Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.7600.16385 (win7_rtm.090713-1255) 3.36%
12.0.7600.16385 (win7_rtm.090713-1255) 2.36%
12.0.7600.16385 (win7_rtm.090713-1255) 71.73%
12.0.7600.16385 (win7_rtm.090713-1255) 15.18%
12.0.7600.16385 (win7_rtm.090713-1255) 4.96%
12.0.7600.16385 (win7_rtm.090713-1255) 1.89%
12.0.7600.16385 (win7_rtm.090713-1255) 0.05%
12.0.7600.16385 (win7_rtm.090713-1255) 0.14%
12.0.7600.16385 (win7_rtm.090713-1255) 0.14%
12.0.7600.16385 (win7_rtm.090713-1255) 0.19%
(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumKeyA, RegDeleteKeyA, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, CryptGetHashParam, EventEnabled, CryptAcquireContextW, CryptReleaseContext, CryptImportKey, CryptCreateHash, CryptHashData, CryptVerifySignatureW, CryptDestroyHash, CryptDestroyKey, RegSetValueExA, RegQueryValueExA, RegQueryValueExW, RegGetValueW, RegEnumKeyW, RegOpenKeyExW, RegCloseKey, RegEnumValueW, TraceMessage, EventWrite, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, EventUnregister, EventRegister, RegDeleteValueW, RegCreateKeyExA
avrt.dll
AvSetMmThreadCharacteristicsW
kernel32.dll
GetModuleFileNameW, GetHandleInformation, TzSpecificLocalTimeToSystemTime, OpenProcess, LoadLibraryExW, InitializeCriticalSectionAndSpinCount, VirtualProtect, GetComputerNameW, GetOverlappedResult, SetLastError, GetVersion, GetLocalTime, GlobalMemoryStatus, GetDiskFreeSpaceA, GetEnvironmentStringsW, GetEnvironmentStrings, lstrlenW, FreeEnvironmentStringsW, FreeEnvironmentStringsA, DeviceIoControl, DuplicateHandle, GetCurrentThread, SetThreadAffinityMask, GetLogicalProcessorInformation, IsProcessorFeaturePresent, lstrcmpW, QueryPerformanceFrequency, ReleaseMutex, CreateMutexW, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, OpenFileMappingW, CreateThread, OpenEventW, OpenSemaphoreW, InterlockedExchangeAdd, InterlockedCompareExchange64, WaitForMultipleObjectsEx, Sleep, GetCurrentThreadId, ReleaseSemaphore, CreateSemaphoreW, HeapSize, WaitForSingleObjectEx, SetUnhandledExceptionFilter, TerminateProcess, GetDiskFreeSpaceW, GetFileSizeEx, GetFullPathNameW, SetFilePointerEx, SetEndOfFile, SetFileValidData, VirtualAlloc, VirtualFree, GetSystemInfo, CompareStringOrdinal, GetTickCount, GetSystemTimeAsFileTime, CompareFileTime, GetWindowsDirectoryW, GetSystemTime, SystemTimeToFileTime, DeleteFileA, GetTempFileNameW, GetFileSize, WriteFile, DeleteFileW, SearchPathW, GetTempPathW, GetFileAttributesW, CopyFileW, CreateDirectoryW, GetVersionExW, GetModuleHandleW, FileTimeToSystemTime, GlobalAlloc, GetSystemDirectoryA, LocalAlloc, LocalFree, InterlockedExchange, CreateFileA, WaitForMultipleObjects, IsWow64Process, Wow64DisableWow64FsRedirection, Wow64RevertWow64FsRedirection, GetEnvironmentVariableW, ExpandEnvironmentStringsW, CreateProcessW, GetExitCodeProcess, LoadLibraryW, DebugBreak, GetSystemPowerStatus, GetCurrentProcess, InitializeCriticalSection, DeleteCriticalSection, InterlockedIncrement, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, HeapFree, GetProcessHeap, HeapAlloc, GetModuleHandleExW, DisableThreadLibraryCalls, DelayLoadFailureHook, GetProcAddress, GetLastError, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, MultiByteToWideChar, WideCharToMultiByte, GlobalFree, GlobalUnlock, GlobalLock, GetUserDefaultLCID, ResetEvent, SetEvent, WaitForSingleObject, CreateEventW, CloseHandle, MulDiv, QueryPerformanceCounter, GetCurrentProcessId, CompareStringA, lstrlenA, lstrcmpiA, lstrcmpA, ReadFile, CreateFileW, CopyFileExW, LCIDToLocaleName, LocaleNameToLCID, GetLocaleInfoA, GetVersionExA, LoadLibraryA, GetModuleHandleA, UnhandledExceptionFilter, GetDiskFreeSpaceExW
ksuser.dll
KsCreatePin, KsCreateClock
mfplat.dll
MFCreateAlignedMemoryBuffer, ValidateWaveFormat, MFInitMediaTypeFromAMMediaType, MFLockPlatform, MFUnlockPlatform, MFAllocateWorkQueueEx, MFJoinIoPort, MFCreateMemoryStream, MFCreateGuid, MFBlockThread, MFUnblockThread, MFGetNumericNameFromSockaddr, MFSetSockaddrAny, MFCompareSockaddrAddresses, MFGetSockaddrFromNumericName, MFGetConfigurationPolicy, MFGetConfigurationStore, MFGetRandomNumber, MFGetPlatformVersion, MFBeginUnregisterWorkQueueWithMMCSS, MFBeginRegisterWorkQueueWithMMCSS, MFAllocateWorkQueue, MFGetWorkQueueMMCSSTaskId, MFGetWorkQueueMMCSSClass, MFEndRegisterWorkQueueWithMMCSS, MFEndUnregisterWorkQueueWithMMCSS, MFCreateSystemTimeSource, MFIsFeatureEnabled, MFGetConfigurationDWORD, MFAppendCollection, MFGetStrideForBitmapInfoHeader, MFWrapMediaType, MFPutWorkItem, MFCreateEventQueue, MFPutWorkItemEx, MFGetPlatform, MFTEnumEx, MFGetConfigurationString, MFCreateCollection, MFCreateMediaBufferWrapper, MFUnwrapMediaType, MFCreateMediaEvent, CreatePropVariant, MFTEnum, MFCreateURLFromPath, MFCancelCreateFile, MFEndCreateFile, MFCreatePathFromURL, MFBeginCreateFile, MFCompareFullToPartialMediaType, MFCreateFile, MFCreateMemoryBuffer, MFCreateAsyncResult, MFInvokeCallback, MFScheduleWorkItem, FormatTagFromWfx, MFCancelWorkItem, MFScheduleWorkItemEx, MFllMulDiv, MFUnlockWorkQueue, MFLockWorkQueue, MFCreateAttributes, MFCalculateImageSize, MFInitAttributesFromBlob, MFDeserializeAttributesFromStream, MFGetAttributesAsBlobSize, MFGetAttributesAsBlob, MFSerializeAttributesToStream, MFCreateMediaTypeFromRepresentation, MFAddPeriodicCallback, MFGetTimerPeriodicity, MFRemovePeriodicCallback, MFGetSystemTime, MFCalculateBitmapImageSize, MFCreateTempFile, MFCreateStreamDescriptor, MFValidateMediaTypeSize, MFCreateAudioMediaType, MFCreateVideoMediaTypeFromVideoInfoHeader, MFCreateMediaType, MFCreatePresentationDescriptor, MFFrameRateToAverageTimePerFrame, MFCreateSample, CreatePropertyStore, DestroyPropVariant, MFCreateSourceResolver, MFHeapFree, MFHeapAlloc, MFCreateUdpSockets, MFPlatformLittleEndian, MFPlatformBigEndian, MFCreateVideoMediaTypeFromBitMapInfoHeaderEx, MFGetAdaptersAddresses, MFFreeAdaptersAddresses, MFEndGetHostByName, MFCreateSocket, MFBeginGetHostByName, MFCreateVideoMediaTypeFromVideoInfoHeader2, MFGetMFTMerit, MFStreamDescriptorProtectMediaType, MFTRegisterLocalByCLSID, MFAverageTimePerFrameToFrameRate, MFIsQueueThread, MFShutdown, MFStartup, MFCopyImage, MFInitAMMediaTypeFromMFMediaType, MFInitMediaTypeFromWaveFormatEx
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError
ole32.dll
CoUninitialize, CoInitializeEx, CoInitialize, CreateItemMoniker, GetRunningObjectTable, StringFromCLSID, CoTaskMemRealloc, CoGetMalloc, CoCreateGuid, CoUnmarshalInterface, CreateStreamOnHGlobal, CoMarshalInterface, GetHGlobalFromStream, CLSIDFromString, CoCreateFreeThreadedMarshaler, CoFileTimeNow, CoCreateInstance, PropVariantCopy, CoTaskMemFree, PropVariantClear, CoTaskMemAlloc, StringFromGUID2
rpcrt4.dll
UuidCreate
shlwapi.dll
SHStrDupW, SHCreateStreamOnFileW
user32.dll
MsgWaitForMultipleObjects, InSendMessage, SetRect, LoadStringW, GetSystemMetrics, PeekMessageW, DispatchMessageW, GetClientRect
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
Export table
AppendPropVariant
ConvertPropVariant
CopyPropertyStore
CreateNamedPropertyStore
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExtractPropVariant
MergePropertyStore
MFCreate3GPMediaSink
MFCreateAggregateSource
MFCreateAppSourceProxy
MFCreateASFByteStreamPlugin
MFCreateASFContentInfo
MFCreateASFIndexer
MFCreateASFIndexerByteStream
MFCreateASFMediaSink
MFCreateASFMediaSinkActivate
MFCreateASFMultiplexer
MFCreateASFProfile
MFCreateASFProfileFromPresentationDescriptor
MFCreateASFSplitter
MFCreateASFStreamingMediaSink
MFCreateASFStreamingMediaSinkActivate
MFCreateASFStreamSelector
MFCreateAudioRenderer
MFCreateAudioRendererActivate
MFCreateByteCacheFile
MFCreateCacheManager
MFCreateCredentialCache
MFCreateDeviceSource
MFCreateDeviceSourceActivate
MFCreateDrmNetNDSchemePlugin
MFCreateFileBlockMap
MFCreateFileSchemePlugin
MFCreateHttpSchemePlugin
MFCreateLPCMByteStreamPlugin
MFCreateMediaProcessor
MFCreateMediaSession
MFCreateMP3ByteStreamPlugin
MFCreateMP3MediaSink
MFCreateMPEG4MediaSink
MFCreateNetSchemePlugin
MFCreateNSCByteStreamPlugin
MFCreatePMPHost
MFCreatePMPMediaSession
MFCreatePMPServer
MFCreatePresentationClock
MFCreatePresentationDescriptorFromASFProfile
MFCreateProxyLocator
MFCreateRemoteDesktopPlugin
MFCreateSAMIByteStreamPlugin
MFCreateSampleCopierMFT
MFCreateSampleGrabberSinkActivate
MFCreateSecureHttpSchemePlugin
MFCreateSequencerSegmentOffset
MFCreateSequencerSource
MFCreateSequencerSourceRemoteStream
MFCreateSimpleTypeHandler
MFCreateSourceResolver
MFCreateStandardQualityManager
MFCreateTopoLoader
MFCreateTopology
MFCreateTopologyNode
MFCreateTranscodeProfile
MFCreateTranscodeSinkActivate
MFCreateTranscodeTopology
MFCreateUrlmonSchemePlugin
MFCreateVideoRenderer
MFCreateVideoRendererActivate
MFCreateWMAEncoderActivate
MFCreateWMVEncoderActivate
MFEnumDeviceSources
MFGetMultipleServiceProviders
MFGetService
MFGetSupportedMimeTypes
MFGetSupportedSchemes
MFGetTopoNodeCurrentType
MFReadSequencerSegmentOffset
MFRequireProtectedEnvironment
MFShutdownObject
MFTranscodeGetAudioOutputAvailableTypes

