wlidprov.dll
Description: Microsoft® Account Provider
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 64-bit
Operating System: Windows NT
SHA256: 26e2ec7fbb1ac0d5f987dd736ab58d77
File Size: 651.5 KB
Uploaded At: Dec. 1, 2025, 7:45 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x6330)
- DllGetClassObject (Ordinal: 2, Address: 0xc2d0)
- DllRegisterServer (Ordinal: 3, Address: 0xc7b0)
- DllUnregisterServer (Ordinal: 4, Address: 0xc7b0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180067bd0)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x180067c18)
- CoCreateInstance (Address: 0x180067be0)
- CoGetApartmentType (Address: 0x180067c38)
- CoGetCallerTID (Address: 0x180067be8)
- CoMarshalInterface (Address: 0x180067c28)
- CoReleaseMarshalData (Address: 0x180067c10)
- CoTaskMemAlloc (Address: 0x180067c00)
- CoTaskMemFree (Address: 0x180067c30)
- CoTaskMemRealloc (Address: 0x180067c40)
- CoUninitialize (Address: 0x180067bf0)
- CoWaitForMultipleHandles (Address: 0x180067c08)
- CreateStreamOnHGlobal (Address: 0x180067c20)
- PropVariantClear (Address: 0x180067bf8)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x180067c50)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdAsyncStubBuffer_AddRef (Address: 0x180067cc8)
- CStdAsyncStubBuffer_Connect (Address: 0x180067ca0)
- CStdAsyncStubBuffer_Disconnect (Address: 0x180067c68)
- CStdAsyncStubBuffer_Invoke (Address: 0x180067c78)
- CStdAsyncStubBuffer_QueryInterface (Address: 0x180067c88)
- CStdAsyncStubBuffer_Release (Address: 0x180067c70)
- ObjectStublessClient10 (Address: 0x180067ca8)
- ObjectStublessClient3 (Address: 0x180067c60)
- ObjectStublessClient4 (Address: 0x180067cb0)
- ObjectStublessClient5 (Address: 0x180067cc0)
- ObjectStublessClient6 (Address: 0x180067cb8)
- ObjectStublessClient7 (Address: 0x180067c80)
- ObjectStublessClient8 (Address: 0x180067c90)
- ObjectStublessClient9 (Address: 0x180067c98)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180067ce0)
- IsDebuggerPresent (Address: 0x180067cf0)
- OutputDebugStringA (Address: 0x180067ce8)
- OutputDebugStringW (Address: 0x180067cd8)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180067d00)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180067d10)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180067d38)
- RaiseException (Address: 0x180067d30)
- SetLastError (Address: 0x180067d28)
- SetUnhandledExceptionFilter (Address: 0x180067d20)
- UnhandledExceptionFilter (Address: 0x180067d40)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180067d50)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180067d88)
- HeapAlloc (Address: 0x180067d78)
- HeapDestroy (Address: 0x180067d60)
- HeapFree (Address: 0x180067d68)
- HeapReAlloc (Address: 0x180067d80)
- HeapSize (Address: 0x180067d70)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180067d98)
- LocalFree (Address: 0x180067da0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalSize (Address: 0x180067db0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- GetComputerNameW (Address: 0x180067dc0)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180067e08)
- FindResourceExW (Address: 0x180067df8)
- FreeLibrary (Address: 0x180067e20)
- GetModuleFileNameA (Address: 0x180067e28)
- GetModuleFileNameW (Address: 0x180067de0)
- GetModuleHandleExW (Address: 0x180067e10)
- GetModuleHandleW (Address: 0x180067df0)
- GetProcAddress (Address: 0x180067de8)
- LoadLibraryExW (Address: 0x180067e00)
- LoadResource (Address: 0x180067dd8)
- LockResource (Address: 0x180067dd0)
- SizeofResource (Address: 0x180067e18)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x180067e38)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180067e48)
- GetThreadPreferredUILanguages (Address: 0x180067e50)
- GetUserDefaultLocaleName (Address: 0x180067e58)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetUserDefaultUILanguage (Address: 0x180067e68)
api-ms-win-core-marshal-l1-1-0.dll
- HWND_UserFree (Address: 0x180067e98)
- HWND_UserFree64 (Address: 0x180067eb0)
- HWND_UserMarshal (Address: 0x180067ea8)
- HWND_UserMarshal64 (Address: 0x180067e90)
- HWND_UserSize (Address: 0x180067e80)
- HWND_UserSize64 (Address: 0x180067e78)
- HWND_UserUnmarshal (Address: 0x180067ea0)
- HWND_UserUnmarshal64 (Address: 0x180067e88)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x180067ee8)
- GetCurrentProcess (Address: 0x180067ec8)
- GetCurrentProcessId (Address: 0x180067f10)
- GetCurrentThread (Address: 0x180067f00)
- GetCurrentThreadId (Address: 0x180067ec0)
- GetProcessIdOfThread (Address: 0x180067ef0)
- OpenProcessToken (Address: 0x180067ed8)
- OpenThread (Address: 0x180067ed0)
- OpenThreadToken (Address: 0x180067ee0)
- SetThreadToken (Address: 0x180067ef8)
- TerminateProcess (Address: 0x180067f08)
api-ms-win-core-processthreads-l1-1-1.dll
- OpenProcess (Address: 0x180067f20)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180067f30)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180067f98)
- RegCreateKeyExW (Address: 0x180067f80)
- RegDeleteKeyExW (Address: 0x180067f68)
- RegDeleteTreeW (Address: 0x180067f70)
- RegDeleteValueW (Address: 0x180067f78)
- RegEnumKeyExW (Address: 0x180067fa8)
- RegEnumValueW (Address: 0x180067f88)
- RegGetValueW (Address: 0x180067f60)
- RegOpenCurrentUser (Address: 0x180067f40)
- RegOpenKeyExW (Address: 0x180067fa0)
- RegQueryInfoKeyW (Address: 0x180067f48)
- RegQueryValueExW (Address: 0x180067f90)
- RegSetKeySecurity (Address: 0x180067f50)
- RegSetValueExW (Address: 0x180067f58)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180067fc8)
- RtlLookupFunctionEntry (Address: 0x180067fc0)
- RtlVirtualUnwind (Address: 0x180067fb8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x180067fe8)
- MultiByteToWideChar (Address: 0x180067fd8)
- WideCharToMultiByte (Address: 0x180067fe0)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x180067ff8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x180068008)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180068078)
- AcquireSRWLockShared (Address: 0x180068030)
- CreateEventExW (Address: 0x1800680b8)
- CreateEventW (Address: 0x180068088)
- CreateMutexExW (Address: 0x180068098)
- CreateSemaphoreExW (Address: 0x180068040)
- DeleteCriticalSection (Address: 0x180068060)
- EnterCriticalSection (Address: 0x180068050)
- InitializeCriticalSection (Address: 0x1800680a8)
- InitializeCriticalSectionEx (Address: 0x1800680b0)
- InitializeSRWLock (Address: 0x180068018)
- LeaveCriticalSection (Address: 0x1800680c8)
- OpenEventW (Address: 0x180068058)
- OpenSemaphoreW (Address: 0x1800680c0)
- ReleaseMutex (Address: 0x180068020)
- ReleaseSemaphore (Address: 0x180068038)
- ReleaseSRWLockExclusive (Address: 0x180068080)
- ReleaseSRWLockShared (Address: 0x180068090)
- ResetEvent (Address: 0x180068048)
- SetEvent (Address: 0x180068028)
- WaitForMultipleObjectsEx (Address: 0x1800680a0)
- WaitForSingleObject (Address: 0x180068070)
- WaitForSingleObjectEx (Address: 0x180068068)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800680e8)
- InitOnceComplete (Address: 0x1800680e0)
- InitOnceExecuteOnce (Address: 0x1800680f0)
- Sleep (Address: 0x1800680d8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x180068100)
- GetSystemTimeAsFileTime (Address: 0x180068108)
- GetTickCount (Address: 0x180068110)
- GetTickCount64 (Address: 0x180068120)
- GetVersionExW (Address: 0x180068118)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180068148)
- CreateThreadpoolTimer (Address: 0x180068138)
- SetThreadpoolTimer (Address: 0x180068130)
