mfpmp.exe
- File Path:
C:\WINDOWS\SysWOW64\mfpmp.exe
- Description: Media Foundation Protected Pipeline EXE
Hashes
| Type |
Hash |
| MD5 |
E74AD7EA14B03A0CAE1D5EF663911AC0 |
| SHA1 |
22F526224DDCEA9AB5580277F1D2E4896095536E |
| SHA256 |
EC6F698F8DA41839E3EF313DB22B183E1BA73E3FB305646995FF9285FDB4F684 |
| SHA384 |
14D23BCF2798F480F7DF48EF9799D7331D3FBAE66B059F00EE6DD1E969954A0D91A70ED70F13C2B1F2EBF5293CCF37A7 |
| SHA512 |
E4EAA941BF463C341516AA0C71B2EC18A22A1AEA9E23C847C1C578E9DB25FFD8D33E288C412073BC1BF857DCEF3DF1163A1F6FE67207AF224F7FF7E826EFBF70 |
| SSDEEP |
768:3pQtyYS4beBWXBTvsM07kZ4gCjdfZ7B4EcvBf5jZ6XfrfG1PvrT:3CAYS4beBWX9uAChb+vBf5jZ6vrmPvX |
| IMP |
C935EA535B975BDBCA41191BC227B9D5 |
| PESHA1 |
9E09662AA1CAB3FCB56433D7C4A82B658B761C19 |
| PE256 |
718F8C076831E3943FEF7766ECD78C574F26A80FA7CF1012A4B20ECF5DEFBBC4 |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\wow64.dll |
| C:\WINDOWS\System32\wow64base.dll |
| C:\WINDOWS\System32\wow64con.dll |
| C:\WINDOWS\System32\wow64cpu.dll |
| C:\WINDOWS\System32\wow64win.dll |
| C:\WINDOWS\SysWOW64\mfpmp.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: mf.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.120 (WinBuild.160101.0800)
- Product Version: 10.0.22000.120
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/ec6f698f8da41839e3ef313db22b183e1ba73e3fb305646995ff9285fdb4f684/detection
MIT License. Copyright (c) 2020-2021 Strontic.