¿Para qué sirve la dll samsrv.dll?

DLL del servidor SAM

Dependencias de la dll samsrv.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\samsrv.dll

File Type: DLL

  Image has the following dependencies:

    api-ms-win-crt-string-l1-1-0.dll
    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-1.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    bcrypt.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-console-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-psapi-l1-1-0.dll
    api-ms-win-core-privateprofile-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    LSASRV.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-eventing-controller-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    CRYPT32.dll
    api-ms-win-core-string-obsolete-l1-1-0.dll

  Image has the following delay load dependencies:

    NETLOGON.dll
    api-ms-win-security-sddl-l1-1-0.dll
    RPCRT4.dll
    cryptdll.dll
    api-ms-win-security-sddl-ansi-l1-1-0.dll
    api-ms-win-security-lsapolicy-l1-1-0.dll
    DNSAPI.dll
    api-ms-win-core-registry-l2-1-0.dll
    WS2_32.dll
    api-ms-win-security-systemfunctions-l1-1-0.dll
    CRYPTBASE.dll
    api-ms-win-service-management-l1-1-0.dll
    DSPARSE.dll
    setupcl.dll
    CRYPTSP.dll

  Summary

        6000 .data
        1000 .didat
        6000 .pdata
       2C000 .rdata
        2000 .reloc
        A000 .rsrc
       95000 .text

