¿Para qué sirve la dll WaaSMedicCapsule.dll?
WaasMedic Capsule ExeDependencias de la dll WaaSMedicCapsule.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\WaaSMedicCapsule.dll
File Type: DLL
Image has the following dependencies:
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-private-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-processenvironment-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
OLEAUT32.dll
api-ms-win-core-winrt-l1-1-0.dll
UpdatePolicy.dll
WINTRUST.dll
msvcp_win.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-path-l1-1-0.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-service-management-l1-1-0.dll
CRYPT32.dll
api-ms-win-core-timezone-l1-1-0.dll
ntdll.dll
api-ms-win-service-winsvc-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-libraryloader-l1-2-1.dll
api-ms-win-core-file-l2-1-2.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-shcore-stream-l1-1-0.dll
XmlLite.dll
api-ms-win-security-base-l1-1-0.dll
api-ms-win-security-lsalookup-l2-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-security-provider-l1-1-0.dll
api-ms-win-eventing-controller-l1-1-0.dll
ext-ms-win-wer-reporting-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
Summary
2000 .data
2000 .pdata
1D000 .rdata
1000 .reloc
1000 .rsrc
21000 .text
Funciones que tiene la dll WaaSMedicCapsule.dll
11 0 00004560 DllMain
1 1 00004630 EnumeratePlugins
2 2 00004B30 GetPluginDefaultSettings
3 3 00004AA0 GetSettingsName
4 4 000049A0 Plugin_DetectCondition
5 5 00004710 Plugin_Init
6 6 00004900 Plugin_IsActionApplicable
7 7 000047E0 Plugin_IsEnabled
8 8 00004870 Plugin_IsInteractiveOnly
9 9 00004A30 Plugin_PerformAction
10 A 00004740 Plugin_Uninit
Información avanzada sobre funciones que tiene la dll WaaSMedicCapsule.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\WaaSMedicCapsule.dll
File Type: DLL
Section contains the following exports for WaaSMedicCapsule.dll
00000000 characteristics
589439C9 time date stamp
0.00 version
1 ordinal base
11 number of functions
11 number of names
ordinal hint RVA name
11 0 00004560 DllMain
1 1 00004630 EnumeratePlugins
2 2 00004B30 GetPluginDefaultSettings
3 3 00004AA0 GetSettingsName
4 4 000049A0 Plugin_DetectCondition
5 5 00004710 Plugin_Init
6 6 00004900 Plugin_IsActionApplicable
7 7 000047E0 Plugin_IsEnabled
8 8 00004870 Plugin_IsInteractiveOnly
9 9 00004A30 Plugin_PerformAction
10 A 00004740 Plugin_Uninit
Summary
2000 .data
2000 .pdata
1D000 .rdata
1000 .reloc
1000 .rsrc
21000 .text
Integridad de la dll WaaSMedicCapsule.dll
Algorithm Hash Path
--------- ---- ----
SHA256 6E80B01AAA6018B3B38E5373D85A8FA7A1C6126D28D82DBD0EFFE97ED9F8A489 C:\Windows\System32\WaaSMedicCapsule.dll
Detalles sobre el fichero dll WaaSMedicCapsule.dll
PSPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\WaaSMedicCapsule.dll
PSParentPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName : WaaSMedicCapsule.dll
PSDrive : C
PSProvider : Microsoft.PowerShell.Core\FileSystem
PSIsContainer : False
Mode : -a----
VersionInfo : File: C:\Windows\System32\WaaSMedicCapsule.dll
InternalName: WaasMedicCapsule.dll
OriginalFilename: WaasMedicCapsule.dll
FileVersion: 10.0.19041.630 (WinBuild.160101.0800)
FileDescription: WaasMedic Capsule Exe
Product: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.630
Debug: False
Patched: False
PreRelease: False
PrivateBuild: False
SpecialBuild: False
Language: Inglés (Estados Unidos)
BaseName : WaaSMedicCapsule
Target : {C:\Windows\WinSxS\amd64_microsoft-windows-waasmedic_31bf3856ad364e35_10.0.19041.630_none_1151e2959ce6f42b\WaaSMedicCapsule.dll}
LinkType : HardLink
Name : WaaSMedicCapsule.dll
Length : 262656
DirectoryName : C:\Windows\System32
Directory : C:\Windows\System32
IsReadOnly : False
Exists : True
FullName : C:\Windows\System32\WaaSMedicCapsule.dll
Extension : .dll
CreationTime : 29/11/2020 11:42:16
CreationTimeUtc : 29/11/2020 10:42:16
LastAccessTime : 03/12/2020 16:36:41
LastAccessTimeUtc : 03/12/2020 15:36:41
LastWriteTime : 29/11/2020 11:42:16
LastWriteTimeUtc : 29/11/2020 10:42:16
Attributes : Archive
Procesos que utilizan la dll WaaSMedicCapsule.dll