mfpmp.exe

  • File Path: C:\Windows\system32\mfpmp.exe
  • Description: Media Foundation Protected Pipeline EXE

Hashes

Type Hash
MD5 6DD50C00234841A2005A22E8486FAB63
SHA1 857EB88AE4A34F5F08EF9E608D6058C4AC0E2F28
SHA256 444BBAC8386B3895ED92400B77C4E8A933A9F4E76CC7633CEBA89DA539A1EC09
SHA384 174A1FF2173C5EAB808754E0549B19E68A5136A925F56423A994F5A09E635CA2981095852A9F6405AE3B2955E06A5DF0
SHA512 222406BA888A09CD2D330AFA56FF54C768A28208E24F5B0996FA5CA6AD0C625A9E084CC38532027ED035A4DB9CD06C8370CB9EB585CF0F26EA1A8598294541CA
SSDEEP 768:3v/5aH6gxvJv/CUEbp73TG6t0cbxRz1kEAO2LxqObXj1PfRI:ZPgBJ3GF7DGe0OxRz2EAnxq2pPZI
IMP 7AC270787865AB99D9D94F85C379C3CB
PESHA1 61A10C176ED8EDB8CC1969899E9111D84818AA6E
PE256 5F68ECB1036F01DC4D33CA77093D7C2662C6C3045B97C8049F24B078F314B26E

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\CRYPT32.dll
C:\Windows\system32\CRYPTBASE.DLL
C:\Windows\System32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\ksuser.dll
C:\Windows\system32\MFCORE.dll
C:\Windows\system32\MFPlat.DLL
C:\Windows\system32\mfpmp.exe
C:\Windows\System32\MSASN1.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\powrprof.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mf.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/444bbac8386b3895ed92400b77c4e8a933a9f4e76cc7633ceba89da539a1ec09/detection/

MIT License. Copyright (c) 2020-2021 Strontic.