Funciones que tiene la dll samsrv.dll


1    0 0000D500 RtlDeleteElementGenericTable2
2    1 00022270 RtlInitializeGenericTable2
3    2 00002CB0 RtlInsertElementGenericTable2
4    3 00003BE0 RtlLookupElementGenericTable2
5    4 00009830 SAM_MIDL_user_allocate
6    5 0000F150 SAM_MIDL_user_free
7    6 00009830 SamDsExtAlloc
8    7 0000F150 SamDsExtFree
9    8 0002C5A0 SamIAccountRestrictions
10    9 00019FA0 SamIAddDSNameToAlias
11    A 00082690 SamIChangePasswordForeignUser
12    B 00065A10 SamIClaimIsValid
13    C 0002EDE0 SamIConnect
14    D 00065AD0 SamIConvertSecurityAttributesToClaimsBlob
15    E 0008A950 SamICopyCurrentDomainAccountSettings
16    F 0006CEA0 SamICreateKrbTgt
17   10 00065D40 SamIDecodeClaimsBlob
18   11 00065D90 SamIDecodeClaimsBlobIntoClaimsSet
19   12 00055D00 SamIDecodeClaimsBlobToAuthz
20   13 000749C0 SamIDemote
21   14 00074A60 SamIDemoteUndo
22   15 00069670 SamIDoFSMORoleChange
23   16 00055D50 SamIFreeAuthzSecurityAttributesInfo
24   17 0001F9C0 SamIFreeClaimsBlob
25   18 00065E10 SamIFreeDecodedClaimsSet
26   19 0007B9F0 SamIFreeLookupNamesInfo
27   1A 0007BB30 SamIFreeLookupSidsInfo
28   1B 0008A970 SamIFreeOidList
29   1C 0000EFA0 SamIFreeRealmList
30   1D 00065ED0 SamIFreeSecurityAttributesInfo
31   1E 0000EBF0 SamIFreeSidAndAttributesList
32   1F 0000ECF0 SamIFreeSidArray
33   20 0000F150 SamIFreeVoid
34   21 0007BD00 SamIFree_SAMPR_DISPLAY_INFO_BUFFER
35   22 000222A0 SamIFree_SAMPR_DOMAIN_INFO_BUFFER
36   23 0002A9A0 SamIFree_SAMPR_ENUMERATION_BUFFER
37   24 0007BD40 SamIFree_SAMPR_GET_GROUPS_BUFFER
38   25 0000EFF0 SamIFree_SAMPR_RETURNED_USTRING_ARRAY
39   26 0000EF50 SamIFree_SAMPR_ULONG_ARRAY
40   27 0000EE30 SamIFree_SAMPR_USER_INFO_BUFFER
41   28 0002D220 SamIFree_UserInternal6Information
42   29 00006420 SamIGetAliasMembership
43   2A 0008A9B0 SamIGetConfigurationOidList
44   2B 0008BBE0 SamIGetDefaultAdministratorName
45   2C 00003E30 SamIGetResourceGroupMembershipsTransitive
46   2D 00013DA0 SamIGetResourceGroupMembershipsTransitive2
47   2E 0008AAA0 SamIGetUserLogonInformation
48   2F 0002C940 SamIGetUserLogonInformation2
49   30 0001FD30 SamIGetUserLogonInformation3
50   31 00020760 SamIGetUserLogonInformationEx
51   32 00015560 SamIHandleObjectUpdate
52   33 00021220 SamIImpersonateNullSession
53   34 000245B0 SamIInitialize
54   35 0007FEE0 SamIIsDownlevelDcUpgrade
55   36 0006F180 SamIIsExtendedSidMode
56   37 0007FEF0 SamIIsRebootAfterPromotion
57   38 0002F0C0 SamIIsSetupInProgress
58   39 00074A90 SamILoadDownlevelDatabase
59   3A 000696B0 SamILookupNamesBySid
60   3B 00005FF0 SamILookupNamesInDomain
61   3C 000699A0 SamILookupSidsByName
62   3D 0001F510 SamILoopbackConnect
63   3E 00021930 SamIMixedDomain
64   3F 00020610 SamIMixedDomain2
65   40 000223A0 SamINT4UpgradeInProgress
66   41 00013BA0 SamINetLogonPing
67   42 00069C80 SamINotifyRoleChange
68   43 00082AA0 SamIOpenUserByAlternateId
69   44 00011230 SamIPromote
70   45 00074C90 SamIPromoteUndo
71   46 0008AAF0 SamIPurgeSecrets
72   47 0008ABD0 SamIQueryAccountSecretsCachability
73   48 000145B0 SamIQueryCapabilities
74   49 0002ECA0 SamIQueryRealmList
75   4A 0001FDB0 SamIQueryServerRole
76   4B 00021B20 SamIQueryServerRole2
77   4C 000721C0 SamIRandomizeStoredPassword
78   4D 00072870 SamIRandomizeStoredPasswordWithoutExpirationCheck
79   4E 00052290 SamIRemoveDSNameFromAlias
80   4F 00074CB0 SamIReplaceDownlevelDatabase
81   50 0008BCD0 SamIReplicateAccountData
82   51 000728B0 SamIResetBadPwdCountOnPdc
83   52 00014500 SamIRetrieveMultiplePrimaryCredentials
84   53 000678E0 SamIRetrieveNGCKeyCredential
85   54 00067980 SamIRetrievePrimaryCredentials
86   55 00020C60 SamIRevertNullSession
87   56 00014050 SamIScorePassword
88   57 0008BE10 SamISetAuditingInformation
89   58 00082B80 SamISetMachinePassword
90   59 00082C00 SamISetPasswordForeignUser2
91   5A 00082C40 SamISetPasswordForeignUser3
92   5B 00072900 SamISetPasswordInfoOnDc
93   5C 000679E0 SamIStorePrimaryCredentials
94   5D 00065F20 SamITransformClaims
95   5E 00013F70 SamIUPNFromUserHandle
96   5F 00075060 SamIUnLoadDownlevelDatabase
97   60 0007BD80 SamIUninitialize
98   61 00028390 SamIUpdateLogonStatistics
99   62 0008BE80 SamIValidateAccountName
100   63 00012E10 SamIValidateNewAccountName
101   64 0001F150 SampAccountControlToFlags
102   65 00009920 SampAcquireReadLock
103   66 00012090 SampAcquireSamLockExclusive
104   67 00028250 SampAcquireWriteLock
105   68 0001AE70 SampAddAccountToGroupMembers
106   69 000750F0 SampAddAccountsAndApplyMemberships
107   6A 000044C0 SampAddDeltaTime
108   6B 00075380 SampAddNonLocalDomainRelativeMemberships
109   6C 0001A610 SampAddSameDomainMemberToGlobalOrUniversalGroup
110   6D 0006F350 SampAddUserToGroup
111   6E 00021240 SampAlInvalidateAliasInformation
