mfdetours.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\mfdetours.dll
  • Description: Media Foundation Detours Tracing DLL

Hashes

Type Hash
MD5 C133BEAD7152DF5140D6E7DCE4D823D7
SHA1 7833339AC8509018258733D5522D75DFA0DBF068
SHA256 2BAF4227811971ED530356162CFE7F5B041F34EC5F61808949DAB19EEE420951
SHA384 A998E4C1D98B1D96CC686E5686CF807D3BCCCDC65CED0E0ADC38247EDBDBB9141438F9A8B7A6820B9F3F7B2166F50DAB
SHA512 499603DA61B76B6BBA43BF1CC89A97D2B48791FD357A9703E490A70C80B2D4E925B38C4E454DE3D7C26533DE919BB736E15BBD1F9FDEE1B4F4C8C39839EC4B29
SSDEEP 12288:FQJWeoQtcgizEqRefPUpZYYJUGxXMZVrcFbmDzjTDzjT+:FW3oQqKmYCMZVrclmDzjTDzjT+
IMP 0F3ECC99664419BA70D4CB47E82F529F
PESHA1 3B302FA4942C47820F1C6985385691E28B0BF1C0
PE256 12745D158344E0743CBEC7500E6F9EBE73691B2E514A4E14CE3EB5F1DFC10E94

DLL Exports:

Function Name Ordinal Type
Startup 2 Exported Function
Shutdown 1 Exported Function
DllGetMFDebugHlp 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mfdetours.dll
  • Product Name: Media Foundation Detours Tracing DLL
  • Company Name: Microsoft
  • File Version: 1.1.0.1
  • Product Version: 1.1.0.1
  • Language: Language Neutral
  • Legal Copyright: (c) Microsoft. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

MIT License. Copyright (c) 2020-2021 Strontic.