¿Para qué sirve la dll ncobjapi.dll?

Dependencias de la dll ncobjapi.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ncobjapi.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-namedpipe-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    api-ms-win-security-sddl-l1-1-0.dll

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        7000 .rdata
        1000 .reloc
        1000 .rsrc
        B000 .text

Funciones que tiene la dll ncobjapi.dll


2    0 00002B80 WmiAddObjectProp
1    1 00001B70 WmiCommitObject
3    2 0000B480 WmiCreateObject
4    3 00002890 WmiCreateObjectWithFormat
5    4 00001EB0 WmiCreateObjectWithProps
6    5 000043A0 WmiDestroyObject
7    6 000010C0 WmiEventSourceConnect
8    7 00001090 WmiEventSourceDisconnect
9    8 00004E20 WmiIsObjectActive
10    9 00001940 WmiSetAndCommitObject

Información avanzada sobre funciones que tiene la dll ncobjapi.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ncobjapi.dll

File Type: DLL

  Section contains the following exports for NCObjAPI.DLL

    00000000 characteristics
      3A0BD1 time date stamp
        0.00 version
           1 ordinal base
          10 number of functions
          10 number of names

    ordinal hint RVA      name

          2    0 00002B80 WmiAddObjectProp
          1    1 00001B70 WmiCommitObject
          3    2 0000B480 WmiCreateObject
          4    3 00002890 WmiCreateObjectWithFormat
          5    4 00001EB0 WmiCreateObjectWithProps
          6    5 000043A0 WmiDestroyObject
          7    6 000010C0 WmiEventSourceConnect
          8    7 00001090 WmiEventSourceDisconnect
          9    8 00004E20 WmiIsObjectActive
         10    9 00001940 WmiSetAndCommitObject

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        7000 .rdata
        1000 .reloc
        1000 .rsrc
        B000 .text

Integridad de la dll ncobjapi.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          9E2D4FA508F2DAA21157809435C5ED9F77337685D5D413D429448A48E4E9C9BE       C:\Windows\System32\ncobjapi.dll             


Detalles sobre el fichero dll ncobjapi.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\ncobjapi.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : ncobjapi.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\ncobjapi.dll
                    InternalName:     NCObjAPI
                    OriginalFilename: NCObjAPI.DLL
                    FileVersion:      10.0.19041.610 (WinBuild.160101.0800)
                    FileDescription:  
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.610
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : ncobjapi
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_10.0.19041.610_none_9767ba037e54fbb4\ncobja
                    pi.dll}
LinkType          : HardLink
Name              : ncobjapi.dll
Length            : 75264
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\ncobjapi.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:41:54
CreationTimeUtc   : 29/11/2020 10:41:54
LastAccessTime    : 03/12/2020 13:33:56
LastAccessTimeUtc : 03/12/2020 12:33:56
LastWriteTime     : 29/11/2020 11:41:54
LastWriteTimeUtc  : 29/11/2020 10:41:54
Attributes        : Archive



Procesos que utilizan la dll ncobjapi.dll