112   6F 0008BED0 SampAllocateNextCurrentRidFromIndex
113   70 000228C0 SampApplyDomainUpdatesForAllDomains
114   71 00083230 SampAssignPrimaryGroup
115   72 0001F060 SampAuditAccountEnableDisableChange
116   73 00079090 SampAuditAccountNameChange
117   74 0000E870 SampAuditAnyEvent
118   75 000797A0 SampAuditGroupTypeChange
119   76 00079AF0 SampAuditSidHistory
120   77 0001D890 SampBuildDsNameFromSid
121   78 0002B710 SampBuildSamProtection
122   79 00014980 SampCalculateLmAndNtOwfPasswords
123   7A 00052440 SampChangeAliasAccountName
124   7B 0006F410 SampChangeGroupAccountName
125   7C 00083D40 SampChangeUserAccountName
126   7D 000840C0 SampCheckForAccountLockout
127   7E 00020B70 SampCheckGroupTypeBits
128   7F 00010840 SampCheckSidType
129   80 0001F350 SampCommitBufferedWrites
130   81 0001DB80 SampCompareDisplayStrings
131   82 00084570 SampComputePasswordExpired
132   83 00006940 SampConnect
133   84 0008C6D0 SampConvertUiListToApiList
134   85 0001D660 SampCopyUserSupplementalCredentialsForDCPromo
135   86 00005270 SampCreateAccountContext2
136   87 00013680 SampCreateAliasInDomain
137   88 000056D0 SampCreateContextEx
138   89 000124F0 SampCreateDefaultUPN
139   8A 0000C210 SampCreateFullSid
140   8B 000128D0 SampCreateGroupInDomain
141   8C 00018720 SampCreateUserInDomain
142   8D 00003B00 SampCurrentThreadOwnsLock
143   8E 00008A80 SampDeReferenceContext
144   8F 000145E0 SampDecrementActiveThreads
145   90 0001FC00 SampDecryptCredentialData
146   91 00005D60 SampDeleteContext
147   92 00076D10 SampDeleteDsDirsToDeleteKey
148   93 00076DD0 SampDeleteKeyForPostBootPromote
149   94 0001E8A0 SampDeltaChangeNotify
150   95 00084D90 SampDsChangePasswordUser
151   96 0001C020 SampDsConvertReadAttrBlock
152   97 0000E1C0 SampDsGetPrimaryDomainStart
153   98 0001D220 SampDsInitializeSingleDomain
154   99 00024E20 SampDsIsRunning
155   9A 0001BE20 SampDsMakeAttrBlock
156   9B 00010B00 SampDsSetBuiltinDomainPolicy
157   9C 00010C20 SampDsSetDomainPolicy
158   9D 00014AF0 SampDsSetPasswordUser
159   9E 0001B4D0 SampDsUpdateContextAttributes
160   9F 000680C0 SampDuplicateGroupInfo
161   A0 000680C0 SampDuplicateMachineInfo
162   A1 00068170 SampDuplicateOemGroupInfo
163   A2 00068170 SampDuplicateOemUserInfo
164   A3 00014FE0 SampDuplicateUnicodeString
165   A4 000681D0 SampDuplicateUserInfo
166   A5 00017D80 SampEncryptCredentialData
167   A6 00028930 SampExamineSid
168   A7 00022360 SampExtendDefinedDomains
169   A8 00015670 SampFlagsToAccountControl
170   A9 00068340 SampFreeGroupInfo
171   AA 00068340 SampFreeMachineInfo
172   AB 00068370 SampFreeOemGroupInfo
173   AC 00068370 SampFreeOemUserInfo
174   AD 000035D0 SampFreeUnicodeString
175   AE 000683A0 SampFreeUserInfo
176   AF 000775E0 SampGenerateRandomPassword
177   B0 00055A90 SampGetAccessAttribute
178   B1 0002C4E0 SampGetAccountDomainInfo
179   B2 00020A70 SampGetBehaviorVersion
180   B3 000213D0 SampGetCurrentOwnerAndPrimaryGroup
181   B4 0008CDA0 SampGetDisableOutboundRSO
182   B5 0008CDB0 SampGetDisableRSOOnPDCForward
183   B6 0008CDC0 SampGetDisableResetBadPwdCountForward
184   B7 0008CDD0 SampGetDisableSingleObjectRepl
185   B8 000205B0 SampGetDnsDomainNameFromIndex
186   B9 0001FE60 SampGetDomainContextFromIndex
187   BA 0008CDE0 SampGetDomainObjectFromAccountContext
188   BB 000221C0 SampGetDomainObjectFromIndex
189   BC 0008CE10 SampGetDomainServerRoleFromIndex
190   BD 0001F030 SampGetDomainSidFromAccountContext
191   BE 000218E0 SampGetDomainSidFromIndex
192   BF 000116D0 SampGetDomainSidListForSam
193   C0 00022370 SampGetDomainUpgradeTasks
194   C1 000205E0 SampGetDownLevelDomainControllersPresent
195   C2 0000C7B0 SampGetExtendedAttribute
196   C3 0008CE30 SampGetExternalNameFromIndex
197   C4 0002BBF0 SampGetFixedAttributes
198   C5 0008CE50 SampGetHasNeverTime
199   C6 0008CE60 SampGetIgnoreGCFailures
200   C7 0001FDA0 SampGetLogLevel
201   C8 000223A0 SampGetNT4UpgradeInProgress
202   C9 0007D6F0 SampGetNewAccountSecurityNt4
203   CA 0008CE70 SampGetNextUnmodifiedRidFromIndex
204   CB 0008CE90 SampGetNoGcLogonEnforceKerberosIpCheck
205   CC 0008CEA0 SampGetNoGcLogonEnforceNTLMCheck
206   CD 0002DE30 SampGetObjectSD
207   CE 0001FE40 SampGetObjectTypeNameFromIndex
208   CF 000854F0 SampGetPasswordMustChangeWithUF_UAC
209   D0 0000A290 SampGetReverseMembershipTransitive
210   D1 00020600 SampGetSamSubsystemName
211   D2 0006A140 SampGetSerialNumberDomain2
212   D3 00022390 SampGetServerObjectName
213   D4 0000DBB0 SampGetSidArrayAttribute
214   D5 0002BB30 SampGetSidAttribute
215   D6 00020B00 SampGetSuccessAccountAuditingEnabled
216   D7 00021D70 SampGetUlongArrayAttribute
217   D8 00007DA0 SampGetUnicodeStringAttribute
218   D9 00085620 SampGetUserAccountControlComputed
