wldp.dll

  • File Path: C:\Windows\SysWOW64\wldp.dll
  • Description: Windows Lockdown Policy

Hashes

Type Hash
MD5 F9DA7085B83AAAC5E6AD2C732D02C9BB
SHA1 FABCBDA52D727B4E39D8070FE548267AFDB9CC58
SHA256 667E1E1D7C290FF579039EA8A5E653115B50983F2CA7CEF4B76A3ED1272CF523
SHA384 7DC6961840AFF00BA11B3BAB2FACECC192A87F50551E5393521735B46708DF0CE6C1419876648EC5D22373F4D4CAB709
SHA512 A0441424D82002E6E96FF66688F69DB31D89C230FBCC4B42ABBCBBE6829C2D5E5FAAFAB5189BA2AC1066992663D8E6C2E2B513E4474A65C0DE3B7885349462C0
SSDEEP 3072:Unw+VlCauk7a4zPMAw78SgUm8wyptuEEpcEZ0ah4IyzU5pWHArQ50dH0e0g:MwfGPkAw404vZ/4J
IMP FA2A9E6F2FAB2E469C3725D77D770E63
PESHA1 AAB2246F648BDB49343AF61E7820CA5FDE3DF4B4
PE256 7739BF2128B14A2AF1B7187FB0498AE38C7822F5929A4EA7AA9C7FC658B7F6DC

DLL Exports:

Function Name Ordinal Type
WldpQuerySecurityPolicy 18 Exported Function
WldpQueryWindowsLockdownMode 2 Exported Function
WldpQueryDynamicCodeTrust 17 Exported Function
WldpIsDebugAllowed 15 Exported Function
WldpIsDynamicCodePolicyEnabled 16 Exported Function
WldpSetDynamicCodeTrust2 20 Exported Function
WldpSetWindowsLockdownRestriction 4 Exported Function
WldpSetDynamicCodeTrust 21 Exported Function
WldpQueryWindowsLockdownRestriction 3 Exported Function
WldpResetSecurityWatermarkState 19 Exported Function
WldpIsClassInApprovedList 14 Exported Function
WldpCheckSecurityWatermarkState 8 Exported Function
WldpCheckWcosDeviceEncryptionSecure 9 Exported Function
WldpCheckRetailConfiguration 7 Exported Function
WldpAddDeveloperCertificateForDynamicCodeTrust 5 Exported Function
WldpCheckDeviceEncryptionNotStarted 6 Exported Function
WldpIsAllowedEntryPoint 13 Exported Function
WldpIsAppApprovedByPolicy 1 Exported Function
WldpGetLockdownPolicy 12 Exported Function
WldpDisableDeveloperMode 10 Exported Function
WldpEnableDeveloperMode 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wldp.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.423 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.423
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/667e1e1d7c290ff579039ea8a5e653115b50983f2ca7cef4b76a3ed1272cf523/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\wldp.dll 38

MIT License. Copyright (c) 2020-2021 Strontic.