MpCmdRun.exe
Microsoft Malware Protection Command Line Utility by Microsoft Corporation (Signed)
| Version: | 4.3.9431.0 (winmain_bluemp.130615-1214) |
| MD5: | c8f1f07571019776439d7ad61b8a5a56 |
| SHA1: | aa5759097821885029defad28f8b03a408c365cb |
| SHA256: | c5bec4e9b98efc2baf5e3ea42edaaa08f74fc38d169d7bdbc76461c5604f505b |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is MpCmdRun.exe?
You can use this tool to automate and troubleshoot Microsoft Antimalware Service. So for instance if you wish to do a quick scan from the command line, you can use -Scan 1 parameter. Microsoft Security Essentials is efficient and compact. Scans and updates are scheduled to run when the PC is idle and the software works in a way that your PC is still snappy when you’re using it.
About MpCmdRun.exe (from Microsoft Corporation)
“There are a host of nasty intruders on the Internet including viruses, trojans, worms and spyware. Microsoft Security Essentials offers award-winning protection against these intruders without getting”
Details
| File name: | mpcmdrun.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft Malware Protection Command Line Utility |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Program Files\windows defender\mpcmdrun.exe |
| File version: | 4.3.9431.0 (winmain_bluemp.130615-1214) |
| Product version: | 4.3.9431.0 |
| Size: | 316.95 KB (324,560 bytes) |
| Build date: | 6/15/2013 5:04 PM |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Scheduled tasks
- The job 'MP Scheduled Scan' runs weekly in the path '\Microsoft\Windows Defender\MP Scheduled Scan'
- The task 'Windows Defender Verification' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- The job 'Windows Defender Scheduled Scan' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- The task 'Windows Defender Cleanup' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- The job 'Windows Defender Cache Maintenance' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
- Entry path '\Microsoft\Windows Defender\MpIdleTask'
- Entry path '\Microsoft\Windows Defender\MP Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
Network connections
[TCP] 157.55.185.118:443
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00769832% | |
| Kernel CPU: | 0.00459900% | |
| User CPU: | 0.00309933% | |
| Kernel CPU time: | 47 ms/min | |
| CPU cycles: | 466,140/sec | |
| Memory |
| Private memory: | 2.65 MB | |
| Private (maximum): | 8.16 MB | |
| Private (minimum): | 4.91 MB | |
| Non-paged memory: | 2.65 MB | |
| Virtual memory: | 42.88 MB | |
| Virtual memory (peak): | 46.05 MB | |
| Working set: | 8.18 MB | |
| Working set (peak): | 8.62 MB | |
| I/O |
| I/O write transfer: | 274 Bytes/sec | |
| I/O write operations: | 2/sec | |
| I/O other transfer: | 2.14 KB/sec | |
| I/O other operations: | 82/sec | |
| Resource allocations |
| Threads: | 7 | |
| Handles: | 310 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey 919127d0-d74e-b3ac-2425-52ea81f6c140 -reinvoke |
| Owner: | NETWORK SERVICE |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.01885553% | |
| Kernel CPU: | 0.01257035% | |
| User CPU: | 0.00628518% | |
| CPU cycles: | 224,550/sec | |
| Memory: | 1.66 MB | |
| MpCmdRun.exe (main module) |
| Total CPU: | 0.00514040% | |
| Kernel CPU: | 0.00514040% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 102,110/sec | |
| Memory: | 312 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
29.00% |
|
| Windows 8 Pro |
29.00% |
|
| Windows 8.1 Pro |
13.00% |
|
| Windows 8.1 Pro Preview |
7.00% |
|
| Windows 8 |
4.00% |
|
| Windows 8 Pro with Media Center |
2.50% |
|
| Windows 8 Enterprise |
2.50% |
|
| Windows 8 Enterprise N |
2.00% |
|
| Windows 8.1 Enterprise |
2.00% |
|
| Windows 8.1 Pro with Media Center |
2.00% |
|
| Windows 8.1 Single Language Preview |
2.00% |
|
| Windows 8 Single Language |
2.00% |
|
| Windows 8 Enterprise Evaluation |
2.00% |
|
| Windows 7 Ultimate |
0.50% |
|
| Windows 8.1 Pro Preview with Media Center |
0.50% |
|
Distribution by country
United States installs about 41.71% of Microsoft Malware Protection Command Line Utility.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
26.13% |
|
| Hewlett-Packard |
15.32% |
|
| Dell |
12.61% |
|
| Acer |
11.26% |
|
| Toshiba |
10.81% |
|
| Lenovo |
8.11% |
|
| Sony |
4.50% |
|
| Intel |
3.60% |
|
| GIGABYTE |
3.60% |
|
| Samsung |
2.25% |
|
| Packard Bell |
1.80% |
|