219   DA 0000A200 SampGetUserAccountSettings
220   DB 0008CEB0 SampGetWillNeverTime
221   DC 0000B690 SampImpersonateClient
222   DD 00072AA0 SampIncreaseBadPwdCountLoopback
223   DE 000041C0 SampIncrementActiveThreads
224   DF 0008CEC0 SampIncrementNetlogonChangeLogSerialNumber
225   E0 00021960 SampInvalidateDomainCache
226   E1 00020740 SampIsAccountBuiltIn
227   E2 0001FD00 SampIsAuditingEnabled
228   E3 0001FCE0 SampIsBuiltinDomain
229   E4 0001E030 SampIsDomainHosted
230   E5 0008CF80 SampIsServiceRunning
231   E6 00026E70 SampIsSetupInProgress
232   E7 00071C50 SampLogPrint
233   E8 00006C90 SampLookupContext
234   E9 0001C460 SampMarkPerAttributeInvalidFromWhichFields
235   EA 00009850 SampNeedUserAccountSettingsDuringQuery
236   EB 0001D910 SampNetLogonNotificationRequired
237   EC 0001E3D0 SampNotifyAuditChange
238   ED 00011F30 SampNotifyReplicatedInChange
239   EE 0001F920 SampPasswordChangeNotify
240   EF 0001E100 SampPasswordChangeNotifyWorker
241   F0 0008D1D0 SampPositionOfHighestBit
242   F1 00014600 SampQueryCapabilities
243   F2 00006D30 SampQueryInformationUserInternal
244   F3 0001FA90 SampQueryUserSupplementalCredentialsRegistry
245   F4 0000CAD0 SampReadExtendedAttributes
246   F5 00081BF0 SampRecordSystemSchemaVerisonInRegistry
247   F6 0001F2C0 SampReferenceContext
248   F7 0001CAF0 SampRegObjToDsObj
249   F8 0000AE30 SampReleaseReadLock
250   F9 00011EF0 SampReleaseSamLockExclusive
251   FA 000290F0 SampReleaseWriteLock
252   FB 0006F8F0 SampRemoveAccountFromGroupMembers
253   FC 0006FB20 SampRemoveSameDomainMemberFromGlobalOrUniversalGroup
254   FD 0006FBE0 SampRemoveUserFromGroup
255   FE 00010FF0 SampRenameKrbtgtAccount
256   FF 000860C0 SampReplaceUserLogonHours
257  100 00029830 SampReplaceUserV1aFixed
258  101 00020460 SampRetrieveGroupV1Fixed
259  102 00015CD0 SampRetrieveMultipleCredentials
260  103 00009A40 SampRetrieveUserPasswords
261  104 000099C0 SampRetrieveUserV1aFixed
262  105 000025A0 SampRevertToSelf
263  106 00002680 SampRtlWellKnownPrivilegeCheck
264  107 0001CF10 SampSetAccessAttribute
265  108 00078740 SampSetAdminPassword
266  109 00014930 SampSetAttributeAccess
267  10A 000221F0 SampSetComputerObjectDsName
268  10B 0006D130 SampSetDSRMPasswordWorker
269  10C 000106D0 SampSetExtendedAttributeAccess
270  10D 000298B0 SampSetFixedAttributes
271  10E 000214F0 SampSetGlobalDsSids
272  10F 00078870 SampSetPassword
273  110 00073740 SampSetPasswordInfoOnPdcByHandle
274  111 000737D0 SampSetPasswordInfoOnPdcByIndex
275  112 0006B690 SampSetSerialNumberDomain2
276  113 00003A10 SampSetTransactionDomain
277  114 0008D920 SampSetTransactionWithinDomain
278  115 000190D0 SampSetUnicodeStringAttribute
279  116 000130C0 SampSetUserAccountControl
280  117 0002A600 SampSplitSid
281  118 00029B00 SampStoreObjectAttributes
282  119 0008DB20 SampStringFromGuid
283  11A 00009030 SampTraceEvent
284  11B 00009890 SampUpdateAccountDisabledFlag
285  11C 0000A030 SampUpdateComputedUserAccountControlBits
286  11D 0001F2D0 SampUpdateMixedModeAndFindDomain
287  11E 0000E4E0 SampUpdatePerformanceCounters
288  11F 00020BC0 SampUpgradeUserParmsActual
289  120 00023560 SampUsingDsData
290  121 00011650 SampValidateDomainCacheCallback
291  122 0007F4A0 SampValidateDomainControllerCreation
292  123 00014E10 SampValidatePwdSettingAttempt
293  124 0000B120 SampValidateRegAttributes
294  125 0002DF40 SampWriteEventLog
295  126 00013CB0 SampWriteGroupType
296  127 00027920 SamrAddMemberToAlias
297  128 0006FEA0 SamrAddMemberToGroup
298  129 00008360 SamrCloseHandle
299  12A 0006BAC0 SamrCreateUser2InDomain
300  12B 0006BC60 SamrCreateUserInDomain
301  12C 000535D0 SamrDeleteAlias
302  12D 00070030 SamrDeleteGroup
303  12E 000872D0 SamrDeleteUser
304  12F 0000EB00 SamrEnumerateUsersInDomain
305  130 0000EA00 SamrEnumerateUsersInDomain2
306  131 0002F200 SamrGetAliasMembership
307  132 0002F0D0 SamrGetGroupsForUser
308  133 0000E5D0 SamrGetMembersInAlias
309  134 0000C2E0 SamrLookupIdsInDomain
310  135 00002810 SamrLookupNamesInDomain
311  136 00003E00 SamrLookupNamesInDomain2
312  137 0000D000 SamrOpenAlias
313  138 00006BC0 SamrOpenDomain
314  139 000204E0 SamrOpenGroup
315  13A 0000BB80 SamrOpenUser
316  13B 00068B70 SamrQueryDisplayInformation
317  13C 00021750 SamrQueryInformationDomain
318  13D 0000C6F0 SamrQueryInformationUser
319  13E 0000C650 SamrQueryInformationUser2
320  13F 0000F580 SamrQuerySecurityObject
321  140 00053C90 SamrRemoveMemberFromAlias
322  141 000709E0 SamrRemoveMemberFromGroup
323  142 0000C130 SamrRidToSid
324  143 00054030 SamrSetInformationAlias
325  144 00070B70 SamrSetInformationGroup
326  145 00087E10 SamrSetInformationUser
327  146 0007E6B0 SamrSetSecurityObject
328  147 00011AB0 SamrValidatePassword

