mfpmp.exe

  • File Path: C:\WINDOWS\system32\mfpmp.exe
  • Description: Media Foundation Protected Pipeline EXE

Hashes

Type Hash
MD5 CF2F034D15E1A970F39B1C831244EEFD
SHA1 2016B3C26D5F92716D6DAA4B9F7C5E91FD23E8D5
SHA256 4E04335FCC887DF5C1B875526F34DC8CD158EE07453F0E28CC5E350D8865445D
SHA384 891C7E468D95EEF0704D4BA123711257E6868E1362E6636B40FDBB7A37A41D3AE55273F7BCB9BF46D59AEA1024FDB4BD
SHA512 933350D3F43BDA667E71048AE11029EA93276D5FF8ECF0E48281F5433171A4AD09926F1065DE7419236A4650301B9D9CB7916E1F3DAAD30CCDA3EA941F6F0020
SSDEEP 768:EnpPI6Hvo0eHvxCVZUKdOLlAGPMz3ORb6GGNf+dwkd65R1PeO:EnpPIEvohHvxC8Kd+m3Hf+dVd65HPv
IMP 4026F56715FF1B2A293FA3E6FADB2A72
PESHA1 A220DC00EC0C01830DFE521DC1D6FCEAEEE7599E
PE256 F30BEC1837CFCFD78384C56938D195313DA3AE44717AAA5FC7D1CB7DE55E15C9

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mfpmp.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mf.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/4e04335fcc887df5c1b875526f34dc8cd158ee07453f0e28cc5e350d8865445d/detection

MIT License. Copyright (c) 2020-2021 Strontic.