mfsvr.dll

Description: Media Foundation Simple Video Renderer DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: b6d740d2020882e5a2c95834ce951f69

File Size: 1.5 MB

Uploaded At: Dec. 1, 2025, 7:33 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x97c90)
  • DllGetClassObject (Ordinal: 2, Address: 0x1cea0)
  • MFCreateHDCPStatus (Ordinal: 3, Address: 0x97cd0)
  • MFCreateMediaEngineVideoOTA (Ordinal: 4, Address: 0x97dd0)
  • MFCreateOPMHelper (Ordinal: 5, Address: 0x97ef0)
  • MFCreateTimedTextRenderer (Ordinal: 6, Address: 0x980b0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-2.dll
  • AppPolicyGetWindowingModel (Address: 0x180118040)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180118050)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1801180a0)
  • CoCreateInstance (Address: 0x180118068)
  • CoTaskMemAlloc (Address: 0x180118090)
  • CoTaskMemFree (Address: 0x180118098)
  • CoWaitForMultipleHandles (Address: 0x180118060)
  • CreateStreamOnHGlobal (Address: 0x180118070)
  • PropVariantClear (Address: 0x180118080)
  • PropVariantCopy (Address: 0x180118088)
  • StringFromGUID2 (Address: 0x180118078)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • NdrProxyForwardingFunction25 (Address: 0x1801180c0)
  • NdrProxyForwardingFunction26 (Address: 0x180118168)
  • NdrProxyForwardingFunction3 (Address: 0x180118158)
  • NdrProxyForwardingFunction4 (Address: 0x1801180e8)
  • NdrProxyForwardingFunction5 (Address: 0x1801180e0)
  • NdrProxyForwardingFunction6 (Address: 0x180118128)
  • NdrProxyForwardingFunction7 (Address: 0x180118170)
  • ObjectStublessClient10 (Address: 0x1801180b0)
  • ObjectStublessClient11 (Address: 0x1801180c8)
  • ObjectStublessClient12 (Address: 0x180118148)
  • ObjectStublessClient13 (Address: 0x180118118)
  • ObjectStublessClient14 (Address: 0x1801180f0)
  • ObjectStublessClient15 (Address: 0x180118198)
  • ObjectStublessClient16 (Address: 0x180118138)
  • ObjectStublessClient17 (Address: 0x1801180b8)
  • ObjectStublessClient18 (Address: 0x180118160)
  • ObjectStublessClient19 (Address: 0x180118100)
  • ObjectStublessClient20 (Address: 0x180118190)
  • ObjectStublessClient21 (Address: 0x180118150)
  • ObjectStublessClient22 (Address: 0x180118188)
  • ObjectStublessClient23 (Address: 0x180118130)
  • ObjectStublessClient24 (Address: 0x1801181a0)
  • ObjectStublessClient27 (Address: 0x180118108)
  • ObjectStublessClient28 (Address: 0x180118178)
  • ObjectStublessClient29 (Address: 0x180118140)
  • ObjectStublessClient3 (Address: 0x1801180f8)
  • ObjectStublessClient4 (Address: 0x180118180)
  • ObjectStublessClient5 (Address: 0x180118110)
  • ObjectStublessClient7 (Address: 0x180118120)
  • ObjectStublessClient8 (Address: 0x1801180d8)
  • ObjectStublessClient9 (Address: 0x1801180d0)
api-ms-win-core-console-l1-1-0.dll
  • AllocConsole (Address: 0x1801181b0)
api-ms-win-core-console-l2-2-0.dll
  • SetConsoleTitleW (Address: 0x1801181c0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1801181e0)
  • IsDebuggerPresent (Address: 0x1801181d0)
  • OutputDebugStringA (Address: 0x1801181e8)
  • OutputDebugStringW (Address: 0x1801181d8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1801181f8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180118208)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180118218)
  • RaiseException (Address: 0x180118238)
  • SetLastError (Address: 0x180118228)
  • SetUnhandledExceptionFilter (Address: 0x180118220)
  • UnhandledExceptionFilter (Address: 0x180118230)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileA (Address: 0x180118268)
  • CreateFileW (Address: 0x180118278)
  • FlushFileBuffers (Address: 0x180118280)
  • GetFileSize (Address: 0x180118260)
  • ReadFile (Address: 0x180118248)
  • SetFilePointer (Address: 0x180118270)
  • SetFilePointerEx (Address: 0x180118250)
  • WriteFile (Address: 0x180118258)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180118290)
  • DuplicateHandle (Address: 0x180118298)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1801182b0)
  • HeapAlloc (Address: 0x1801182a8)
