¿Para qué sirve la dll auditpolcore.dll?

Programa de directivas de auditoría

Dependencias de la dll auditpolcore.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\auditpolcore.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-console-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-security-audit-l1-1-0.dll
    api-ms-win-security-audit-l1-1-1.dll
    api-ms-win-security-provider-l1-1-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-memory-l1-1-0.dll

  Summary

        1000 .data
        1000 .pdata
        6000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Funciones que tiene la dll auditpolcore.dll


1    0 00003E20 AdtBackupPolicy
2    1 00003DE0 AdtBackupPolicyGeneralized
3    2 000044D0 AdtClearPolicy
4    3 000062B0 AdtConstructAllCategoryGuids
5    4 00006230 AdtConvertGuidStringToGuid
6    5 00006120 AdtConvertGuidToString
7    6 00005F60 AdtDisableSinglePrivilege
8    7 00005F50 AdtEnableSinglePrivilege
9    8 00003880 AdtGetOption
10    9 000037E0 AdtGetPerUserPolicy
11    A 00003750 AdtGetSystemPolicy
12    B 00006890 AdtListCategories
13    C 00006A00 AdtListSubCategories
14    D 00006520 AdtLoadStringEx
15    E 00006380 AdtParseAuditOptionName
16    F 00006540 AdtParseGuidOrNameArray
17   10 00004AC0 AdtRemoveAllUsers
18   11 00004870 AdtRemoveBasePolicy
19   12 00004000 AdtRestorePolicy
20   13 00003FC0 AdtRestorePolicyGeneralized
21   14 00003D20 AdtSetOption
22   15 00003C40 AdtSetPerUserPolicy
23   16 00003B60 AdtSetSystemPolicy
24   17 00007E70 AuditPolicyData_DeleteAuditDataInstance
25   18 00009040 DisplayMessage
26   19 00009160 DisplayMessageToSpecificConsoleHandle
27   1A 00008B90 GetDisplayPolicy
28   1B 000090A0 LoadFormatStringAndPrintToConsole
29   1C 00008BA0 SetDisplayPolicy

Información avanzada sobre funciones que tiene la dll auditpolcore.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\auditpolcore.dll

File Type: DLL

  Section contains the following exports for auditpolcore.dll

    00000000 characteristics
    EE6EE2F9 time date stamp
        0.00 version
           1 ordinal base
          29 number of functions
          29 number of names

    ordinal hint RVA      name

          1    0 00003E20 AdtBackupPolicy
          2    1 00003DE0 AdtBackupPolicyGeneralized
          3    2 000044D0 AdtClearPolicy
          4    3 000062B0 AdtConstructAllCategoryGuids
          5    4 00006230 AdtConvertGuidStringToGuid
          6    5 00006120 AdtConvertGuidToString
          7    6 00005F60 AdtDisableSinglePrivilege
          8    7 00005F50 AdtEnableSinglePrivilege
          9    8 00003880 AdtGetOption
         10    9 000037E0 AdtGetPerUserPolicy
         11    A 00003750 AdtGetSystemPolicy
         12    B 00006890 AdtListCategories
         13    C 00006A00 AdtListSubCategories
         14    D 00006520 AdtLoadStringEx
         15    E 00006380 AdtParseAuditOptionName
         16    F 00006540 AdtParseGuidOrNameArray
         17   10 00004AC0 AdtRemoveAllUsers
         18   11 00004870 AdtRemoveBasePolicy
         19   12 00004000 AdtRestorePolicy
         20   13 00003FC0 AdtRestorePolicyGeneralized
         21   14 00003D20 AdtSetOption
         22   15 00003C40 AdtSetPerUserPolicy
         23   16 00003B60 AdtSetSystemPolicy
         24   17 00007E70 AuditPolicyData_DeleteAuditDataInstance
         25   18 00009040 DisplayMessage
         26   19 00009160 DisplayMessageToSpecificConsoleHandle
         27   1A 00008B90 GetDisplayPolicy
         28   1B 000090A0 LoadFormatStringAndPrintToConsole
         29   1C 00008BA0 SetDisplayPolicy

  Summary

        1000 .data
        1000 .pdata
        6000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Integridad de la dll auditpolcore.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          40CE54E3F2C0B74AC137EA743DAC95AC260F0521206D921B285E9180A1674281       C:\Windows\System32\auditpolcore.dll         


Detalles sobre el fichero dll auditpolcore.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\auditpolcore.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : auditpolcore.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\auditpolcore.dll
                    InternalName:     auditpolcore
                    OriginalFilename: AUDITPOLCORE.DLL.MUI
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Programa de directivas de auditoría
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : auditpolcore
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-msaudittools_31bf3856ad364e35_10.0.19041.546_none_f57e58b71b913c6b\au
                    ditpolcore.dll}
LinkType          : HardLink
Name              : auditpolcore.dll
Length            : 80384
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\auditpolcore.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:47:29
CreationTimeUtc   : 21/11/2020 7:47:29
LastAccessTime    : 03/12/2020 8:41:22
LastAccessTimeUtc : 03/12/2020 7:41:22
LastWriteTime     : 21/11/2020 8:47:29
LastWriteTimeUtc  : 21/11/2020 7:47:29
Attributes        : Archive



Procesos que utilizan la dll auditpolcore.dll