¿Para qué sirve la dll ddptrace.dll?

Microsoft File Server Resource Management Tracing Library

Dependencias de la dll ddptrace.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ddptrace.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    ntdll.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    OLEAUT32.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll

  Summary

        2000 .data
        1000 .pdata
       12000 .rdata
        1000 .reloc
        1000 .rsrc
        F000 .text

Funciones que tiene la dll ddptrace.dll


10    0 00003190 SrmGetTracingContextPerThread
15    1 00003230 SrmGetTracingModuleInfo
11    2 00003220 SrmGetTracingSequenceNumber
16    3 00003290 SrmIsDebugFlagSet
14    4 00004810 SrmIsKernelDebuggerAttached
5    5 00002FC0 SrmIsTracingEnabled
8    6 00003040 SrmIsTracingEnabledOnFunction
7    7 00002FE0 SrmIsTracingEnabledOnModule
6    8 00003010 SrmIsTracingEnabledPerThread
9    9 00003100 SrmSetTracingContextPerThread
4    A 00002F40 SrmTraceBinary
1    B 00002E90 SrmTraceInitialize
3    C 00002ED0 SrmTraceMessage
2    D 00002EB0 SrmTraceUninitialize

Información avanzada sobre funciones que tiene la dll ddptrace.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ddptrace.dll

File Type: DLL

  Section contains the following exports for DdpTrace.DLL

    00000000 characteristics
    6078D399 time date stamp
        0.00 version
           1 ordinal base
          16 number of functions
          14 number of names

    ordinal hint RVA      name

         10    0 00003190 SrmGetTracingContextPerThread
         15    1 00003230 SrmGetTracingModuleInfo
         11    2 00003220 SrmGetTracingSequenceNumber
         16    3 00003290 SrmIsDebugFlagSet
         14    4 00004810 SrmIsKernelDebuggerAttached
          5    5 00002FC0 SrmIsTracingEnabled
          8    6 00003040 SrmIsTracingEnabledOnFunction
          7    7 00002FE0 SrmIsTracingEnabledOnModule
          6    8 00003010 SrmIsTracingEnabledPerThread
          9    9 00003100 SrmSetTracingContextPerThread
          4    A 00002F40 SrmTraceBinary
          1    B 00002E90 SrmTraceInitialize
          3    C 00002ED0 SrmTraceMessage
          2    D 00002EB0 SrmTraceUninitialize

  Summary

        2000 .data
        1000 .pdata
       12000 .rdata
        1000 .reloc
        1000 .rsrc
        F000 .text

Integridad de la dll ddptrace.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          799E3736F47654794DE42DFD574FECF1BF1BB29AB08C13CCB018AB2CE2A2F014       C:\Windows\System32\ddptrace.dll             


Detalles sobre el fichero dll ddptrace.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\ddptrace.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : ddptrace.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\ddptrace.dll
                    InternalName:     srmtrace.dll
                    OriginalFilename: srmtrace.dll
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  Microsoft File Server Resource Management Tracing Library
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : ddptrace
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-dedup-common_31bf3856ad364e35_10.0.19041.1_none_e9c4f8f3d005906b\ddpt
                    race.dll}
LinkType          : HardLink
Name              : ddptrace.dll
Length            : 138240
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\ddptrace.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:10:20
CreationTimeUtc   : 07/12/2019 9:10:20
LastAccessTime    : 03/12/2020 9:45:14
LastAccessTimeUtc : 03/12/2020 8:45:14
LastWriteTime     : 07/12/2019 15:58:10
LastWriteTimeUtc  : 07/12/2019 14:58:10
Attributes        : Archive



Procesos que utilizan la dll ddptrace.dll