Información avanzada sobre funciones que tiene la dll samsrv.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\samsrv.dll

File Type: DLL

  Section contains the following exports for SAMSRV.dll

    00000000 characteristics
    8EACFC83 time date stamp
        0.00 version
           1 ordinal base
         328 number of functions
         328 number of names

    ordinal hint RVA      name

          1    0 0000D500 RtlDeleteElementGenericTable2
          2    1 00022270 RtlInitializeGenericTable2
          3    2 00002CB0 RtlInsertElementGenericTable2
          4    3 00003BE0 RtlLookupElementGenericTable2
          5    4 00009830 SAM_MIDL_user_allocate
          6    5 0000F150 SAM_MIDL_user_free
          7    6 00009830 SamDsExtAlloc
          8    7 0000F150 SamDsExtFree
          9    8 0002C5A0 SamIAccountRestrictions
         10    9 00019FA0 SamIAddDSNameToAlias
         11    A 00082690 SamIChangePasswordForeignUser
         12    B 00065A10 SamIClaimIsValid
         13    C 0002EDE0 SamIConnect
         14    D 00065AD0 SamIConvertSecurityAttributesToClaimsBlob
         15    E 0008A950 SamICopyCurrentDomainAccountSettings
         16    F 0006CEA0 SamICreateKrbTgt
         17   10 00065D40 SamIDecodeClaimsBlob
         18   11 00065D90 SamIDecodeClaimsBlobIntoClaimsSet
         19   12 00055D00 SamIDecodeClaimsBlobToAuthz
         20   13 000749C0 SamIDemote
         21   14 00074A60 SamIDemoteUndo
         22   15 00069670 SamIDoFSMORoleChange
         23   16 00055D50 SamIFreeAuthzSecurityAttributesInfo
         24   17 0001F9C0 SamIFreeClaimsBlob
         25   18 00065E10 SamIFreeDecodedClaimsSet
         26   19 0007B9F0 SamIFreeLookupNamesInfo
         27   1A 0007BB30 SamIFreeLookupSidsInfo
         28   1B 0008A970 SamIFreeOidList
         29   1C 0000EFA0 SamIFreeRealmList
         30   1D 00065ED0 SamIFreeSecurityAttributesInfo
         31   1E 0000EBF0 SamIFreeSidAndAttributesList
         32   1F 0000ECF0 SamIFreeSidArray
         33   20 0000F150 SamIFreeVoid
         34   21 0007BD00 SamIFree_SAMPR_DISPLAY_INFO_BUFFER
         35   22 000222A0 SamIFree_SAMPR_DOMAIN_INFO_BUFFER
         36   23 0002A9A0 SamIFree_SAMPR_ENUMERATION_BUFFER
         37   24 0007BD40 SamIFree_SAMPR_GET_GROUPS_BUFFER
         38   25 0000EFF0 SamIFree_SAMPR_RETURNED_USTRING_ARRAY
         39   26 0000EF50 SamIFree_SAMPR_ULONG_ARRAY
         40   27 0000EE30 SamIFree_SAMPR_USER_INFO_BUFFER
         41   28 0002D220 SamIFree_UserInternal6Information
         42   29 00006420 SamIGetAliasMembership
         43   2A 0008A9B0 SamIGetConfigurationOidList
         44   2B 0008BBE0 SamIGetDefaultAdministratorName
         45   2C 00003E30 SamIGetResourceGroupMembershipsTransitive
         46   2D 00013DA0 SamIGetResourceGroupMembershipsTransitive2
         47   2E 0008AAA0 SamIGetUserLogonInformation
         48   2F 0002C940 SamIGetUserLogonInformation2
         49   30 0001FD30 SamIGetUserLogonInformation3
         50   31 00020760 SamIGetUserLogonInformationEx
         51   32 00015560 SamIHandleObjectUpdate
         52   33 00021220 SamIImpersonateNullSession
         53   34 000245B0 SamIInitialize
         54   35 0007FEE0 SamIIsDownlevelDcUpgrade
         55   36 0006F180 SamIIsExtendedSidMode
         56   37 0007FEF0 SamIIsRebootAfterPromotion
         57   38 0002F0C0 SamIIsSetupInProgress
         58   39 00074A90 SamILoadDownlevelDatabase
         59   3A 000696B0 SamILookupNamesBySid
         60   3B 00005FF0 SamILookupNamesInDomain
         61   3C 000699A0 SamILookupSidsByName
         62   3D 0001F510 SamILoopbackConnect
         63   3E 00021930 SamIMixedDomain
         64   3F 00020610 SamIMixedDomain2
         65   40 000223A0 SamINT4UpgradeInProgress
         66   41 00013BA0 SamINetLogonPing
         67   42 00069C80 SamINotifyRoleChange
         68   43 00082AA0 SamIOpenUserByAlternateId
         69   44 00011230 SamIPromote
         70   45 00074C90 SamIPromoteUndo
         71   46 0008AAF0 SamIPurgeSecrets
         72   47 0008ABD0 SamIQueryAccountSecretsCachability
         73   48 000145B0 SamIQueryCapabilities
         74   49 0002ECA0 SamIQueryRealmList
         75   4A 0001FDB0 SamIQueryServerRole
         76   4B 00021B20 SamIQueryServerRole2
         77   4C 000721C0 SamIRandomizeStoredPassword
         78   4D 00072870 SamIRandomizeStoredPasswordWithoutExpirationCheck
         79   4E 00052290 SamIRemoveDSNameFromAlias
         80   4F 00074CB0 SamIReplaceDownlevelDatabase
         81   50 0008BCD0 SamIReplicateAccountData
         82   51 000728B0 SamIResetBadPwdCountOnPdc
         83   52 00014500 SamIRetrieveMultiplePrimaryCredentials
         84   53 000678E0 SamIRetrieveNGCKeyCredential
