auditpolcore.dll

  • File Path: C:\Windows\SysWOW64\auditpolcore.dll
  • Description: Audit Policy Program

Hashes

Type Hash
MD5 63573CFE2DC21D096BF7E46ACCC2F7BA
SHA1 50B4F11D4FF7CF10FD77E0C5DC56679D728D435F
SHA256 E0B23DE102D1034BD230C2A87B1724C69E16763BFCD0D0BA058761C70067DCF6
SHA384 8D97F2064EFCC1DF028B167BD4F5B929777D07B1A87DB27D5B2B35B00968AFF87156125F79F8A66A177E4A5DE5BB24E8
SHA512 F72782B9BC63712F0702653D16137B487BA28E5D49BEDA09DBA6746B74E1356E874B2EED1ED0294E4592ADC992D5A28D286D5902E79B6085A0D2F64093A141C9
SSDEEP 1536:mK+j9caHau9v12kEwlQc2E01dRgZnZLNMD:/+L6K12k4FE01/gZnZNM
IMP D5BD9664055C1F3537916818F155A97B
PESHA1 917958621E490D9636D0E15E5BE94D27A68EFA31
PE256 C4532FD593A907A2D5EF86ACFA6E873833111DF76DCAA940942F37E1B1109576

DLL Exports:

Function Name Ordinal Type
AdtRestorePolicyGeneralized 20 Exported Function
AdtSetOption 21 Exported Function
AdtSetPerUserPolicy 22 Exported Function
AdtRestorePolicy 19 Exported Function
AdtParseGuidOrNameArray 16 Exported Function
AdtRemoveAllUsers 17 Exported Function
AdtRemoveBasePolicy 18 Exported Function
GetDisplayPolicy 27 Exported Function
LoadFormatStringAndPrintToConsole 28 Exported Function
SetDisplayPolicy 29 Exported Function
DisplayMessageToSpecificConsoleHandle 26 Exported Function
AdtSetSystemPolicy 23 Exported Function
AuditPolicyData_DeleteAuditDataInstance 24 Exported Function
DisplayMessage 25 Exported Function
AdtParseAuditOptionName 15 Exported Function
AdtConvertGuidStringToGuid 5 Exported Function
AdtConvertGuidToString 6 Exported Function
AdtDisableSinglePrivilege 7 Exported Function
AdtConstructAllCategoryGuids 4 Exported Function
AdtBackupPolicy 1 Exported Function
AdtBackupPolicyGeneralized 2 Exported Function
AdtClearPolicy 3 Exported Function
AdtListCategories 12 Exported Function
AdtListSubCategories 13 Exported Function
AdtLoadStringEx 14 Exported Function
AdtGetSystemPolicy 11 Exported Function
AdtEnableSinglePrivilege 8 Exported Function
AdtGetOption 9 Exported Function
AdtGetPerUserPolicy 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AUDITPOLCORE.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/e0b23de102d1034bd230c2a87b1724c69e16763bfcd0d0ba058761c70067dcf6/detection/

MIT License. Copyright (c) 2020-2021 Strontic.