  • HeapFree (Address: 0x1801182c0)
  • HeapReAlloc (Address: 0x1801182b8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1801182d8)
  • LocalFree (Address: 0x1801182d0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetSystemPowerStatus (Address: 0x1801182f0)
  • PulseEvent (Address: 0x1801182e8)
api-ms-win-core-largeinteger-l1-1-0.dll
  • MulDiv (Address: 0x180118300)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180118340)
  • FreeLibrary (Address: 0x180118338)
  • GetModuleFileNameA (Address: 0x180118318)
  • GetModuleFileNameW (Address: 0x180118328)
  • GetModuleHandleExW (Address: 0x180118310)
  • GetModuleHandleW (Address: 0x180118348)
  • GetProcAddress (Address: 0x180118330)
  • LoadLibraryExW (Address: 0x180118320)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x180118358)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180118368)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x180118380)
  • MapViewOfFile (Address: 0x180118378)
api-ms-win-core-processenvironment-l1-1-0.dll
  • GetStdHandle (Address: 0x180118390)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1801183b0)
  • GetCurrentProcess (Address: 0x1801183e8)
  • GetCurrentProcessId (Address: 0x1801183d0)
  • GetCurrentThreadId (Address: 0x1801183a0)
  • GetExitCodeThread (Address: 0x1801183c0)
  • GetProcessTimes (Address: 0x1801183c8)
  • OpenProcessToken (Address: 0x1801183e0)
  • TerminateProcess (Address: 0x1801183a8)
  • TlsGetValue (Address: 0x1801183b8)
  • TlsSetValue (Address: 0x1801183d8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180118400)
  • OpenProcess (Address: 0x1801183f8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180118410)
  • QueryPerformanceFrequency (Address: 0x180118418)
api-ms-win-core-psapi-l1-1-0.dll
  • K32GetProcessMemoryInfo (Address: 0x180118428)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180118470)
  • RegCreateKeyExA (Address: 0x180118460)
  • RegGetValueW (Address: 0x180118450)
  • RegNotifyChangeKeyValue (Address: 0x180118438)
  • RegOpenKeyExW (Address: 0x180118458)
  • RegQueryValueExA (Address: 0x180118440)
  • RegQueryValueExW (Address: 0x180118448)
  • RegSetValueExA (Address: 0x180118468)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x180118488)
  • GetStringTypeW (Address: 0x180118490)
  • MultiByteToWideChar (Address: 0x180118498)
  • WideCharToMultiByte (Address: 0x180118480)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiA (Address: 0x1801184a8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180118530)
  • AcquireSRWLockShared (Address: 0x180118570)
  • CancelWaitableTimer (Address: 0x180118528)
  • CreateEventExW (Address: 0x180118500)
  • CreateEventW (Address: 0x180118548)
  • CreateMutexExW (Address: 0x1801184e8)
  • CreateSemaphoreExW (Address: 0x180118568)
  • CreateWaitableTimerExW (Address: 0x180118540)
  • DeleteCriticalSection (Address: 0x180118510)
  • EnterCriticalSection (Address: 0x180118518)
  • InitializeCriticalSection (Address: 0x180118508)
  • InitializeCriticalSectionEx (Address: 0x1801184f0)
  • InitializeSRWLock (Address: 0x1801184e0)
  • LeaveCriticalSection (Address: 0x180118520)
  • OpenSemaphoreW (Address: 0x1801184c8)
  • ReleaseMutex (Address: 0x1801184b8)
  • ReleaseSemaphore (Address: 0x1801184f8)
  • ReleaseSRWLockExclusive (Address: 0x1801184d0)
  • ReleaseSRWLockShared (Address: 0x180118560)
  • ResetEvent (Address: 0x180118558)
  • SetEvent (Address: 0x180118550)
  • SetWaitableTimer (Address: 0x180118538)
  • WaitForSingleObject (Address: 0x1801184d8)
  • WaitForSingleObjectEx (Address: 0x1801184c0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x180118588)
  • Sleep (Address: 0x180118598)
  • SleepConditionVariableSRW (Address: 0x180118590)
  • WakeAllConditionVariable (Address: 0x180118580)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x1801185a8)
  • GetSystemTimeAsFileTime (Address: 0x1801185b0)
  • GetTickCount (Address: 0x1801185b8)
  • GetTickCount64 (Address: 0x1801185c0)
  • GlobalMemoryStatusEx (Address: 0x1801185c8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1801185e0)