         85   54 00067980 SamIRetrievePrimaryCredentials
         86   55 00020C60 SamIRevertNullSession
         87   56 00014050 SamIScorePassword
         88   57 0008BE10 SamISetAuditingInformation
         89   58 00082B80 SamISetMachinePassword
         90   59 00082C00 SamISetPasswordForeignUser2
         91   5A 00082C40 SamISetPasswordForeignUser3
         92   5B 00072900 SamISetPasswordInfoOnDc
         93   5C 000679E0 SamIStorePrimaryCredentials
         94   5D 00065F20 SamITransformClaims
         95   5E 00013F70 SamIUPNFromUserHandle
         96   5F 00075060 SamIUnLoadDownlevelDatabase
         97   60 0007BD80 SamIUninitialize
         98   61 00028390 SamIUpdateLogonStatistics
         99   62 0008BE80 SamIValidateAccountName
        100   63 00012E10 SamIValidateNewAccountName
        101   64 0001F150 SampAccountControlToFlags
        102   65 00009920 SampAcquireReadLock
        103   66 00012090 SampAcquireSamLockExclusive
        104   67 00028250 SampAcquireWriteLock
        105   68 0001AE70 SampAddAccountToGroupMembers
        106   69 000750F0 SampAddAccountsAndApplyMemberships
        107   6A 000044C0 SampAddDeltaTime
        108   6B 00075380 SampAddNonLocalDomainRelativeMemberships
        109   6C 0001A610 SampAddSameDomainMemberToGlobalOrUniversalGroup
        110   6D 0006F350 SampAddUserToGroup
        111   6E 00021240 SampAlInvalidateAliasInformation
        112   6F 0008BED0 SampAllocateNextCurrentRidFromIndex
        113   70 000228C0 SampApplyDomainUpdatesForAllDomains
        114   71 00083230 SampAssignPrimaryGroup
        115   72 0001F060 SampAuditAccountEnableDisableChange
        116   73 00079090 SampAuditAccountNameChange
        117   74 0000E870 SampAuditAnyEvent
        118   75 000797A0 SampAuditGroupTypeChange
        119   76 00079AF0 SampAuditSidHistory
        120   77 0001D890 SampBuildDsNameFromSid
        121   78 0002B710 SampBuildSamProtection
        122   79 00014980 SampCalculateLmAndNtOwfPasswords
        123   7A 00052440 SampChangeAliasAccountName
        124   7B 0006F410 SampChangeGroupAccountName
        125   7C 00083D40 SampChangeUserAccountName
        126   7D 000840C0 SampCheckForAccountLockout
        127   7E 00020B70 SampCheckGroupTypeBits
        128   7F 00010840 SampCheckSidType
        129   80 0001F350 SampCommitBufferedWrites
        130   81 0001DB80 SampCompareDisplayStrings
        131   82 00084570 SampComputePasswordExpired
        132   83 00006940 SampConnect
        133   84 0008C6D0 SampConvertUiListToApiList
        134   85 0001D660 SampCopyUserSupplementalCredentialsForDCPromo
        135   86 00005270 SampCreateAccountContext2
        136   87 00013680 SampCreateAliasInDomain
        137   88 000056D0 SampCreateContextEx
        138   89 000124F0 SampCreateDefaultUPN
        139   8A 0000C210 SampCreateFullSid
        140   8B 000128D0 SampCreateGroupInDomain
        141   8C 00018720 SampCreateUserInDomain
        142   8D 00003B00 SampCurrentThreadOwnsLock
        143   8E 00008A80 SampDeReferenceContext
        144   8F 000145E0 SampDecrementActiveThreads
        145   90 0001FC00 SampDecryptCredentialData
        146   91 00005D60 SampDeleteContext
        147   92 00076D10 SampDeleteDsDirsToDeleteKey
        148   93 00076DD0 SampDeleteKeyForPostBootPromote
        149   94 0001E8A0 SampDeltaChangeNotify
        150   95 00084D90 SampDsChangePasswordUser
        151   96 0001C020 SampDsConvertReadAttrBlock
        152   97 0000E1C0 SampDsGetPrimaryDomainStart
        153   98 0001D220 SampDsInitializeSingleDomain
        154   99 00024E20 SampDsIsRunning
        155   9A 0001BE20 SampDsMakeAttrBlock
        156   9B 00010B00 SampDsSetBuiltinDomainPolicy
        157   9C 00010C20 SampDsSetDomainPolicy
        158   9D 00014AF0 SampDsSetPasswordUser
        159   9E 0001B4D0 SampDsUpdateContextAttributes
        160   9F 000680C0 SampDuplicateGroupInfo
        161   A0 000680C0 SampDuplicateMachineInfo
        162   A1 00068170 SampDuplicateOemGroupInfo
        163   A2 00068170 SampDuplicateOemUserInfo
        164   A3 00014FE0 SampDuplicateUnicodeString
        165   A4 000681D0 SampDuplicateUserInfo
        166   A5 00017D80 SampEncryptCredentialData
        167   A6 00028930 SampExamineSid
        168   A7 00022360 SampExtendDefinedDomains
        169   A8 00015670 SampFlagsToAccountControl
        170   A9 00068340 SampFreeGroupInfo
        171   AA 00068340 SampFreeMachineInfo
        172   AB 00068370 SampFreeOemGroupInfo
        173   AC 00068370 SampFreeOemUserInfo
        174   AD 000035D0 SampFreeUnicodeString
        175   AE 000683A0 SampFreeUserInfo
        176   AF 000775E0 SampGenerateRandomPassword
