mfpmp.exe

  • File Path: C:\WINDOWS\SysWOW64\mfpmp.exe
  • Description: Media Foundation Protected Pipeline EXE

Hashes

Type Hash
MD5 E74AD7EA14B03A0CAE1D5EF663911AC0
SHA1 22F526224DDCEA9AB5580277F1D2E4896095536E
SHA256 EC6F698F8DA41839E3EF313DB22B183E1BA73E3FB305646995FF9285FDB4F684
SHA384 14D23BCF2798F480F7DF48EF9799D7331D3FBAE66B059F00EE6DD1E969954A0D91A70ED70F13C2B1F2EBF5293CCF37A7
SHA512 E4EAA941BF463C341516AA0C71B2EC18A22A1AEA9E23C847C1C578E9DB25FFD8D33E288C412073BC1BF857DCEF3DF1163A1F6FE67207AF224F7FF7E826EFBF70
SSDEEP 768:3pQtyYS4beBWXBTvsM07kZ4gCjdfZ7B4EcvBf5jZ6XfrfG1PvrT:3CAYS4beBWX9uAChb+vBf5jZ6vrmPvX
IMP C935EA535B975BDBCA41191BC227B9D5
PESHA1 9E09662AA1CAB3FCB56433D7C4A82B658B761C19
PE256 718F8C076831E3943FEF7766ECD78C574F26A80FA7CF1012A4B20ECF5DEFBBC4

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\mfpmp.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mf.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.120 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.120
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/ec6f698f8da41839e3ef313db22b183e1ba73e3fb305646995ff9285fdb4f684/detection

MIT License. Copyright (c) 2020-2021 Strontic.