- WaitForThreadpoolTimerCallbacks (Address: 0x180068140)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x180068158)
api-ms-win-core-url-l1-1-0.dll
- UrlEscapeW (Address: 0x180068168)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x180068188)
- GetFileVersionInfoSizeExW (Address: 0x180068178)
- VerQueryValueW (Address: 0x180068180)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x180068198)
- RoOriginateError (Address: 0x1800681a0)
- RoOriginateErrorW (Address: 0x1800681b8)
- RoTransformError (Address: 0x1800681a8)
- SetRestrictedErrorInfo (Address: 0x1800681b0)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x1800681d8)
- RoGetMatchingRestrictedErrorInfo (Address: 0x1800681d0)
- RoReportFailedDelegate (Address: 0x1800681c8)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1800681e8)
- RoGetActivationFactory (Address: 0x1800681f0)
api-ms-win-core-winrt-string-l1-1-0.dll
- HSTRING_UserFree (Address: 0x180068268)
- HSTRING_UserFree64 (Address: 0x180068250)
- HSTRING_UserMarshal (Address: 0x180068230)
- HSTRING_UserMarshal64 (Address: 0x180068238)
- HSTRING_UserSize (Address: 0x180068210)
- HSTRING_UserSize64 (Address: 0x180068248)
- HSTRING_UserUnmarshal (Address: 0x180068258)
- HSTRING_UserUnmarshal64 (Address: 0x180068208)
- WindowsCreateString (Address: 0x180068218)
- WindowsCreateStringReference (Address: 0x180068228)
- WindowsDeleteString (Address: 0x180068220)
- WindowsDuplicateString (Address: 0x180068240)
- WindowsGetStringRawBuffer (Address: 0x180068260)
- WindowsIsStringEmpty (Address: 0x180068270)
- WindowsStringHasEmbeddedNull (Address: 0x180068200)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180068298)
- EventRegister (Address: 0x180068288)
- EventSetInformation (Address: 0x1800682a0)
- EventUnregister (Address: 0x180068280)
- EventWriteTransfer (Address: 0x180068290)
api-ms-win-security-base-l1-1-0.dll
- AllocateAndInitializeSid (Address: 0x1800682c8)
- CreateWellKnownSid (Address: 0x1800682c0)
- FreeSid (Address: 0x1800682d8)
- GetSecurityDescriptorDacl (Address: 0x1800682f0)
- GetSecurityDescriptorSacl (Address: 0x1800682e0)
- GetTokenInformation (Address: 0x1800682b0)
- ImpersonateLoggedOnUser (Address: 0x1800682d0)
- IsValidSid (Address: 0x1800682e8)
- RevertToSelf (Address: 0x1800682b8)
api-ms-win-security-credentials-l1-1-0.dll
- CredIsProtectedW (Address: 0x180068300)
- CredUnprotectW (Address: 0x180068308)
api-ms-win-security-lsalookup-l1-1-2.dll
- LsaLookupUserAccountType (Address: 0x180068318)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x180068330)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180068328)
- ConvertStringSidToSidW (Address: 0x180068338)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x180068358)
- OpenSCManagerW (Address: 0x180068350)
- OpenServiceW (Address: 0x180068348)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x180068368)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x180068378)
- SHTaskPoolQueueTask (Address: 0x180068380)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x180068390)
bcrypt.dll
- BCryptGenRandom (Address: 0x1800683a0)
msvcrt.dll
- __C_specific_handler (Address: 0x1800684a8)
- __CxxFrameHandler3 (Address: 0x180068430)
- __dllonexit (Address: 0x180068438)
- _amsg_exit (Address: 0x1800683d8)
- _callnewh (Address: 0x180068410)
- _CxxThrowException (Address: 0x180068478)
- _errno (Address: 0x1800683e8)
- _get_errno (Address: 0x180068468)
- _initterm (Address: 0x1800683e0)
- _lock (Address: 0x180068420)
- _onexit (Address: 0x180068440)
- _purecall (Address: 0x180068498)
- _set_errno (Address: 0x180068460)
- _time64 (Address: 0x180068458)
- _unlock (Address: 0x1800684b0)
- _vsnprintf_s (Address: 0x1800683c8)
- _vsnwprintf (Address: 0x180068450)
