¿Para qué sirve la dll offlinesam.dll?

Windows

Dependencias de la dll offlinesam.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\offlinesam.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    ntdll.dll
    RPCRT4.dll
    bcrypt.dll
    offlinelsa.dll
    CRYPTBASE.dll
    api-ms-win-core-heap-obsolete-l1-1-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-core-libraryloader-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-security-cryptoapi-l1-1-0.dll

  Summary

        1000 .data
        2000 .pdata
        6000 .rdata
        1000 .reloc
       18000 .rsrc
       1E000 .text

Funciones que tiene la dll offlinesam.dll


1    0 00010770 SamOfflineAddMemberToAlias
2    1 000112D0 SamOfflineCloseHandle
3    2 0000F9D0 SamOfflineConnect
4    3 0000FBC0 SamOfflineConnectExternal
5    4 0000FAE0 SamOfflineConnectForInstaller
6    5 000102D0 SamOfflineCreateAliasInDomain
7    6 00010E10 SamOfflineCreateUserInDomain
8    7 00010610 SamOfflineDeleteAlias
9    8 00011130 SamOfflineDeleteUser
10    9 00010A60 SamOfflineEnumerateAliasesInDomain
11    A 0000FD20 SamOfflineEnumerateDomainsInSamServer
12    B 00010BA0 SamOfflineEnumerateUsersInDomain2
13    C 00011440 SamOfflineFreeMemory
14    D 00010960 SamOfflineGetMembersInAlias
15    E 0000FE50 SamOfflineLookupDomainInSamServer
16    F 00010080 SamOfflineLookupNamesInDomain
17   10 000101B0 SamOfflineOpenAlias
18   11 0000FF50 SamOfflineOpenDomain
19   12 00010CF0 SamOfflineOpenUser
20   13 00010420 SamOfflineQueryInformationAlias
21   14 00010F50 SamOfflineQueryInformationUser
22   15 00010880 SamOfflineRemoveMemberFromAlias
23   16 00011220 SamOfflineRidToSid
24   17 00010510 SamOfflineSetInformationAlias
25   18 00011040 SamOfflineSetInformationUser

Información avanzada sobre funciones que tiene la dll offlinesam.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\offlinesam.dll

File Type: DLL

  Section contains the following exports for offlinesam.dll

    00000000 characteristics
    67A37D27 time date stamp
        0.00 version
           1 ordinal base
          25 number of functions
          25 number of names

    ordinal hint RVA      name

          1    0 00010770 SamOfflineAddMemberToAlias
          2    1 000112D0 SamOfflineCloseHandle
          3    2 0000F9D0 SamOfflineConnect
          4    3 0000FBC0 SamOfflineConnectExternal
          5    4 0000FAE0 SamOfflineConnectForInstaller
          6    5 000102D0 SamOfflineCreateAliasInDomain
          7    6 00010E10 SamOfflineCreateUserInDomain
          8    7 00010610 SamOfflineDeleteAlias
          9    8 00011130 SamOfflineDeleteUser
         10    9 00010A60 SamOfflineEnumerateAliasesInDomain
         11    A 0000FD20 SamOfflineEnumerateDomainsInSamServer
         12    B 00010BA0 SamOfflineEnumerateUsersInDomain2
         13    C 00011440 SamOfflineFreeMemory
         14    D 00010960 SamOfflineGetMembersInAlias
         15    E 0000FE50 SamOfflineLookupDomainInSamServer
         16    F 00010080 SamOfflineLookupNamesInDomain
         17   10 000101B0 SamOfflineOpenAlias
         18   11 0000FF50 SamOfflineOpenDomain
         19   12 00010CF0 SamOfflineOpenUser
         20   13 00010420 SamOfflineQueryInformationAlias
         21   14 00010F50 SamOfflineQueryInformationUser
         22   15 00010880 SamOfflineRemoveMemberFromAlias
         23   16 00011220 SamOfflineRidToSid
         24   17 00010510 SamOfflineSetInformationAlias
         25   18 00011040 SamOfflineSetInformationUser

  Summary

        1000 .data
        2000 .pdata
        6000 .rdata
        1000 .reloc
       18000 .rsrc
       1E000 .text

Integridad de la dll offlinesam.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          790339DA371BCCC94372D13597E3333BFED708CDEA09BE556568241925FBA9B4       C:\Windows\System32\offlinesam.dll           


Detalles sobre el fichero dll offlinesam.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\offlinesam.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : offlinesam.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\offlinesam.dll
                    InternalName:     offlinesam.dll
                    OriginalFilename: offlinesam.dll
                    FileVersion:      10.0.19041.630 (WinBuild.160101.0800)
                    FileDescription:  Windows
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.630
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : offlinesam
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-directory-services-sam_31bf3856ad364e35_10.0.19041.630_none_8fec7073f
                    fc12207\offlinesam.dll}
LinkType          : HardLink
Name              : offlinesam.dll
Length            : 260920
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\offlinesam.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:42:37
CreationTimeUtc   : 29/11/2020 10:42:37
LastAccessTime    : 03/12/2020 13:54:40
LastAccessTimeUtc : 03/12/2020 12:54:40
LastWriteTime     : 29/11/2020 11:42:37
LastWriteTimeUtc  : 29/11/2020 10:42:37
Attributes        : Archive



Procesos que utilizan la dll offlinesam.dll