¿Para qué sirve la dll EventAggregation.dll?

Event Aggregation User Mode Library

Dependencias de la dll EventAggregation.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\EventAggregation.dll

File Type: DLL

  Image has the following dependencies:

    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-crt-string-l1-1-0.dll
    ntdll.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    api-ms-win-security-lsalookup-l1-1-0.dll

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        6000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Funciones que tiene la dll EventAggregation.dll


1    0 00006F20 BriAllocateRpcBuffer
2    1 00007020 BriCleanup
3    2 000072B0 BriCreateBrokeredEvent
4    3 00007300 BriCreateBrokeredEventEx
5    4 00007C00 BriDeleteBrokeredEvent
6    5 00007D80 BriFreeRpcBuffer
7    6 00008970 BriGetBrokerAvailabilityChangeStamp
8    7 00006F30 BriIsBrokerRegistered
9    8 00008AC0 BriRegisterToBrokerAvailability
10    9 00008780 BriResolveBrokerIdByEventId
11    A 000087F0 BriSignalBrokeredEvent
12    B 00008C20 BriUnregisterFromBrokerAvailability
13    C 00003E50 EACreateAggregateEvent
14    D 000045C0 EADeleteAggregateEvent
15    E 00004630 EAEnumerateAggregateEvents
16    F 000047E0 EAQueryAggregateEventData
17   10 00006E50 EaCreateAggregatedEvent
18   11 000051F0 EaCreateAggregation
19   12 00008FC0 EaDecodeBrokeredEvent
20   13 00006830 EaDeleteAggregatedEvent
21   14 0000B440 EaDeleteAggregatedEventParameters
22   15 00005B80 EaDeleteAggregation
23   16 00006160 EaDisableAggregatedEvent
24   17 00005F20 EaEnableAggregatedEvent
25   18 00008ED0 EaEncodeBrokeredEvent
26   19 00009E50 EaFreeAggregatedEventParameters
27   1A 00008940 EaFreeBuffer
28   1B 00005F10 EaGetAggregation
29   1C 000064A0 EaQueryAggregateEventConditionState
30   1D 00004C70 EaQueryAggregatedEvent
31   1E 0000AFF0 EaQueryAggregatedEventParameters
32   1F 00004A00 EaSignalAggregatedEvent
33   20 0000AD80 EaStoreAggregatedEventParameters

Información avanzada sobre funciones que tiene la dll EventAggregation.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\EventAggregation.dll

File Type: DLL

  Section contains the following exports for EventAggregation.dll

    00000000 characteristics
    8408BC20 time date stamp
        0.00 version
           1 ordinal base
          33 number of functions
          33 number of names

    ordinal hint RVA      name

          1    0 00006F20 BriAllocateRpcBuffer
          2    1 00007020 BriCleanup
          3    2 000072B0 BriCreateBrokeredEvent
          4    3 00007300 BriCreateBrokeredEventEx
          5    4 00007C00 BriDeleteBrokeredEvent
          6    5 00007D80 BriFreeRpcBuffer
          7    6 00008970 BriGetBrokerAvailabilityChangeStamp
          8    7 00006F30 BriIsBrokerRegistered
          9    8 00008AC0 BriRegisterToBrokerAvailability
         10    9 00008780 BriResolveBrokerIdByEventId
         11    A 000087F0 BriSignalBrokeredEvent
         12    B 00008C20 BriUnregisterFromBrokerAvailability
         13    C 00003E50 EACreateAggregateEvent
         14    D 000045C0 EADeleteAggregateEvent
         15    E 00004630 EAEnumerateAggregateEvents
         16    F 000047E0 EAQueryAggregateEventData
         17   10 00006E50 EaCreateAggregatedEvent
         18   11 000051F0 EaCreateAggregation
         19   12 00008FC0 EaDecodeBrokeredEvent
         20   13 00006830 EaDeleteAggregatedEvent
         21   14 0000B440 EaDeleteAggregatedEventParameters
         22   15 00005B80 EaDeleteAggregation
         23   16 00006160 EaDisableAggregatedEvent
         24   17 00005F20 EaEnableAggregatedEvent
         25   18 00008ED0 EaEncodeBrokeredEvent
         26   19 00009E50 EaFreeAggregatedEventParameters
         27   1A 00008940 EaFreeBuffer
         28   1B 00005F10 EaGetAggregation
         29   1C 000064A0 EaQueryAggregateEventConditionState
         30   1D 00004C70 EaQueryAggregatedEvent
         31   1E 0000AFF0 EaQueryAggregatedEventParameters
         32   1F 00004A00 EaSignalAggregatedEvent
         33   20 0000AD80 EaStoreAggregatedEventParameters

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        6000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Integridad de la dll EventAggregation.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          C3135EAD3A6229FE815DABB6560E529B652E4711FDFD732B39C5970BD023D0B6       C:\Windows\System32\EventAggregation.dll     


Detalles sobre el fichero dll EventAggregation.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\EventAggregation.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : EventAggregation.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\EventAggregation.dll
                    InternalName:     EventAggregation.dll
                    OriginalFilename: EventAggregation.dll
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  Event Aggregation User Mode Library
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : EventAggregation
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-eventaggregation_31bf3856ad364e35_10.0.19041.1_none_63a798d6bc80e6c3\
                    EventAggregation.dll}
LinkType          : HardLink
Name              : EventAggregation.dll
Length            : 80384
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\EventAggregation.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:08:33
CreationTimeUtc   : 07/12/2019 9:08:33
LastAccessTime    : 03/12/2020 10:36:21
LastAccessTimeUtc : 03/12/2020 9:36:21
LastWriteTime     : 07/12/2019 10:08:33
LastWriteTimeUtc  : 07/12/2019 9:08:33
Attributes        : Archive



Procesos que utilizan la dll EventAggregation.dll