        177   B0 00055A90 SampGetAccessAttribute
        178   B1 0002C4E0 SampGetAccountDomainInfo
        179   B2 00020A70 SampGetBehaviorVersion
        180   B3 000213D0 SampGetCurrentOwnerAndPrimaryGroup
        181   B4 0008CDA0 SampGetDisableOutboundRSO
        182   B5 0008CDB0 SampGetDisableRSOOnPDCForward
        183   B6 0008CDC0 SampGetDisableResetBadPwdCountForward
        184   B7 0008CDD0 SampGetDisableSingleObjectRepl
        185   B8 000205B0 SampGetDnsDomainNameFromIndex
        186   B9 0001FE60 SampGetDomainContextFromIndex
        187   BA 0008CDE0 SampGetDomainObjectFromAccountContext
        188   BB 000221C0 SampGetDomainObjectFromIndex
        189   BC 0008CE10 SampGetDomainServerRoleFromIndex
        190   BD 0001F030 SampGetDomainSidFromAccountContext
        191   BE 000218E0 SampGetDomainSidFromIndex
        192   BF 000116D0 SampGetDomainSidListForSam
        193   C0 00022370 SampGetDomainUpgradeTasks
        194   C1 000205E0 SampGetDownLevelDomainControllersPresent
        195   C2 0000C7B0 SampGetExtendedAttribute
        196   C3 0008CE30 SampGetExternalNameFromIndex
        197   C4 0002BBF0 SampGetFixedAttributes
        198   C5 0008CE50 SampGetHasNeverTime
        199   C6 0008CE60 SampGetIgnoreGCFailures
        200   C7 0001FDA0 SampGetLogLevel
        201   C8 000223A0 SampGetNT4UpgradeInProgress
        202   C9 0007D6F0 SampGetNewAccountSecurityNt4
        203   CA 0008CE70 SampGetNextUnmodifiedRidFromIndex
        204   CB 0008CE90 SampGetNoGcLogonEnforceKerberosIpCheck
        205   CC 0008CEA0 SampGetNoGcLogonEnforceNTLMCheck
        206   CD 0002DE30 SampGetObjectSD
        207   CE 0001FE40 SampGetObjectTypeNameFromIndex
        208   CF 000854F0 SampGetPasswordMustChangeWithUF_UAC
        209   D0 0000A290 SampGetReverseMembershipTransitive
        210   D1 00020600 SampGetSamSubsystemName
        211   D2 0006A140 SampGetSerialNumberDomain2
        212   D3 00022390 SampGetServerObjectName
        213   D4 0000DBB0 SampGetSidArrayAttribute
        214   D5 0002BB30 SampGetSidAttribute
        215   D6 00020B00 SampGetSuccessAccountAuditingEnabled
        216   D7 00021D70 SampGetUlongArrayAttribute
        217   D8 00007DA0 SampGetUnicodeStringAttribute
        218   D9 00085620 SampGetUserAccountControlComputed
        219   DA 0000A200 SampGetUserAccountSettings
        220   DB 0008CEB0 SampGetWillNeverTime
        221   DC 0000B690 SampImpersonateClient
        222   DD 00072AA0 SampIncreaseBadPwdCountLoopback
        223   DE 000041C0 SampIncrementActiveThreads
        224   DF 0008CEC0 SampIncrementNetlogonChangeLogSerialNumber
        225   E0 00021960 SampInvalidateDomainCache
        226   E1 00020740 SampIsAccountBuiltIn
        227   E2 0001FD00 SampIsAuditingEnabled
        228   E3 0001FCE0 SampIsBuiltinDomain
        229   E4 0001E030 SampIsDomainHosted
        230   E5 0008CF80 SampIsServiceRunning
        231   E6 00026E70 SampIsSetupInProgress
        232   E7 00071C50 SampLogPrint
        233   E8 00006C90 SampLookupContext
        234   E9 0001C460 SampMarkPerAttributeInvalidFromWhichFields
        235   EA 00009850 SampNeedUserAccountSettingsDuringQuery
        236   EB 0001D910 SampNetLogonNotificationRequired
        237   EC 0001E3D0 SampNotifyAuditChange
        238   ED 00011F30 SampNotifyReplicatedInChange
        239   EE 0001F920 SampPasswordChangeNotify
        240   EF 0001E100 SampPasswordChangeNotifyWorker
        241   F0 0008D1D0 SampPositionOfHighestBit
        242   F1 00014600 SampQueryCapabilities
        243   F2 00006D30 SampQueryInformationUserInternal
        244   F3 0001FA90 SampQueryUserSupplementalCredentialsRegistry
        245   F4 0000CAD0 SampReadExtendedAttributes
        246   F5 00081BF0 SampRecordSystemSchemaVerisonInRegistry
        247   F6 0001F2C0 SampReferenceContext
        248   F7 0001CAF0 SampRegObjToDsObj
        249   F8 0000AE30 SampReleaseReadLock
        250   F9 00011EF0 SampReleaseSamLockExclusive
        251   FA 000290F0 SampReleaseWriteLock
        252   FB 0006F8F0 SampRemoveAccountFromGroupMembers
        253   FC 0006FB20 SampRemoveSameDomainMemberFromGlobalOrUniversalGroup
        254   FD 0006FBE0 SampRemoveUserFromGroup
        255   FE 00010FF0 SampRenameKrbtgtAccount
        256   FF 000860C0 SampReplaceUserLogonHours
        257  100 00029830 SampReplaceUserV1aFixed
        258  101 00020460 SampRetrieveGroupV1Fixed
        259  102 00015CD0 SampRetrieveMultipleCredentials
        260  103 00009A40 SampRetrieveUserPasswords
        261  104 000099C0 SampRetrieveUserV1aFixed
        262  105 000025A0 SampRevertToSelf
        263  106 00002680 SampRtlWellKnownPrivilegeCheck
