¿Para qué sirve la dll ntmarta.dll?

Proveedor MARTA de Windows NT

Dependencias de la dll ntmarta.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ntmarta.dll

File Type: DLL

  Image has the following dependencies:

    api-ms-win-crt-string-l1-1-0.dll
    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-file-l2-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-security-activedirectoryclient-l1-1-0.dll
    api-ms-win-core-job-l2-1-0.dll
    api-ms-win-core-url-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll

  Image has the following delay load dependencies:

    RPCRT4.dll
    api-ms-win-core-com-l1-1-0.dll
    WLDAP32.dll
    DSPARSE.dll
    srvcli.dll
    netutils.dll
    api-ms-win-service-management-l1-1-0.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    logoncli.dll
    api-ms-win-service-winsvc-l1-1-0.dll
    SAMLIB.dll
    api-ms-win-security-lsapolicy-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-0.dll
    api-ms-win-core-registry-l2-1-0.dll
    api-ms-win-eventlog-legacy-l1-1-0.dll
    api-ms-win-security-trustee-l1-1-0.dll
    ext-ms-win-rtcore-ntuser-usersecurity-l1-1-0.dll
    ext-ms-win-ntuser-windowstation-l1-1-0.dll
    ext-ms-win-printer-winspool-l1-1-0.dll
    ext-ms-win-printer-winspool-core-l1-1-0.dll

  Summary

        2000 .data
        1000 .didat
        2000 .pdata
        8000 .rdata
        1000 .reloc
        1000 .rsrc
       22000 .text
        1000 ERRATA

Funciones que tiene la dll ntmarta.dll


3    0 000128A0 AccConvertAccessMaskToActrlAccess
4    1 00012A20 AccConvertAccessToSD
5    2 00012BE0 AccConvertAccessToSecurityDescriptor
6    3 00012D40 AccConvertAclToAccess
7    4 00012DE0 AccConvertSDToAccess
8    5 000210C0 AccFreeIndexArray
9    6 000130C0 AccGetAccessForTrustee
10    7 000131B0 AccGetExplicitEntries
11    8 000211F0 AccGetInheritanceSource
12    9 00013280 AccLookupAccountName
13    A 00013600 AccLookupAccountSid
14    B 00013A40 AccLookupAccountTrustee
15    C 0001B5E0 AccProvCancelOperation
16    D 0001B670 AccProvGetAccessInfoPerObjectType
17    E 0001B720 AccProvGetAllRights
18    F 00006480 AccProvGetCapabilities
19   10 0001B930 AccProvGetOperationResults
20   11 0001BAB0 AccProvGetTrusteesAccess
21   12 0001BBD0 AccProvGrantAccessRights
22   13 0001BD60 AccProvHandleGetAccessInfoPerObjectType
23   14 0001BE60 AccProvHandleGetAllRights
24   15 0001C000 AccProvHandleGetTrusteesAccess
1   16 0001AF60 AccProvHandleGrantAccessRights
25   17 0001C080 AccProvHandleIsAccessAudited
26   18 0001C120 AccProvHandleIsObjectAccessible
27   19 0001C290 AccProvHandleRevokeAccessRights
28   1A 0001C370 AccProvHandleRevokeAuditRights
29   1B 0001C450 AccProvHandleSetAccessRights
30   1C 0001C550 AccProvIsAccessAudited
31   1D 0001C680 AccProvIsObjectAccessible
32   1E 0001CB30 AccProvRevokeAccessRights
33   1F 0001CC80 AccProvRevokeAuditRights
34   20 0001CDD0 AccProvSetAccessRights
35   21 000191E0 AccRewriteGetExplicitEntriesFromAcl
36   22 00002EA0 AccRewriteGetHandleRights
37   23 00021890 AccRewriteGetNamedRights
38   24 00004180 AccRewriteSetEntriesInAcl
39   25 000022A0 AccRewriteSetHandleRights
40   26 000024B0 AccRewriteSetNamedRights
41   27 00013B60 AccSetEntriesInAList
42   28 000011D0 AccTreeResetNamedSecurityInfo
43   29 0000BAA0 EventGuidToName
44   2A 0000BB40 EventNameFree
45   2B 00011D10 GetExplicitEntriesFromAclW
2   2C 00005E60 GetMartaExtensionInterface
46   2D 00003000 GetNamedSecurityInfoW
47   2E 00002DF0 GetSecurityInfo
48   2F 00004170 SetEntriesInAclW
49   30 00002180 SetNamedSecurityInfoW
50   31 00002210 SetSecurityInfo

Información avanzada sobre funciones que tiene la dll ntmarta.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\ntmarta.dll

