mpeval.dll

  • File Path: C:\Windows\system32\mpeval.dll
  • Description: Monitoring Platform Evaluator

Hashes

Type Hash
MD5 695500833B489CBCBFECD08B1FAF81C5
SHA1 6D4B085C151F3849630516795077166028C14E27
SHA256 2A8993F81A3A8E23829FE6F13DFAF32840633B2D1AEC73A7C2AC7ACF15ACEE72
SHA384 B27FD408864BCFCD8834C8803A8CB06E544E470A83717E9F4094B246723971EBC4ED20715FA6750A5437738D29B67842
SHA512 472719C5C9F8788C05AD4B36712229A18F902E273FBA4F327FCF18FD2EEF5C32262BF92BAFC6B7DA7020E8B4E9CF9E78BD30C8E691F89A52A9105AE703A86398
SSDEEP 6144:Fe14c+xKEn6xQ+AvsiRqtGFlPtMTUzViTtJKQBUboWPDotZvqz2w/0oS9+1PRcBw:G4DYAvsSqtGFlPtMTUzViTtJKQBUboWc
IMP 83064BA2B99BBDEAF30943519773A6CF
PESHA1 27055EAC8EEB597844DAEED9A28A08984583C33C
PE256 B313F20503A11BF581FACF811728FCC6A8F84FF867C8A2F312E93ACD1A0F497C

DLL Exports:

Function Name Ordinal Type
monitoring_platform_evaluatorFT_V1 11 Exported Function
MI_Main 7 Exported Function
MPEvalTrap 8 Exported Function
NITS_STUB 10 Exported Function
NITS_PRESENCE_STUB 9 Exported Function
GetProviderClassID 6 Exported Function
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function
DllMain 3 Exported Function
DllUnregisterServer 5 Exported Function
DllRegisterServer 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MPEval.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/2a8993f81a3a8e23829fe6f13dfaf32840633b2d1aec73a7c2ac7acf15acee72/detection/

MIT License. Copyright (c) 2020-2021 Strontic.