¿Para qué sirve la dll sfc_os.dll?

Windows File Protection

Dependencias de la dll sfc_os.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\sfc_os.dll

File Type: DLL

  Image has the following dependencies:

    ntdll.dll
    api-ms-win-core-libraryloader-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-heap-obsolete-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll

  Image has the following delay load dependencies:

    SETUPAPI.dll

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
        7000 .text

Funciones que tiene la dll sfc_os.dll


1    0 00004AA0 BeginFileMapEnumeration
2    1 00004B10 CloseFileMapEnumeration
3    2 00004B70 GetNextFileMapContent
4    3 00004D20 SRSetRestorePointA
5    4 00004DD0 SRSetRestorePointW
6    5 00003810 SfcClose
7    6 00003820 SfcConnectToServer
8    7 00003820 SfcFileException
9    8 00004C40 SfcGetNextProtectedFile
10    9 00004E80 SfcInitProt
11    A 00003820 SfcInitiateScan
12    B 00003820 SfcInstallProtectedFiles
13    C 00001010 SfcIsFileProtected
14    D 00004CE0 SfcIsKeyProtected
15    E 00003810 SfcTerminateWatcherThread
16    F 00004E80 SfpDeleteCatalog
17   10 00004E80 SfpInstallCatalog
18   11 00004E90 SfpVerifyFile

Información avanzada sobre funciones que tiene la dll sfc_os.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\sfc_os.dll

File Type: DLL

  Section contains the following exports for sfc_os.dll

    00000000 characteristics
    AD233A3D time date stamp
        0.00 version
           1 ordinal base
          18 number of functions
          18 number of names

    ordinal hint RVA      name

          1    0 00004AA0 BeginFileMapEnumeration
          2    1 00004B10 CloseFileMapEnumeration
          3    2 00004B70 GetNextFileMapContent
          4    3 00004D20 SRSetRestorePointA
          5    4 00004DD0 SRSetRestorePointW
          6    5 00003810 SfcClose
          7    6 00003820 SfcConnectToServer
          8    7 00003820 SfcFileException
          9    8 00004C40 SfcGetNextProtectedFile
         10    9 00004E80 SfcInitProt
         11    A 00003820 SfcInitiateScan
         12    B 00003820 SfcInstallProtectedFiles
         13    C 00001010 SfcIsFileProtected
         14    D 00004CE0 SfcIsKeyProtected
         15    E 00003810 SfcTerminateWatcherThread
         16    F 00004E80 SfpDeleteCatalog
         17   10 00004E80 SfpInstallCatalog
         18   11 00004E90 SfpVerifyFile

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
        7000 .text

Integridad de la dll sfc_os.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          19776361B3A0A941A2EAFCB87B83A3022F6C5DAFA31A7722079CB6D7B3D03332       C:\Windows\System32\sfc_os.dll               


Detalles sobre el fichero dll sfc_os.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\sfc_os.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : sfc_os.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\sfc_os.dll
                    InternalName:     sfc_os.dll
                    OriginalFilename: sfc_os.dll
                    FileVersion:      10.0.19041.546 (WinBuild.160101.0800)
                    FileDescription:  Windows File Protection
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.546
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : sfc_os
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.19041.546_none_852f0a4cbb00efef\sfc_os.dll}
LinkType          : HardLink
Name              : sfc_os.dll
Length            : 58408
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\sfc_os.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:41:42
CreationTimeUtc   : 21/11/2020 7:41:42
LastAccessTime    : 03/12/2020 15:11:36
LastAccessTimeUtc : 03/12/2020 14:11:36
LastWriteTime     : 21/11/2020 8:41:42
LastWriteTimeUtc  : 21/11/2020 7:41:42
Attributes        : Archive



Procesos que utilizan la dll sfc_os.dll


AsusTPCenter
explorer