mfdetours.dll
v1.1.0.1
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x31b0
Startup
#2 · 0x3380
DllGetMFDebugHlp
#3 · 0x7eb0
No function matches your filter.
Imported DLLs & functions 121
CoTaskMemAlloc
0x180044058
CoTaskMemFree
0x180044048
PropVariantClear
0x180044050
StringFromGUID2
0x180044040
GetLastError
0x180044098
RaiseException
0x180044088
SetLastError
0x180044090
SetUnhandledExceptionFilter
0x180044080
UnhandledExceptionFilter
0x1800440a0
CloseHandle
0x1800440b0
GetProcessHeap
0x1800440d8
HeapAlloc
0x1800440e0
HeapDestroy
0x1800440c0
HeapFree
0x1800440e8
HeapReAlloc
0x1800440c8
HeapSize
0x1800440d0
InitializeSListHead
0x1800440f8
DisableThreadLibraryCalls
0x180044138
FindResourceExW
0x180044130
FreeLibrary
0x180044108
GetModuleFileNameA
0x180044110
GetModuleHandleExW
0x180044128
GetModuleHandleW
0x180044150
GetProcAddress
0x180044148
LoadResource
0x180044118
LockResource
0x180044140
SizeofResource
0x180044120
LoadLibraryA
0x180044160
ReadProcessMemory
0x1800441b0
VirtualAlloc
0x1800441a0
VirtualAllocEx
0x180044190
VirtualFree
0x180044170
VirtualProtect
0x180044180
VirtualProtectEx
0x180044198
VirtualQuery
0x180044178
VirtualQueryEx
0x180044188
WriteProcessMemory
0x1800441a8
GetEnvironmentVariableA
0x1800441c0
GetEnvironmentVariableW
0x1800441d0
SetEnvironmentVariableW
0x1800441c8
CreateProcessA
0x1800441e0
CreateProcessW
0x1800441e8
GetCurrentProcess
0x180044208
GetCurrentProcessId
0x1800441f0
GetCurrentThreadId
0x1800441f8
ResumeThread
0x180044210
TerminateProcess
0x180044200
FlushInstructionCache
0x180044230
GetThreadContext
0x180044220
IsProcessorFeaturePresent
0x180044238
SetThreadContext
0x180044228
QueryPerformanceCounter
0x180044248
RtlCaptureContext
0x180044280
RtlLookupFunctionEntry
0x180044278
RtlVirtualUnwind
0x180044270
AcquireSRWLockExclusive
0x1800442c0
AcquireSRWLockShared
0x1800442b0
DeleteCriticalSection
0x1800442d8
EnterCriticalSection
0x1800442d0
InitializeCriticalSection
0x1800442e0
InitializeSRWLock
0x1800442b8
LeaveCriticalSection
0x1800442c8
ReleaseSRWLockExclusive
0x1800442e8
ReleaseSRWLockShared
0x1800442a8
GetSystemTimeAsFileTime
0x1800442f8
IsWow64Process
0x180044308
__C_specific_handler
0x180044398
_o___std_type_info_destroy_list
0x1800443c8
_o___stdio_common_vsprintf
0x1800443b8
_o___stdio_common_vsprintf_s
0x1800443b0
_o___stdio_common_vswprintf
0x1800443a8
_o___stdio_common_vswprintf_s
0x1800443a0
_o__callnewh
0x1800443e0
_o__cexit
0x1800443d8
_o__configure_narrow_argv
0x1800443d0
_o__crt_atexit
0x1800443c0
_o__errno
0x180044318
_o__execute_onexit_table
0x180044320
_o__gcvt_s
0x180044328
_o__initialize_narrow_environment
0x180044330
_o__initialize_onexit_table
0x180044338
_o__invalid_parameter_noinfo
0x180044340
_o__mbsinc
0x180044348
_o__recalloc
0x180044350
_o__register_onexit_function
0x180044358
_o__seh_filter_dll
0x180044360
_o__ultoa_s
0x180044368
_o__wtoi
0x180044370
_o_calloc
0x180044378
_o_free
0x180044380
_o_malloc
0x180044388
_o_wmemcpy_s
0x180044390
memcpy
0x1800443f0
memmove
0x1800443e8
memset
0x180044418
EventRegister
0x180044430
EventUnregister
0x180044428
EventWrite
0x180044438
ImagehlpApiVersionEx
0x180044448
SymCleanup
0x180044460
SymFromName
0x180044488
SymGetModuleInfo64
0x180044468
SymGetOptions
0x180044458
SymInitialize
0x180044470
SymLoadModuleEx
0x180044478
SymRegisterCallback64
0x180044480
SymSetOptions
0x180044450
No function matches your filter.