mfdetours.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\mfdetours.dll
  • Description: Media Foundation Detours Tracing DLL

Hashes

Type Hash
MD5 94AEA26EE13783840E2191463BD94544
SHA1 4981906F6EC49D0E6717EE754DC9185980CA4F34
SHA256 ACD72B85E8ED269F296056978D09271C878695579B4919101ACA34A0947414D4
SHA384 C3D094436E7DAF1AF2D82445CC32188384E554D4B63D816BEA706E92EC9D56913478D9D4394D0BC0C45D9DC77FD6BE86
SHA512 173481FCA38EA25A2CF0F803401F43DFDA6428C8246BA307F562F6312D27585F9722E0A184F5FBEB2E15260B9854A5D5FE908D7A9B095550BD0C415E5F5E0542
SSDEEP 12288:sYT5ePoIlDGWWjNB6lPqgpwcL16qaK6qaET:sYuVGJ6x3+g16qaK6qaET
IMP DB78C1572B8D51CD758A89B49AF06821
PESHA1 4692A79A02351165DFB792FB938BDFCCD9AFF09C
PE256 6D4A59EF51C073122BADF9B1EBD750A685119265F2C28F614AB23B3FA2E012CB

DLL Exports:

Function Name Ordinal Type
Startup 2 Exported Function
Shutdown 1 Exported Function
DllGetMFDebugHlp 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002B7E8E007A82AEF13150000000002B7
  • Thumbprint: 5A68625F1A516670A744F7EF919500A479D32A5B
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mfdetours.dll
  • Product Name: Media Foundation Detours Tracing DLL
  • Company Name: Microsoft
  • File Version: 1.1.0.1
  • Product Version: 1.1.0.1
  • Language: Language Neutral
  • Legal Copyright: (c) Microsoft. All rights reserved.
  • Machine Type: 452

File Scan

  • VirusTotal Detections: Unknown

MIT License. Copyright (c) 2020-2021 Strontic.