  • CreateThreadpoolTimer (Address: 0x1801185f0)
  • SetThreadpoolTimer (Address: 0x1801185d8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1801185e8)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x180118600)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180118618)
  • EncodePointer (Address: 0x180118610)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180118630)
  • RoGetActivationFactory (Address: 0x180118628)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180118660)
  • WindowsCreateStringReference (Address: 0x180118640)
  • WindowsDeleteString (Address: 0x180118650)
  • WindowsDuplicateString (Address: 0x180118658)
  • WindowsGetStringRawBuffer (Address: 0x180118648)
api-ms-win-dx-d3dkmt-l1-1-0.dll
  • GdiEntry13 (Address: 0x180118670)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1801186a0)
  • GetTraceEnableLevel (Address: 0x180118690)
  • GetTraceLoggerHandle (Address: 0x180118680)
  • RegisterTraceGuidsW (Address: 0x1801186a8)
  • TraceMessage (Address: 0x180118698)
  • UnregisterTraceGuids (Address: 0x180118688)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x1801186d8)
  • EventRegister (Address: 0x1801186c0)
  • EventSetInformation (Address: 0x1801186d0)
  • EventUnregister (Address: 0x1801186c8)
  • EventWriteTransfer (Address: 0x1801186b8)
api-ms-win-mm-time-l1-1-0.dll
  • timeBeginPeriod (Address: 0x1801186f0)
  • timeEndPeriod (Address: 0x1801186e8)
api-ms-win-power-base-l1-1-0.dll
  • CallNtPowerInformation (Address: 0x180118700)
api-ms-win-power-setting-l1-1-0.dll
  • PowerGetActiveScheme (Address: 0x180118710)
  • PowerReadDCValue (Address: 0x180118728)
  • PowerSettingRegisterNotification (Address: 0x180118718)
  • PowerSettingUnregisterNotification (Address: 0x180118720)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x180118738)
api-ms-win-security-systemfunctions-l1-1-0.dll
  • SystemFunction036 (Address: 0x180118748)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x180118758)
  • BCryptCreateHash (Address: 0x180118790)
  • BCryptDestroyHash (Address: 0x180118760)
  • BCryptDestroyKey (Address: 0x180118780)
  • BCryptFinishHash (Address: 0x180118798)
  • BCryptGetProperty (Address: 0x180118770)
  • BCryptHashData (Address: 0x180118788)
  • BCryptImportKeyPair (Address: 0x180118778)
  • BCryptOpenAlgorithmProvider (Address: 0x1801187a0)
  • BCryptVerifySignature (Address: 0x180118768)
CRYPT32.dll
  • CryptBinaryToStringA (Address: 0x180117e90)
MFPlat.DLL
  • MFAllocateSerialWorkQueue (Address: 0x180117f90)
  • MFCancelWorkItem (Address: 0x180117f70)
  • MFCopyImage (Address: 0x180117f10)
  • MFCreateAsyncResult (Address: 0x180117f08)
  • MFCreateAttributes (Address: 0x180117fa0)
  • MFCreateCollection (Address: 0x180117ed0)
  • MFCreateDXGIDeviceManager (Address: 0x180117f98)
  • MFCreateDXGISurfaceBuffer (Address: 0x180117f20)
  • MFCreateEMEStoreObject (Address: 0x180117ef8)
  • MFCreateEventQueue (Address: 0x180117ef0)
  • MFCreateMediaEvent (Address: 0x180117eb0)
  • MFCreateMediaType (Address: 0x180117f80)
  • MFCreateSample (Address: 0x180117f78)
  • MFCreateVideoMediaType (Address: 0x180117ee0)
  • MFCreateVideoSampleAllocatorEx (Address: 0x180117f50)
  • MFCreateWICBitmapBuffer (Address: 0x180117f18)
  • MFDeserializeAttributesFromStream (Address: 0x180117eb8)
  • MFGetCallStackTracingWeakReference (Address: 0x180117ea0)
  • MFGetPlaneSize (Address: 0x180117f60)
  • MFGetSystemTime (Address: 0x180117ec8)
  • MFInitVideoFormat_RGB (Address: 0x180117ee8)
  • MFllMulDiv (Address: 0x180117f40)
  • MFLockDXGIDeviceManager (Address: 0x180117f88)
  • MFLockSharedWorkQueue (Address: 0x180117f00)
  • MFLockWorkQueue (Address: 0x180117f58)
  • MFMapDXGIFormatToDX9Format (Address: 0x180117ed8)
  • MFPutWaitingWorkItem (Address: 0x180117f28)
  • MFPutWorkItem (Address: 0x180117f48)
  • MFPutWorkItem2 (Address: 0x180117ea8)
  • MFScheduleWorkItem (Address: 0x180117f38)
  • MFSerializeAttributesToStream (Address: 0x180117ec0)
  • MFUnlockDXGIDeviceManager (Address: 0x180117f30)
