¿Para qué sirve la dll BFE.DLL?

Motor de filtrado de base

Dependencias de la dll BFE.DLL


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\BFE.DLL

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    ntdll.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-threadpool-legacy-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-core-heap-l2-1-0.dll
    AUTHZ.dll
    api-ms-win-security-base-l1-1-0.dll
    WS2_32.dll
    api-ms-win-core-timezone-l1-1-0.dll
    IPHLPAPI.DLL
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-psapi-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-perfcounters-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-string-l2-1-1.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-eventing-controller-l1-1-0.dll
    api-ms-win-eventing-consumer-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-core-threadpool-private-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    api-ms-win-service-core-l1-1-0.dll
    api-ms-win-service-management-l1-1-0.dll
    api-ms-win-service-core-l1-1-1.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-0.dll
    CRYPT32.dll
    api-ms-win-core-registry-l2-1-0.dll
    ktmw32.dll
    ext-ms-win-wevtapi-eventlog-l1-1-0.dll
    DNSAPI.dll
    SspiCli.dll
    api-ms-win-security-audit-l1-1-0.dll

  Summary

        7000 .data
        1000 .didat
        8000 .pdata
       5A000 .rdata
        4000 .reloc
        2000 .rsrc
       71000 .text

Funciones que tiene la dll BFE.DLL


1    0 00023780 BfeGetDirectDispatchTable
2    1 0003DA90 BfeOnServiceStartTypeChange
3    2 00022A50 BfeServiceMain
4    3 00023850 SvchostPushServiceGlobals

Información avanzada sobre funciones que tiene la dll BFE.DLL


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\BFE.DLL

File Type: DLL

  Section contains the following exports for bfe.dll

    00000000 characteristics
    67ECA47D time date stamp
        0.00 version
           1 ordinal base
           4 number of functions
           4 number of names

    ordinal hint RVA      name

          1    0 00023780 BfeGetDirectDispatchTable
          2    1 0003DA90 BfeOnServiceStartTypeChange
          3    2 00022A50 BfeServiceMain
          4    3 00023850 SvchostPushServiceGlobals

  Summary

        7000 .data
        1000 .didat
        8000 .pdata
       5A000 .rdata
        4000 .reloc
        2000 .rsrc
       71000 .text

Integridad de la dll BFE.DLL



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          7BC61FEE59B667B15837807A5815BAC8F7E3CA160138C8E973B7A79C4C049EF9       C:\Windows\System32\BFE.DLL                  


Detalles sobre el fichero dll BFE.DLL




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\BFE.DLL
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : BFE.DLL
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\BFE.DLL
                    InternalName:     BFE.DLL
                    OriginalFilename: BFE.DLL.MUI
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Motor de filtrado de base
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : BFE
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-network-security_31bf3856ad364e35_10.0.19041.546_none_ab1db6e9895a228
                    0\BFE.DLL}
LinkType          : HardLink
Name              : BFE.DLL
Length            : 887296
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\BFE.DLL
Extension         : .DLL
CreationTime      : 21/11/2020 8:43:08
CreationTimeUtc   : 21/11/2020 7:43:08
LastAccessTime    : 03/12/2020 8:50:28
LastAccessTimeUtc : 03/12/2020 7:50:28
LastWriteTime     : 21/11/2020 8:43:08
LastWriteTimeUtc  : 21/11/2020 7:43:08
Attributes        : Archive



Procesos que utilizan la dll BFE.DLL