wlidcli.dll

  • File Path: C:\Windows\system32\wlidcli.dll
  • Description: Microsoft Account Dynamic Link Library

Hashes

Type Hash
MD5 4D87911EAD448CAB3B13E8CA38F1BFF7
SHA1 56BA0D9FC13B1F5716A6D233934233D6EBE3BD99
SHA256 34CE961AB77E6FC9A3140EA0CD08316B9D2D3E5CFBCC7583DE4C0E11F0C02BB8
SHA384 887721440D2F1E8AB2CB6AE0D7E0736E8D315404734959927C0B436D27C0AAA1198589C55042D1A4E45A9C7F42B077B3
SHA512 574EA4D40772F8DA9F43A02B97C2EE5CF09A787CA586AD2502F6A07FF3C4D4E271F34A6E9332C6763380AB2C0A7A3FE0692A0578143D244074FC9219550A91E1
SSDEEP 12288:5v8k6g+wwByRvZzceZ+uewrvCkJe/nYjEOuO:S3nkRX+ue4CkY/nYjEOH
IMP DD576A276CFEFA0AEC8F9B16D9DEE60B
PESHA1 E2A246BD5D9AB83FFBC02778C22B869123D4139E
PE256 18FE21A466239B8BB6C70D04C5D93A9911601D7834370A98CE976CCEF50FB77A

DLL Exports:

Function Name Ordinal Type
LogonIdentityExSSO 108 Exported Function
LogonIdentityExWithUI 75 Exported Function
NextIdentity 18 Exported Function
IsMappedError 95 Exported Function
LogonIdentity 21 Exported Function
LogonIdentityEx 31 Exported Function
ProvisionDeviceId 98 Exported Function
RemoveChangeNotificationCallback 58 Exported Function
RemovePersistedCredential 16 Exported Function
OpenAuthenticatedBrowser 74 Exported Function
PassportFreeMemory 3 Exported Function
PersistCredential 15 Exported Function
GetWebAuthUrlEx 52 Exported Function
HasPersistedCredential 23 Exported Function
IDCRL_GetLatestProtectionKey 123 Exported Function
GetUserExtendedProperty 56 Exported Function
GetUsersFromSsoGroup 115 Exported Function
GetWebAuthUrl 30 Exported Function
InitializeEx 29 Exported Function
InitializeIDCRLTraceBuffer 93 Exported Function
IsDeviceIDAdmin 69 Exported Function
IDCRL_GetSpecifiedProtectionKey 122 Exported Function
Initialize 1 Exported Function
InitializeApp 61 Exported Function
StopTracing 111 Exported Function
UICollectCredential 83 Exported Function
UIEndWaitDialog 92 Exported Function
SetIdentityProperty 7 Exported Function
SetUserExtendedProperty 55 Exported Function
StartTracing 110 Exported Function
UpdateUserAssociatedDeviceProperties 87 Exported Function
VerifyAssertion 73 Exported Function
VerifyCertificate 40 Exported Function
UIShowWaitDialog 91 Exported Function
Uninitialize 2 Exported Function
UnPackErrorBlob 102 Exported Function
SendWatsonReport 121 Exported Function
SetChangeNotificationCallback 57 Exported Function
SetCredential 5 Exported Function
RemoveUserFromSsoGroup 116 Exported Function
RenewDeviceId 100 Exported Function
SendOneTimeCode 117 Exported Function
SetHIPSolution 79 Exported Function
SetIdcrlOptions 51 Exported Function
SetIdentityCallback 24 Exported Function
SetDefaultUserForTarget 81 Exported Function
SetDeviceConsent 65 Exported Function
SetExtendedProperty 47 Exported Function
DllGetClassObject 10 Exported Function
DllInstall 11 Exported Function
DllRegisterServer 12 Exported Function
DeProvisionDeviceId 101 Exported Function
DisassociateDeviceFromUser 85 Exported Function
DllCanUnloadNow 9 Exported Function
EnumerateCertificates 62 Exported Function
EnumerateDeviceID 70 Exported Function
EnumerateUserAssociatedDevices 86 Exported Function
DllUnregisterServer 14 Exported Function
EncryptWithSessionKey 53 Exported Function
EncryptWithSessionKeyEx 118 Exported Function
AuthIdentityToServiceEx 33 Exported Function
CancelPendingRequest 38 Exported Function
CloseEnumIdentitiesHandle 19 Exported Function
AddUserToSsoGroup 114 Exported Function
AssociateDeviceToUser 84 Exported Function
AuthIdentityToService 13 Exported Function
CreateLinkedIdentityHandle 68 Exported Function
DecryptWithSessionKey 54 Exported Function
DecryptWithSessionKeyEx 119 Exported Function
CloseIdentityHandle 8 Exported Function
CreateIdentityHandle 4 Exported Function
CreateIdentityHandleEx 113 Exported Function
GetErrorMessage 120 Exported Function
GetExtendedError 60 Exported Function
GetExtendedProperty 48 Exported Function
GetDeviceId 64 Exported Function
GetDeviceIdEx 99 Exported Function
GetDeviceShortLivedToken 77 Exported Function
GetRealmInfo 112 Exported Function
GetResponseForHttpChallenge 76 Exported Function
GetServiceConfig 49 Exported Function
GetHIPChallenge 78 Exported Function
GetIdentityProperty 6 Exported Function
GetIdentityPropertyByName 41 Exported Function
GenerateDeviceToken 67 Exported Function
GetAssertion 72 Exported Function
GetAuthenticationStatus 96 Exported Function
EnumIdentitiesWithCachedCredentials 17 Exported Function
FlushIDCRLTraceBuffer 94 Exported Function
GenerateCertToken 63 Exported Function
GetConfigDWORDValue 97 Exported Function
GetDefaultNoUISSOUser 104 Exported Function
GetDefaultUserForTarget 82 Exported Function
GetAuthState 20 Exported Function
GetAuthStateEx 34 Exported Function
GetCertificate 35 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wlidcli.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/34ce961ab77e6fc9a3140ea0cd08316b9d2d3e5cfbcc7583de4c0e11f0c02bb8/detection/

MIT License. Copyright (c) 2020-2021 Strontic.