¿Para qué sirve la dll winmde.dll?

WinMDE DLL

Dependencias de la dll winmde.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\winmde.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-winrt-error-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-string-l2-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-string-obsolete-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    SspiCli.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    d3d11.dll
    RTWorkQ.DLL
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-toolhelp-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-heap-obsolete-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-version-l1-1-1.dll
    api-ms-win-core-version-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    OLEAUT32.dll
    api-ms-win-core-com-l1-1-0.dll
    WS2_32.dll
    WINHTTP.dll
    IPHLPAPI.DLL
    ext-ms-win-mf-vfw-l1-1-0.dll
    mfasfsrcsnk.dll
    MFCORE.dll
    mfnetcore.dll
    MFPlat.DLL
    MFTranscode.dll
    PROPSYS.dll
    api-ms-win-security-cryptoapi-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    HTTPAPI.dll
    AVRT.dll

  Summary

        E000 .data
        1000 .didat
        A000 .pdata
       38000 .rdata
        5000 .reloc
        2000 .rsrc
      157000 .text

Funciones que tiene la dll winmde.dll


1    0 000282A0 DllCanUnloadNow
2    1 000282E0 DllGetClassObject
3    2 0000B830 DllRegisterServer
4    3 0000B830 DllUnregisterServer
5    4 0002DBF0 MFCreateNetVRoot
6    5 0000F3B0 MFCreateWMPMDEOpCenter
7    6 00028390 MFCreateWinMDEOpCenter

Información avanzada sobre funciones que tiene la dll winmde.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\winmde.dll

File Type: DLL

  Section contains the following exports for winmde.dll

    00000000 characteristics
    28D2A0A8 time date stamp
        0.00 version
           1 ordinal base
           7 number of functions
           7 number of names

    ordinal hint RVA      name

          1    0 000282A0 DllCanUnloadNow
          2    1 000282E0 DllGetClassObject
          3    2 0000B830 DllRegisterServer
          4    3 0000B830 DllUnregisterServer
          5    4 0002DBF0 MFCreateNetVRoot
          6    5 0000F3B0 MFCreateWMPMDEOpCenter
          7    6 00028390 MFCreateWinMDEOpCenter

  Summary

        E000 .data
        1000 .didat
        A000 .pdata
       38000 .rdata
        5000 .reloc
        2000 .rsrc
      157000 .text

Integridad de la dll winmde.dll



Algorithm       Hash                                                                   Path                                                           
---------       ----                                                                   ----                                                           
SHA256          B52CE02D2F0F6F5C9601379ACB1A49BF265BA39F49BA31EE411D806EDDA3B03F       C:\Windows\System32\winmde.dll                                 


Detalles sobre el fichero dll winmde.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\winmde.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : winmde.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\winmde.dll
                    InternalName:     WinMDE DLL
                    OriginalFilename: winmde.dll
                    FileVersion:      10.0.19041.488 (WinBuild.160101.0800)
                    FileDescription:  WinMDE DLL
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.488
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : winmde
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-winmde_31bf3856ad364e35_10.0.19041.488_none_9482fb64fb1d6754\winmde.dll}
LinkType          : HardLink
Name              : winmde.dll
Length            : 1770040
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\winmde.dll
Extension         : .dll
CreationTime      : 20/09/2020 15:08:36
CreationTimeUtc   : 20/09/2020 13:08:36
LastAccessTime    : 03/12/2020 17:33:03
LastAccessTimeUtc : 03/12/2020 16:33:03
LastWriteTime     : 20/09/2020 15:08:36
LastWriteTimeUtc  : 20/09/2020 13:08:36
Attributes        : Archive



Procesos que utilizan la dll winmde.dll