¿Para qué sirve la dll tbs.dll?

TBS

Dependencias de la dll tbs.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\tbs.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    ntdll.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    bcrypt.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    imagehlp.dll
    api-ms-win-core-sysinfo-l1-2-0.dll

  Summary

        1000 .data
        2000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
       10000 .text

Funciones que tiene la dll tbs.dll


3    0 0000F260 GetDeviceID
4    1 000044F0 GetDeviceIDString
5    2 00004760 GetDeviceIDWithTimeout
6    3 000026D0 Tbsi_Context_Create
1    4 0000EB50 Tbsi_Create_Attestation_From_Log
7    5 0000DA90 Tbsi_Create_Windows_Key
8    6 0000F470 Tbsi_FilterLog
9    7 00002950 Tbsi_GetDeviceInfo
10    8 0000DB40 Tbsi_Get_OwnerAuth
11    9 0000E2E0 Tbsi_Get_TCG_Log
12    A 000011A0 Tbsi_Get_TCG_Log_Ex
2    B 0000C250 Tbsi_Get_TCG_Logs
13    C 00001940 Tbsi_Physical_Presence_Command
14    D 0000E320 Tbsi_Revoke_Attestation
15    E 0000F730 Tbsi_ShaHash
16    F 0000E3B0 Tbsip_Cancel_Commands
17   10 000058A0 Tbsip_Context_Close
18   11 00001AB0 Tbsip_Submit_Command
19   12 00001160 Tbsip_Submit_Command_NonBlocking
20   13 0000E3F0 Tbsip_TestInterruptInformation
21   14 0000E4B0 Tbsip_TestMorBit

Información avanzada sobre funciones que tiene la dll tbs.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\tbs.dll

File Type: DLL

  Section contains the following exports for tbs.dll

    00000000 characteristics
    56BBB305 time date stamp
        0.00 version
           1 ordinal base
          21 number of functions
          21 number of names

    ordinal hint RVA      name

          3    0 0000F260 GetDeviceID
          4    1 000044F0 GetDeviceIDString
          5    2 00004760 GetDeviceIDWithTimeout
          6    3 000026D0 Tbsi_Context_Create
          1    4 0000EB50 Tbsi_Create_Attestation_From_Log
          7    5 0000DA90 Tbsi_Create_Windows_Key
          8    6 0000F470 Tbsi_FilterLog
          9    7 00002950 Tbsi_GetDeviceInfo
         10    8 0000DB40 Tbsi_Get_OwnerAuth
         11    9 0000E2E0 Tbsi_Get_TCG_Log
         12    A 000011A0 Tbsi_Get_TCG_Log_Ex
          2    B 0000C250 Tbsi_Get_TCG_Logs
         13    C 00001940 Tbsi_Physical_Presence_Command
         14    D 0000E320 Tbsi_Revoke_Attestation
         15    E 0000F730 Tbsi_ShaHash
         16    F 0000E3B0 Tbsip_Cancel_Commands
         17   10 000058A0 Tbsip_Context_Close
         18   11 00001AB0 Tbsip_Submit_Command
         19   12 00001160 Tbsip_Submit_Command_NonBlocking
         20   13 0000E3F0 Tbsip_TestInterruptInformation
         21   14 0000E4B0 Tbsip_TestMorBit

  Summary

        1000 .data
        2000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
       10000 .text

Integridad de la dll tbs.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          8C786D15EDE3CD0E9BF27972EACFD01460A2039E7283D1BB9A9EDAEC73852D47       C:\Windows\System32\tbs.dll                  


Detalles sobre el fichero dll tbs.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\tbs.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : tbs.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\tbs.dll
                    InternalName:     TBS.DLL
                    OriginalFilename: TBS.DLL
                    FileVersion:      10.0.19041.546 (WinBuild.160101.0800)
                    FileDescription:  TBS
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.546
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : tbs
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-tpm-tbs_31bf3856ad364e35_10.0.19041.546_none_ccb11bf5d723989e\tbs.dll
                    }
LinkType          : HardLink
Name              : tbs.dll
Length            : 97672
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\tbs.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:41:21
CreationTimeUtc   : 21/11/2020 7:41:21
LastAccessTime    : 03/12/2020 15:44:34
LastAccessTimeUtc : 03/12/2020 14:44:34
LastWriteTime     : 21/11/2020 8:41:21
LastWriteTimeUtc  : 21/11/2020 7:41:21
Attributes        : Archive



Procesos que utilizan la dll tbs.dll