¿Para qué sirve la dll vbsapi.dll?

Windows VBS HVCI API

Dependencias de la dll vbsapi.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\vbsapi.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    ntdll.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-registry-l1-1-1.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    api-ms-win-core-sysinfo-l1-2-1.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    drvstore.dll
    imagehlp.dll

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        B000 .rdata
        1000 .reloc
        1000 .rsrc
       16000 .text

Funciones que tiene la dll vbsapi.dll


1    0 00003540 HvciGetConfig
2    1 000034C0 HvciGetConfigFromVBSKey
3    2 000032F0 HvciIncompatibilityScanCancel
4    3 00003380 HvciIncompatibilityScanFree
5    4 00003350 HvciIncompatibilityScanGetResult
6    5 00003170 HvciIncompatibilityScanInitialize
7    6 00003210 HvciIncompatibilityScanOverrideDriverCompatDatabase
8    7 00003200 HvciIncompatibilityScanOverrideServicesKey
9    8 00003260 HvciIncompatibilityScanStart
10    9 00003450 HvciIsActive
11    A 00001080 VbsGetIssues
12    B 000012F0 VbsIsCapable
13    C 000012E0 VbsIsRecommended
14    D 00001370 VbsIsScenarioEnabled
15    E 000015E0 VbsSetScenarioEnable
16    F 000013B0 VbsSetScenarioEnableToVBSKey

Información avanzada sobre funciones que tiene la dll vbsapi.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\vbsapi.dll

File Type: DLL

  Section contains the following exports for VbsApi.dll

    00000000 characteristics
    1EF1F3EF time date stamp
        0.00 version
           1 ordinal base
          16 number of functions
          16 number of names

    ordinal hint RVA      name

          1    0 00003540 HvciGetConfig
          2    1 000034C0 HvciGetConfigFromVBSKey
          3    2 000032F0 HvciIncompatibilityScanCancel
          4    3 00003380 HvciIncompatibilityScanFree
          5    4 00003350 HvciIncompatibilityScanGetResult
          6    5 00003170 HvciIncompatibilityScanInitialize
          7    6 00003210 HvciIncompatibilityScanOverrideDriverCompatDatabase
          8    7 00003200 HvciIncompatibilityScanOverrideServicesKey
          9    8 00003260 HvciIncompatibilityScanStart
         10    9 00003450 HvciIsActive
         11    A 00001080 VbsGetIssues
         12    B 000012F0 VbsIsCapable
         13    C 000012E0 VbsIsRecommended
         14    D 00001370 VbsIsScenarioEnabled
         15    E 000015E0 VbsSetScenarioEnable
         16    F 000013B0 VbsSetScenarioEnableToVBSKey

  Summary

        1000 .data
        1000 .didat
        1000 .pdata
        B000 .rdata
        1000 .reloc
        1000 .rsrc
       16000 .text

Integridad de la dll vbsapi.dll



Algorithm       Hash                                                                   Path                                                           
---------       ----                                                                   ----                                                           
SHA256          507634E66F52B91611AAD9BD9BE944072AB4DFB41608281E59F86D6C589E5584       C:\Windows\System32\vbsapi.dll

Detalles sobre el fichero dll vbsapi.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\vbsapi.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : vbsapi.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\vbsapi.dll
                    InternalName:     VbsApi.dll
                    OriginalFilename: VbsApi.dll
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  Windows VBS HVCI API
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : vbsapi
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-h..forcedcodeintegrity_31bf3856ad364e35_10.0.19041.1_none_b02dae7988700938\vbsapi.dll}
LinkType          : HardLink
Name              : vbsapi.dll
Length            : 141824
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\vbsapi.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:09:39
CreationTimeUtc   : 07/12/2019 9:09:39
LastAccessTime    : 03/12/2020 16:17:17
LastAccessTimeUtc : 03/12/2020 15:17:17
LastWriteTime     : 07/12/2019 10:09:39
LastWriteTimeUtc  : 07/12/2019 9:09:39
Attributes        : Archive

Procesos que utilizan la dll vbsapi.dll