  • MFUnlockWorkQueue (Address: 0x180117f68)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1801188c8)
  • ___lc_handle_func (Address: 0x1801189c8)
  • ___mb_cur_max_func (Address: 0x1801188a0)
  • __C_specific_handler (Address: 0x1801188c0)
  • __crtLCMapStringW (Address: 0x180118838)
  • __CxxFrameHandler3 (Address: 0x180118960)
  • __dllonexit (Address: 0x1801187d0)
  • __pctype_func (Address: 0x1801188f0)
  • __uncaught_exception (Address: 0x180118900)
  • _amsg_exit (Address: 0x180118850)
  • _callnewh (Address: 0x1801189b0)
  • _CxxThrowException (Address: 0x1801188d8)
  • _errno (Address: 0x180118868)
  • _finite (Address: 0x1801189e0)
  • _gcvt_s (Address: 0x1801187d8)
  • _i64toa_s (Address: 0x1801187b8)
  • _initterm (Address: 0x180118860)
  • _ismbblead (Address: 0x1801188e0)
  • _lock (Address: 0x180118840)
  • _ltoa_s (Address: 0x1801187b0)
  • _onexit (Address: 0x180118800)
  • _purecall (Address: 0x1801189d0)
  • _ultoa_s (Address: 0x180118808)
  • _unlock (Address: 0x180118848)
  • _vsnprintf (Address: 0x180118978)
  • _vsnprintf_s (Address: 0x180118810)
  • _vsnwprintf (Address: 0x1801189a8)
  • _wcsdup (Address: 0x180118928)
  • _wsetlocale (Address: 0x1801187c0)
  • _XcptFilter (Address: 0x180118820)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1801188b0)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x180118878)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180118908)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1801187f8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180118920)
  • ??0exception@@QEAA@XZ (Address: 0x180118818)
  • ??1bad_cast@@UEAA@XZ (Address: 0x180118888)
  • ??1exception@@UEAA@XZ (Address: 0x180118910)
  • ??1type_info@@UEAA@XZ (Address: 0x180118898)
  • ??8type_info@@QEBAHAEBV0@@Z (Address: 0x180118930)
  • ??9type_info@@QEBAHAEBV0@@Z (Address: 0x180118988)
  • ?terminate@@YAXXZ (Address: 0x180118870)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180118918)
  • calloc (Address: 0x180118990)
  • ctime (Address: 0x180118940)
  • floor (Address: 0x1801189d8)
  • free (Address: 0x1801189c0)
  • localeconv (Address: 0x180118858)
  • malloc (Address: 0x1801189b8)
  • memcmp (Address: 0x1801188b8)
  • memcpy (Address: 0x180118890)
  • memcpy_s (Address: 0x1801189a0)
  • memmove (Address: 0x1801187e0)
  • memset (Address: 0x1801188d0)
  • qsort (Address: 0x180118998)
  • rand (Address: 0x1801187f0)
  • realloc (Address: 0x180118880)
  • setlocale (Address: 0x180118828)
  • sprintf_s (Address: 0x1801188e8)
  • sqrt (Address: 0x1801187c8)
  • sqrtf (Address: 0x1801188a8)
  • srand (Address: 0x1801187e8)
  • strcspn (Address: 0x180118830)
  • strncpy_s (Address: 0x180118970)
  • strnlen (Address: 0x180118968)
  • time (Address: 0x180118938)
  • toupper (Address: 0x180118948)
  • vsprintf_s (Address: 0x1801188f8)
  • wcscat_s (Address: 0x180118958)
  • wcscmp (Address: 0x1801189e8)
  • wcscpy_s (Address: 0x180118980)
  • wcsncmp (Address: 0x180118950)
ntdll.dll
  • NtPowerInformation (Address: 0x180118a10)
  • RtlCaptureContext (Address: 0x180118a08)
  • RtlLookupFunctionEntry (Address: 0x180118a00)
  • RtlNtStatusToDosError (Address: 0x1801189f8)
  • RtlVirtualUnwind (Address: 0x180118a18)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180118010)
  • CStdStubBuffer_Connect (Address: 0x180118030)
  • CStdStubBuffer_CountRefs (Address: 0x180118020)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180117fc0)
  • CStdStubBuffer_DebugServerRelease (Address: 0x180117fb8)
  • CStdStubBuffer_Disconnect (Address: 0x180117fb0)
  • CStdStubBuffer_Invoke (Address: 0x180117fe0)
  • CStdStubBuffer_IsIIDSupported (Address: 0x180117fc8)
  • CStdStubBuffer_QueryInterface (Address: 0x180118028)
  • IUnknown_AddRef_Proxy (Address: 0x180117fd8)
  • IUnknown_QueryInterface_Proxy (Address: 0x180117fd0)
  • IUnknown_Release_Proxy (Address: 0x180118018)
  • NdrCStdStubBuffer_Release (Address: 0x180117fe8)
  • NdrDllCanUnloadNow (Address: 0x180117ff0)
  • NdrDllGetClassObject (Address: 0x180117ff8)
  • NdrOleAllocate (Address: 0x180118000)
  • NdrOleFree (Address: 0x180118008)