File Type: DLL

  Section contains the following exports for NTMARTA.dll

    00000000 characteristics
    3D60AD04 time date stamp
        0.00 version
           1 ordinal base
          50 number of functions
          50 number of names

    ordinal hint RVA      name

          3    0 000128A0 AccConvertAccessMaskToActrlAccess
          4    1 00012A20 AccConvertAccessToSD
          5    2 00012BE0 AccConvertAccessToSecurityDescriptor
          6    3 00012D40 AccConvertAclToAccess
          7    4 00012DE0 AccConvertSDToAccess
          8    5 000210C0 AccFreeIndexArray
          9    6 000130C0 AccGetAccessForTrustee
         10    7 000131B0 AccGetExplicitEntries
         11    8 000211F0 AccGetInheritanceSource
         12    9 00013280 AccLookupAccountName
         13    A 00013600 AccLookupAccountSid
         14    B 00013A40 AccLookupAccountTrustee
         15    C 0001B5E0 AccProvCancelOperation
         16    D 0001B670 AccProvGetAccessInfoPerObjectType
         17    E 0001B720 AccProvGetAllRights
         18    F 00006480 AccProvGetCapabilities
         19   10 0001B930 AccProvGetOperationResults
         20   11 0001BAB0 AccProvGetTrusteesAccess
         21   12 0001BBD0 AccProvGrantAccessRights
         22   13 0001BD60 AccProvHandleGetAccessInfoPerObjectType
         23   14 0001BE60 AccProvHandleGetAllRights
         24   15 0001C000 AccProvHandleGetTrusteesAccess
          1   16 0001AF60 AccProvHandleGrantAccessRights
         25   17 0001C080 AccProvHandleIsAccessAudited
         26   18 0001C120 AccProvHandleIsObjectAccessible
         27   19 0001C290 AccProvHandleRevokeAccessRights
         28   1A 0001C370 AccProvHandleRevokeAuditRights
         29   1B 0001C450 AccProvHandleSetAccessRights
         30   1C 0001C550 AccProvIsAccessAudited
         31   1D 0001C680 AccProvIsObjectAccessible
         32   1E 0001CB30 AccProvRevokeAccessRights
         33   1F 0001CC80 AccProvRevokeAuditRights
         34   20 0001CDD0 AccProvSetAccessRights
         35   21 000191E0 AccRewriteGetExplicitEntriesFromAcl
         36   22 00002EA0 AccRewriteGetHandleRights
         37   23 00021890 AccRewriteGetNamedRights
         38   24 00004180 AccRewriteSetEntriesInAcl
         39   25 000022A0 AccRewriteSetHandleRights
         40   26 000024B0 AccRewriteSetNamedRights
         41   27 00013B60 AccSetEntriesInAList
         42   28 000011D0 AccTreeResetNamedSecurityInfo
         43   29 0000BAA0 EventGuidToName
         44   2A 0000BB40 EventNameFree
         45   2B 00011D10 GetExplicitEntriesFromAclW
          2   2C 00005E60 GetMartaExtensionInterface
         46   2D 00003000 GetNamedSecurityInfoW
         47   2E 00002DF0 GetSecurityInfo
         48   2F 00004170 SetEntriesInAclW
         49   30 00002180 SetNamedSecurityInfoW
         50   31 00002210 SetSecurityInfo

  Summary

        2000 .data
        1000 .didat
        2000 .pdata
        8000 .rdata
        1000 .reloc
        1000 .rsrc
       22000 .text
        1000 ERRATA

Integridad de la dll ntmarta.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          B2EB064F3D70F08152E1845FBEEF64BE204FA44FA56D2E58A645E15DB5505011       C:\Windows\System32\ntmarta.dll              


Detalles sobre el fichero dll ntmarta.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\ntmarta.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : ntmarta.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\ntmarta.dll
                    InternalName:     ntmarta.dll
                    OriginalFilename: ntmarta.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Proveedor MARTA de Windows NT
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : ntmarta
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-security-ntmarta_31bf3856ad364e35_10.0.19041.546_none_597fc8a7ee70e8c
                    9\ntmarta.dll}
LinkType          : HardLink
Name              : ntmarta.dll
Length            : 191656
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\ntmarta.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:44:15
CreationTimeUtc   : 21/11/2020 7:44:15
LastAccessTime    : 03/12/2020 13:51:14
LastAccessTimeUtc : 03/12/2020 12:51:14
LastWriteTime     : 21/11/2020 8:44:15
LastWriteTimeUtc  : 21/11/2020 7:44:15
Attributes        : Archive



Procesos que utilizan la dll ntmarta.dll


ApplicationFrameHost
chrome
chrome
chrome
conhost
Cortana
explorer
igfxEM
igfxHK
Microsoft.Photos
powershell_ise
powershell_ise
powershell_ise
RuntimeBroker
RuntimeBroker
SearchApp
ShellExperienceHost
sihost
SpeechRuntime
StartMenuExperienceHost
svchost
svchost
svchost
SystemSettings
TextInputHost
Video.UI
YourPhone