¿Para qué sirve la dll wecsvc.dll?
Servicio Recopilador de eventosDependencias de la dll wecsvc.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\wecsvc.dll
File Type: DLL
Image has the following dependencies:
msvcrt.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-debug-l1-1-0.dll
RPCRT4.dll
api-ms-win-security-base-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-service-core-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
WsmSvc.DLL
ntdll.dll
ADVAPI32.dll
wevtapi.dll
api-ms-win-core-localization-l1-2-2.dll
api-ms-win-core-file-l1-1-0.dll
Summary
1000 .data
2000 .pdata
C000 .rdata
1000 .reloc
2000 .rsrc
23000 .text
Funciones que tiene la dll wecsvc.dll
3 0 00002A00 DllRegisterServer
4 1 00002A00 DllUnregisterServer
1 2 000023B0 ServiceMain
2 3 00002310 SvchostPushServiceGlobals
Información avanzada sobre funciones que tiene la dll wecsvc.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\wecsvc.dll
File Type: DLL
Section contains the following exports for collsvc.dll
00000000 characteristics
DBB3C0 time date stamp
0.00 version
1 ordinal base
4 number of functions
4 number of names
ordinal hint RVA name
3 0 00002A00 DllRegisterServer
4 1 00002A00 DllUnregisterServer
1 2 000023B0 ServiceMain
2 3 00002310 SvchostPushServiceGlobals
Summary
1000 .data
2000 .pdata
C000 .rdata
1000 .reloc
2000 .rsrc
23000 .text
Integridad de la dll wecsvc.dll
Algorithm Hash Path
--------- ---- ----
SHA256 F8CF9237AC6B5B90D9D0B71C9EEAEB3C1E1CFF3362A9C0A2DEB5B14180254155 C:\Windows\System32\wecsvc.dll
Detalles sobre el fichero dll wecsvc.dll
PSPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\wecsvc.dll
PSParentPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName : wecsvc.dll
PSDrive : C
PSProvider : Microsoft.PowerShell.Core\FileSystem
PSIsContainer : False
Mode : -a----
VersionInfo : File: C:\Windows\System32\wecsvc.dll
InternalName: wecsvc.dll
OriginalFilename: wecsvc.dll.mui
FileVersion: 10.0.19041.561 (WinBuild.160101.0800)
FileDescription: Servicio Recopilador de eventos
Product: Sistema operativo Microsoft® Windows®
ProductVersion: 10.0.19041.561
Debug: False
Patched: False
PreRelease: False
PrivateBuild: False
SpecialBuild: False
Language: Español (España, internacional)
BaseName : wecsvc
Target : {C:\Windows\WinSxS\amd64_microsoft-windows-eventcollector_31bf3856ad364e35_10.0.19041.1_none_b0feb06b14107c04\wecsvc.dll}
LinkType : HardLink
Name : wecsvc.dll
Length : 204800
DirectoryName : C:\Windows\System32
Directory : C:\Windows\System32
IsReadOnly : False
Exists : True
FullName : C:\Windows\System32\wecsvc.dll
Extension : .dll
CreationTime : 07/12/2019 10:09:39
CreationTimeUtc : 07/12/2019 9:09:39
LastAccessTime : 03/12/2020 16:43:11
LastAccessTimeUtc : 03/12/2020 15:43:11
LastWriteTime : 07/12/2019 10:09:39
LastWriteTimeUtc : 07/12/2019 9:09:39
Attributes : Archive
Procesos que utilizan la dll wecsvc.dll