mfpmp.exe
- File Path:
C:\Windows\system32\mfpmp.exe
- Description: Media Foundation Protected Pipeline EXE
Hashes
| Type |
Hash |
| MD5 |
6DD50C00234841A2005A22E8486FAB63 |
| SHA1 |
857EB88AE4A34F5F08EF9E608D6058C4AC0E2F28 |
| SHA256 |
444BBAC8386B3895ED92400B77C4E8A933A9F4E76CC7633CEBA89DA539A1EC09 |
| SHA384 |
174A1FF2173C5EAB808754E0549B19E68A5136A925F56423A994F5A09E635CA2981095852A9F6405AE3B2955E06A5DF0 |
| SHA512 |
222406BA888A09CD2D330AFA56FF54C768A28208E24F5B0996FA5CA6AD0C625A9E084CC38532027ED035A4DB9CD06C8370CB9EB585CF0F26EA1A8598294541CA |
| SSDEEP |
768:3v/5aH6gxvJv/CUEbp73TG6t0cbxRz1kEAO2LxqObXj1PfRI:ZPgBJ3GF7DGe0OxRz2EAnxq2pPZI |
| IMP |
7AC270787865AB99D9D94F85C379C3CB |
| PESHA1 |
61A10C176ED8EDB8CC1969899E9111D84818AA6E |
| PE256 |
5F68ECB1036F01DC4D33CA77093D7C2662C6C3045B97C8049F24B078F314B26E |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\System32\advapi32.dll |
| C:\Windows\System32\bcrypt.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\cfgmgr32.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\system32\CRYPTBASE.DLL |
| C:\Windows\System32\kernel.appcore.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\system32\ksuser.dll |
| C:\Windows\system32\MFCORE.dll |
| C:\Windows\system32\MFPlat.DLL |
| C:\Windows\system32\mfpmp.exe |
| C:\Windows\System32\MSASN1.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\powrprof.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\shcore.dll |
| C:\Windows\System32\ucrtbase.dll |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4
- Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: mf.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/444bbac8386b3895ed92400b77c4e8a933a9f4e76cc7633ceba89da539a1ec09/detection/
MIT License. Copyright (c) 2020-2021 Strontic.