¿Para qué sirve la dll MitigationClient.dll?

MitigationClient

Dependencias de la dll MitigationClient.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\MitigationClient.dll

File Type: DLL

  Image has the following dependencies:

    msvcp_win.dll
    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-crt-string-l1-1-0.dll
    combase.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-winrt-error-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-service-core-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    ntdll.dll
    api-ms-win-security-sddl-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-core-winrt-l1-1-0.dll
    WINHTTP.dll
    api-ms-win-core-string-l1-1-0.dll
    CRYPT32.dll
    api-ms-win-shcore-registry-l1-1-0.dll
    api-ms-win-core-registry-l1-1-1.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-file-l2-1-0.dll
    api-ms-win-core-path-l1-1-0.dll
    api-ms-win-core-file-l1-2-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    api-ms-win-core-job-l2-1-0.dll
    api-ms-win-core-realtime-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-crt-time-l1-1-0.dll
    OLEAUT32.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-crt-math-l1-1-0.dll

  Image has the following delay load dependencies:

    ext-ms-win-session-wtsapi32-l1-1-0.dll
    ext-ms-win-session-usertoken-l1-1-0.dll
    ext-ms-win-session-usermgr-l1-1-0.dll
    Cabinet.dll
    api-ms-win-ntuser-sysparams-l1-1-0.dll
    WINTRUST.dll
    ext-ms-win-devmgmt-policy-l1-1-1.dll

  Summary

        5000 .data
        1000 .didat
        3000 .pdata
       18000 .rdata
        1000 .reloc
        1000 .rsrc
       47000 .text

Funciones que tiene la dll MitigationClient.dll


4    0 0000FBA0 DllCanUnloadNow
1    1 0000FC10 DllGetActivationFactory
5    2 0000F8D0 DllGetClassObject
2    3 00010D10 ServiceMain
3    4 00010D00 SvchostPushServiceGlobals

Información avanzada sobre funciones que tiene la dll MitigationClient.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\MitigationClient.dll

File Type: DLL

  Section contains the following exports for mitigationclient.dll

    00000000 characteristics
    50294357 time date stamp
        0.00 version
           1 ordinal base
           5 number of functions
           5 number of names

    ordinal hint RVA      name

          4    0 0000FBA0 DllCanUnloadNow
          1    1 0000FC10 DllGetActivationFactory
          5    2 0000F8D0 DllGetClassObject
          2    3 00010D10 ServiceMain
          3    4 00010D00 SvchostPushServiceGlobals

  Summary

        5000 .data
        1000 .didat
        3000 .pdata
       18000 .rdata
        1000 .reloc
        1000 .rsrc
       47000 .text

Integridad de la dll MitigationClient.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          62AD2A1BC45980F985EC6ED94568484BD58833591C836545D0AA167A2E98CDFD       C:\Windows\System32\MitigationClient.dll     


Detalles sobre el fichero dll MitigationClient.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\MitigationClient.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : MitigationClient.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\MitigationClient.dll
                    InternalName:     mitigationclient.dll
                    OriginalFilename: mitigationclient.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  MitigationClient
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : MitigationClient
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-mitigation-client_31bf3856ad364e35_10.0.19041.153_none_4a699fe6db6ce9
                    06\MitigationClient.dll}
LinkType          : HardLink
Name              : MitigationClient.dll
Length            : 417792
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\MitigationClient.dll
Extension         : .dll
CreationTime      : 18/09/2020 7:53:21
CreationTimeUtc   : 18/09/2020 5:53:21
LastAccessTime    : 03/12/2020 13:00:14
LastAccessTimeUtc : 03/12/2020 12:00:14
LastWriteTime     : 18/09/2020 7:53:21
LastWriteTimeUtc  : 18/09/2020 5:53:21
Attributes        : Archive



Procesos que utilizan la dll MitigationClient.dll