mfpmp.exe
by Microsoft
Operating System
Summary
Media Foundation Protected Media Pipeline - DRM pipeline for protected media content.
mfpmp.exe is the 978th most commonly executed Windows program in EchoTrail's dataset, observed 2,197 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by iexplore.exe.
978th
most commonly executed Windows program
2,197
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 444bbac8386b3895ed92400b77c4e8a933a9f4e76cc7633ceba89da539a1ec0948.97%
- c01ee2321d2ccf6f59e7163b66e85b9172e4b4dc75de241d02bf90c094a7227526.72%
- 45b8b316c617f703af064aafab9a35c465d5f7835b758995e82ac0dedbaad03719.03%
- e459ff6cba8c93589b206c07bdccd2e6c57766be6bb4754f2fb1def9ef2e3bde3.75%
- 0f793acd6081e534985ae9eaa1ccb66255d9ce292e463bb0328759a42860a60a0.8%
- 27287ac874cef86be03aee7b6d34fdc3bd208070ed20e44621a305865fb7579e0.63%
- a695922adb2feca5041df60e266d13c766bcc3ef211c9613072d179a2ca7508e0.09%
Process Ancestry
Top Grandparents
- iexplore.exe78.24%
- svchost.exe21.7%
- services.exe0.06%
Top Parents
- iexplore.exe59.63%
- MicrosoftEdgeCP.exe35.94%
- wwahost.exe3.66%
- msedge.exe0.34%
- Video.UI.exe0.26%
- wmpnetwk.exe0.04%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mfpmp.exe
Rocky answers questions about mfpmp.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.