- _XcptFilter (Address: 0x1800683b8)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180068428)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x1800683d0)
- ??0exception@@QEAA@XZ (Address: 0x1800683c0)
- ??1exception@@UEAA@XZ (Address: 0x1800683f0)
- ??1type_info@@UEAA@XZ (Address: 0x180068418)
- ?terminate@@YAXXZ (Address: 0x180068400)
- ?what@exception@@UEBAPEBDXZ (Address: 0x1800684b8)
- calloc (Address: 0x1800683b0)
- free (Address: 0x180068490)
- malloc (Address: 0x180068488)
- memcmp (Address: 0x1800684c0)
- memcpy (Address: 0x180068470)
- memcpy_s (Address: 0x1800684a0)
- memmove_s (Address: 0x180068408)
- memset (Address: 0x180068448)
- realloc (Address: 0x1800683f8)
- wcscmp (Address: 0x1800684c8)
- wcsncpy_s (Address: 0x180068480)
ntdll.dll
- _vscwprintf (Address: 0x180068560)
- _vsnprintf (Address: 0x1800684f0)
- _wcsicmp (Address: 0x180068548)
- _wcslwr_s (Address: 0x180068520)
- isdigit (Address: 0x1800684f8)
- iswspace (Address: 0x180068540)
- RtlAcquireSRWLockExclusive (Address: 0x1800684e0)
- RtlGetDeviceFamilyInfoEnum (Address: 0x180068518)
- RtlReleaseSRWLockExclusive (Address: 0x1800684e8)
- RtlSleepConditionVariableSRW (Address: 0x180068510)
- RtlWakeAllConditionVariable (Address: 0x1800684d8)
- strrchr (Address: 0x180068570)
- toupper (Address: 0x180068500)
- vswprintf_s (Address: 0x180068568)
- wcschr (Address: 0x180068508)
- wcscspn (Address: 0x180068550)
- wcsspn (Address: 0x180068558)
- wcsstr (Address: 0x180068538)
- wcstol (Address: 0x180068530)
- WinSqmAddToStreamEx (Address: 0x180068528)
OLEAUT32.dll
- SysAllocStringLen (Address: 0x180067a58)
- VariantClear (Address: 0x180067a68)
- VarUI4FromStr (Address: 0x180067a60)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x180067b70)
- CStdStubBuffer_Connect (Address: 0x180067b20)
- CStdStubBuffer_CountRefs (Address: 0x180067b60)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x180067b80)
- CStdStubBuffer_DebugServerRelease (Address: 0x180067b48)
- CStdStubBuffer_Disconnect (Address: 0x180067b40)
- CStdStubBuffer_Invoke (Address: 0x180067b90)
- CStdStubBuffer_IsIIDSupported (Address: 0x180067b30)
- CStdStubBuffer_QueryInterface (Address: 0x180067b58)
- I_RpcBindingInqLocalClientPID (Address: 0x180067af8)
- I_RpcExceptionFilter (Address: 0x180067af0)
- I_RpcMapWin32Status (Address: 0x180067bb0)
- IUnknown_AddRef_Proxy (Address: 0x180067b88)
- IUnknown_QueryInterface_Proxy (Address: 0x180067b38)
- IUnknown_Release_Proxy (Address: 0x180067b68)
- MesBufferHandleReset (Address: 0x180067b10)
- MesDecodeBufferHandleCreate (Address: 0x180067b08)
- MesEncodeFixedBufferHandleCreate (Address: 0x180067b18)
- MesHandleFree (Address: 0x180067bc0)
- Ndr64AsyncClientCall (Address: 0x180067ad8)
- NdrClientCall3 (Address: 0x180067b28)
- NdrCStdStubBuffer_Release (Address: 0x180067b98)
- NdrDllCanUnloadNow (Address: 0x180067ba0)
- NdrDllGetClassObject (Address: 0x180067ba8)
- NdrMesTypeAlignSize3 (Address: 0x180067a88)
- NdrMesTypeDecode3 (Address: 0x180067aa0)
- NdrMesTypeEncode3 (Address: 0x180067a98)
- NdrMesTypeFree3 (Address: 0x180067a90)
- NdrOleAllocate (Address: 0x180067b50)
- NdrOleFree (Address: 0x180067b78)
- RpcAsyncCancelCall (Address: 0x180067ad0)
- RpcAsyncCompleteCall (Address: 0x180067ae0)
- RpcAsyncInitializeHandle (Address: 0x180067bb8)
- RpcBindingBind (Address: 0x180067a78)
- RpcBindingCreateW (Address: 0x180067a80)
- RpcBindingFree (Address: 0x180067aa8)
- RpcBindingFromStringBindingW (Address: 0x180067ac8)
- RpcBindingSetAuthInfoExW (Address: 0x180067ab8)
- RpcSsDestroyClientContext (Address: 0x180067ae8)
- RpcStringBindingComposeW (Address: 0x180067ac0)
- RpcStringFreeW (Address: 0x180067ab0)
- UuidCreate (Address: 0x180067b00)
samcli.dll
- NetLocalGroupAddMembers (Address: 0x180068588)
- NetUserDel (Address: 0x180068580)