¿Para qué sirve la dll nshwfp.dll?

Aplicación auxiliar Netsh de plataforma de filtrado de Windows

Dependencias de la dll nshwfp.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\nshwfp.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    NETSH.EXE
    ntdll.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    fwpuclnt.dll
    NSI.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-core-console-l1-1-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-service-management-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-console-l1-2-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    IPHLPAPI.DLL
    api-ms-win-core-timezone-l1-1-0.dll
    CRYPT32.dll
    api-ms-win-security-lsapolicy-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-eventing-controller-l1-1-0.dll
    api-ms-win-eventing-legacy-l1-1-0.dll
    Cabinet.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll

  Summary

       27000 .data
        2000 .pdata
       6C000 .rdata
        6000 .reloc
        1000 .rsrc
       27000 .text

Funciones que tiene la dll nshwfp.dll


1    0 00005ED0 IdpConfigAddPolicy
2    1 000078C0 IdpConfigAllocateAndGetPolicy
3    2 00007930 IdpConfigFreePolicy
4    3 00006B10 IdpConfigInitDefaultPolicy
5    4 00006130 IdpConfigRemovePolicy
6    5 00001110 InitHelperDll
7    6 00003D20 WfpCaptureExportedW
8    7 00004450 WfpCaptureStop

Información avanzada sobre funciones que tiene la dll nshwfp.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\nshwfp.dll

File Type: DLL

  Section contains the following exports for NSHWFP.DLL

    00000000 characteristics
    B9E4EFA8 time date stamp
        0.00 version
           1 ordinal base
           8 number of functions
           8 number of names

    ordinal hint RVA      name

          1    0 00005ED0 IdpConfigAddPolicy
          2    1 000078C0 IdpConfigAllocateAndGetPolicy
          3    2 00007930 IdpConfigFreePolicy
          4    3 00006B10 IdpConfigInitDefaultPolicy
          5    4 00006130 IdpConfigRemovePolicy
          6    5 00001110 InitHelperDll
          7    6 00003D20 WfpCaptureExportedW
          8    7 00004450 WfpCaptureStop

  Summary

       27000 .data
        2000 .pdata
       6C000 .rdata
        6000 .reloc
        1000 .rsrc
       27000 .text

Integridad de la dll nshwfp.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          D34797476361C9758E14416088382162C2BEE7B02A8B4C102E09AB2FBB635D32       C:\Windows\System32\nshwfp.dll

Detalles sobre el fichero dll nshwfp.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\nshwfp.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : nshwfp.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\nshwfp.dll
                    InternalName:     nshwfp.dll
                    OriginalFilename: nshwfp.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Aplicación auxiliar Netsh de plataforma de filtrado de Windows
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : nshwfp
Target            : {C:\Windows\WinSxS\amd64_networking-mpssvc-netsh_31bf3856ad364e35_10.0.19041.488_none_8cc09b2a259dafd3\nshwfp.dl
                    l}
LinkType          : HardLink
Name              : nshwfp.dll
Length            : 784896
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\nshwfp.dll
Extension         : .dll
CreationTime      : 20/09/2020 15:07:14
CreationTimeUtc   : 20/09/2020 13:07:14
LastAccessTime    : 03/12/2020 13:49:46
LastAccessTimeUtc : 03/12/2020 12:49:46
LastWriteTime     : 20/09/2020 15:07:14
LastWriteTimeUtc  : 20/09/2020 13:07:14
Attributes        : Archive

Procesos que utilizan la dll nshwfp.dll