¿Para qué sirve la dll mpeval.dll?

Supervisando el evaluador de plataforma

Dependencias de la dll mpeval.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\mpeval.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    ntdll.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    mpunits.dll
    mimofcodec.dll
    mi.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    miutils.dll

  Summary

       22000 .data
        1000 .pdata
       1F000 .rdata
        2000 .reloc
        1000 .rsrc
       17000 .text

Funciones que tiene la dll mpeval.dll


1    0 00011E70 DllCanUnloadNow
2    1 00011EB0 DllGetClassObject
3    2 00012160 DllMain
4    3 00011DD0 DllRegisterServer
5    4 00011E20 DllUnregisterServer
6    5 00011BC0 GetProviderClassID
7    6 00012160 MI_Main
8    7 00018010 MPEvalTrap
9    8 00038780 NITS_PRESENCE_STUB
10    9 00018160 NITS_STUB
11    A 00018900 monitoring_platform_evaluatorFT_V1

Información avanzada sobre funciones que tiene la dll mpeval.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\mpeval.dll

File Type: DLL

  Section contains the following exports for mpeval.dll

    00000000 characteristics
    8DE54D80 time date stamp
        0.00 version
           1 ordinal base
          11 number of functions
          11 number of names

    ordinal hint RVA      name

          1    0 00011E70 DllCanUnloadNow
          2    1 00011EB0 DllGetClassObject
          3    2 00012160 DllMain
          4    3 00011DD0 DllRegisterServer
          5    4 00011E20 DllUnregisterServer
          6    5 00011BC0 GetProviderClassID
          7    6 00012160 MI_Main
          8    7 00018010 MPEvalTrap
          9    8 00038780 NITS_PRESENCE_STUB
         10    9 00018160 NITS_STUB
         11    A 00018900 monitoring_platform_evaluatorFT_V1

  Summary

       22000 .data
        1000 .pdata
       1F000 .rdata
        2000 .reloc
        1000 .rsrc
       17000 .text

Integridad de la dll mpeval.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          2A8993F81A3A8E23829FE6F13DFAF32840633B2D1AEC73A7C2AC7ACF15ACEE72       C:\Windows\System32\mpeval.dll               


Detalles sobre el fichero dll mpeval.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\mpeval.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : mpeval.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\mpeval.dll
                    InternalName:     MPEval.dll
                    OriginalFilename: MPEval.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Supervisando el evaluador de plataforma
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : mpeval
Target            : {C:\Windows\WinSxS\amd64_microsoft.powershell.dsc.mpeval_31bf3856ad364e35_10.0.19041.1_none_e05bd795463a3cec\mpe
                    val.dll}
LinkType          : HardLink
Name              : mpeval.dll
Length            : 235520
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\mpeval.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:09:45
CreationTimeUtc   : 07/12/2019 9:09:45
LastAccessTime    : 03/12/2020 13:04:19
LastAccessTimeUtc : 03/12/2020 12:04:19
LastWriteTime     : 07/12/2019 10:09:45
LastWriteTimeUtc  : 07/12/2019 9:09:45
Attributes        : Archive



Procesos que utilizan la dll mpeval.dll