        264  107 0001CF10 SampSetAccessAttribute
        265  108 00078740 SampSetAdminPassword
        266  109 00014930 SampSetAttributeAccess
        267  10A 000221F0 SampSetComputerObjectDsName
        268  10B 0006D130 SampSetDSRMPasswordWorker
        269  10C 000106D0 SampSetExtendedAttributeAccess
        270  10D 000298B0 SampSetFixedAttributes
        271  10E 000214F0 SampSetGlobalDsSids
        272  10F 00078870 SampSetPassword
        273  110 00073740 SampSetPasswordInfoOnPdcByHandle
        274  111 000737D0 SampSetPasswordInfoOnPdcByIndex
        275  112 0006B690 SampSetSerialNumberDomain2
        276  113 00003A10 SampSetTransactionDomain
        277  114 0008D920 SampSetTransactionWithinDomain
        278  115 000190D0 SampSetUnicodeStringAttribute
        279  116 000130C0 SampSetUserAccountControl
        280  117 0002A600 SampSplitSid
        281  118 00029B00 SampStoreObjectAttributes
        282  119 0008DB20 SampStringFromGuid
        283  11A 00009030 SampTraceEvent
        284  11B 00009890 SampUpdateAccountDisabledFlag
        285  11C 0000A030 SampUpdateComputedUserAccountControlBits
        286  11D 0001F2D0 SampUpdateMixedModeAndFindDomain
        287  11E 0000E4E0 SampUpdatePerformanceCounters
        288  11F 00020BC0 SampUpgradeUserParmsActual
        289  120 00023560 SampUsingDsData
        290  121 00011650 SampValidateDomainCacheCallback
        291  122 0007F4A0 SampValidateDomainControllerCreation
        292  123 00014E10 SampValidatePwdSettingAttempt
        293  124 0000B120 SampValidateRegAttributes
        294  125 0002DF40 SampWriteEventLog
        295  126 00013CB0 SampWriteGroupType
        296  127 00027920 SamrAddMemberToAlias
        297  128 0006FEA0 SamrAddMemberToGroup
        298  129 00008360 SamrCloseHandle
        299  12A 0006BAC0 SamrCreateUser2InDomain
        300  12B 0006BC60 SamrCreateUserInDomain
        301  12C 000535D0 SamrDeleteAlias
        302  12D 00070030 SamrDeleteGroup
        303  12E 000872D0 SamrDeleteUser
        304  12F 0000EB00 SamrEnumerateUsersInDomain
        305  130 0000EA00 SamrEnumerateUsersInDomain2
        306  131 0002F200 SamrGetAliasMembership
        307  132 0002F0D0 SamrGetGroupsForUser
        308  133 0000E5D0 SamrGetMembersInAlias
        309  134 0000C2E0 SamrLookupIdsInDomain
        310  135 00002810 SamrLookupNamesInDomain
        311  136 00003E00 SamrLookupNamesInDomain2
        312  137 0000D000 SamrOpenAlias
        313  138 00006BC0 SamrOpenDomain
        314  139 000204E0 SamrOpenGroup
        315  13A 0000BB80 SamrOpenUser
        316  13B 00068B70 SamrQueryDisplayInformation
        317  13C 00021750 SamrQueryInformationDomain
        318  13D 0000C6F0 SamrQueryInformationUser
        319  13E 0000C650 SamrQueryInformationUser2
        320  13F 0000F580 SamrQuerySecurityObject
        321  140 00053C90 SamrRemoveMemberFromAlias
        322  141 000709E0 SamrRemoveMemberFromGroup
        323  142 0000C130 SamrRidToSid
        324  143 00054030 SamrSetInformationAlias
        325  144 00070B70 SamrSetInformationGroup
        326  145 00087E10 SamrSetInformationUser
        327  146 0007E6B0 SamrSetSecurityObject
        328  147 00011AB0 SamrValidatePassword

  Summary

        6000 .data
        1000 .didat
        6000 .pdata
       2C000 .rdata
        2000 .reloc
        A000 .rsrc
       95000 .text

Integridad de la dll samsrv.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          0769753C13A6BF5E8553723C54BCF351FB0E93C32D60CAA160809706450CB5E5       C:\Windows\System32\samsrv.dll               


Detalles sobre el fichero dll samsrv.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\samsrv.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : samsrv.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\samsrv.dll
                    InternalName:     samsrv.dll
                    OriginalFilename: samsrv.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  DLL del servidor SAM
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : samsrv
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-directory-services-sam_31bf3856ad364e35_10.0.19041.630_none_8fec7073f
                    fc12207\samsrv.dll}
LinkType          : HardLink
Name              : samsrv.dll
Length            : 866304
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\samsrv.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:42:37
CreationTimeUtc   : 29/11/2020 10:42:37
LastAccessTime    : 03/12/2020 14:49:23
LastAccessTimeUtc : 03/12/2020 13:49:23
LastWriteTime     : 29/11/2020 11:42:37
LastWriteTimeUtc  : 29/11/2020 10:42:37
Attributes        : Archive



Procesos que utilizan la dll samsrv.dll