 |
30B53020478F1AEB7586C1C88719175CDE90C374E39FAAE4FFA925F163ACD857ACB2765B96A23C7703DFC7C75F2ECC77 |
SHA512 |
E82A151B439C68FEE23E11689D5CBA50CEC3AE3B8E81FA9365B81D972D635F2949AA7B6F3D250A06246C4C433D1F45FD5D4178379D1353994082569E6A90A78D |
SSDEEP |
3072:D3LGdlVbUd8arSJI8G2o0cjhPN0j+gKC6O0r1B+NMk0aI4y9yzU5pWHArQ50dH0w:D7STbUd8BZG23cjhPNsP2Xvka4y |
IMP |
E856E9A8EDA493AA97421522C8E9E142 |
PESHA1 |
304657FA9DF7D79B3F1A822AD3F79273527AF7EF |
PE256 |
9BF2A734F97B227FAE20A03A28D65ACB5FEB5EFCA02EFD30851195DAD0B21D5B |
DLL Exports:
Function Name |
Ordinal |
Type |
WldpQuerySecurityPolicy |
18 |
Exported Function |
WldpQueryWindowsLockdownMode |
2 |
Exported Function |
WldpQueryDynamicCodeTrust |
17 |
Exported Function |
WldpIsDebugAllowed |
15 |
Exported Function |
WldpIsDynamicCodePolicyEnabled |
16 |
Exported Function |
WldpSetDynamicCodeTrust2 |
21 |
Exported Function |
WldpSetWindowsLockdownRestriction |
4 |
Exported Function |
WldpSetDynamicCodeTrust |
20 |
Exported Function |
WldpQueryWindowsLockdownRestriction |
3 |
Exported Function |
WldpResetSecurityWatermarkState |
19 |
Exported Function |
WldpIsClassInApprovedList |
14 |
Exported Function |
WldpCheckSecurityWatermarkState |
8 |
Exported Function |
WldpCheckWcosDeviceEncryptionSecure |
9 |
Exported Function |
WldpCheckRetailConfiguration |
7 |
Exported Function |
WldpAddDeveloperCertificateForDynamicCodeTrust |
5 |
Exported Function |
WldpCheckDeviceEncryptionNotStarted |
6 |
Exported Function |
WldpIsAllowedEntryPoint |
13 |
Exported Function |
WldpIsAppApprovedByPolicy |
1 |
Exported Function |
WldpGetLockdownPolicy |
12 |
Exported Function |
WldpDisableDeveloperMode |
10 |
Exported Function |
WldpEnableDeveloperMode |
11 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: wldp.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/f9491e4c7077061be9e689b354202b43852d1b82c631183b7f7a4a27b9288b84/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.