mf.dll

Media Foundation DLL by Microsoft

Remove mf.dll
Version:   12.0.7600.16385 (win7_rtm.090713-1255)
MD5:   80efbcafbd26956b69ee9cefc93423b0
SHA1:   96210295637bc38f1690d4e34d674c48db77929d
SHA256:   9dfc9fcfd3f88cd2952d3d6acb32d6e98ec09c492727a8a5e73eba82f6f6c9e8
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is mf.dll?

Microsoft Media Foundation enables the development of applications and components for using digital media on Windows Vista and later.

About mf.dll (from Microsoft)

Media Foundation is the next generation multimedia platform for Windows that enables developers, consumers, and content providers to embrace the new wave of premium content with enhanced robustness, u

Overview

mf.dll is loaded as dynamic link library that runs in the context of a process. This version is designed to run on Windows 7.

DetailsDetails

File name:mf.dll
Publisher:Microsoft Corporation
Product name:Media Foundation DLL
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\mf.dll
Original name:mf.dll.mui
File version:12.0.7600.16385 (win7_rtm.090713-1255)
Product version:12.0.7600.16385
Size:3.03 MB (3,177,984 bytes)
Digital DNA
PE subsystem:Windows Console
Entropy:6.774363
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Approved shell extension
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'MF ADTS Property Handler' with CLSID {80009818-f38f-4af1-87b5-eadab9433e58}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 58.00%
Windows 7 Ultimate 27.50%
Windows 7 Professional 10.00%
Windows 7 Home Basic 3.00%
Windows Seven Black Edition 1.00%
Windows 7 Starter 0.50%

Distribution by countryDistribution by country

United States installs about 47.47% of Media Foundation DLL.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 25.38%
Hewlett-Packard 21.15%
ASUS 15.38%
Toshiba 12.31%
Acer 11.54%
Sony 6.15%
Lenovo 2.31%
GIGABYTE 1.92%
Alienware 1.54%
Samsung 1.54%
Sahara 0.77%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE