¿Para qué sirve la dll dpapisrv.dll?

DPAPI Server

Dependencias de la dll dpapisrv.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\dpapisrv.dll

File Type: DLL

  Image has the following dependencies:

    msvcp_win.dll
    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-crt-string-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    bcrypt.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    CRYPTBASE.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    ncrypt.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-core-threadpool-legacy-l1-1-0.dll
    api-ms-win-core-string-obsolete-l1-1-0.dll
    api-ms-win-core-heap-obsolete-l1-1-0.dll
    LSASRV.dll
    NTASN1.dll
    lsass.exe
    ntdll.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    CRYPT32.dll
    logoncli.dll
    netutils.dll
    samcli.dll
    api-ms-win-security-sddl-l1-1-0.dll
    USERENV.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-core-registry-l2-1-0.dll
    api-ms-win-security-lsalookup-l1-1-0.dll
    api-ms-win-security-lsapolicy-l1-1-0.dll
    CRYPTSP.dll
    KdsCli.dll
    SspiCli.dll
    SAMSRV.dll

  Summary

        2000 .data
        1000 .didat
        3000 .pdata
        C000 .rdata
        1000 .reloc
        2000 .rsrc
       32000 .text

Funciones que tiene la dll dpapisrv.dll


1    0 0000D070 InitializeLsaExtension
2    1 0000D730 QueryLsaInterface

Información avanzada sobre funciones que tiene la dll dpapisrv.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\dpapisrv.dll

File Type: DLL

  Section contains the following exports for dpapisrv.dll

    00000000 characteristics
    CE5CB103 time date stamp
        0.00 version
           1 ordinal base
           2 number of functions
           2 number of names

    ordinal hint RVA      name

          1    0 0000D070 InitializeLsaExtension
          2    1 0000D730 QueryLsaInterface

  Summary

        2000 .data
        1000 .didat
        3000 .pdata
        C000 .rdata
        1000 .reloc
        2000 .rsrc
       32000 .text

Integridad de la dll dpapisrv.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          D90235993A0D81AB9D9A76C98040ABBF42ABC579715CB117741BFF8AF9EE65F0       C:\Windows\System32\dpapisrv.dll

Detalles sobre el fichero dll dpapisrv.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\dpapisrv.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : dpapisrv.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\dpapisrv.dll
                    InternalName:     dpapisrv.dll
                    OriginalFilename: dpapisrv.dll.mui
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  DPAPI Server
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : dpapisrv
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-dpapisrv-dll_31bf3856ad364e35_10.0.19041.546_none_f1ad909b1ab1c3c3\dp
                    apisrv.dll}
LinkType          : HardLink
Name              : dpapisrv.dll
Length            : 273920
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\dpapisrv.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:44:14
CreationTimeUtc   : 21/11/2020 7:44:14
LastAccessTime    : 03/12/2020 10:09:19
LastAccessTimeUtc : 03/12/2020 9:09:19
LastWriteTime     : 21/11/2020 8:44:14
LastWriteTimeUtc  : 21/11/2020 7:44:14
Attributes        : Archive

Procesos que utilizan la dll dpapisrv.dll