5.13.10300.0 2.70%
5.12.10200.0 24.32%
5.9.9902.0 10.81%
5.9.9902.0 2.70%
5.7.9701.0 13.51%
5.6.9603.0 40.54%
4.19.7304.0 2.70%
4.16.7000.0 2.70%



Microsoft Windows Malicious Software Removal Tool by Microsoft Corporation (Signed)

Remove mrt.exe


mrt.exe has 8 known versions, the most recent one is 5.13.10300.0. mrt.exe is run as a standard windows process in the context of the SYSTEM account with extensive privileges. During installation the program adds a job to the Task Scheduler. The average file size is about 80.17 MB. It is an authenticode code-signed executable issued to Microsoft Corporation by the certification authority Microsoft Corporation. Some variations of the file have been seen to be installed with the program OpenOffice 4.0.1 from Apache Software Foundation. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 54.13 MB with the maximum memory reaching around 56.98 MB.


File name:mrt.exe
Publisher:Microsoft Corporation
Product name:Microsoft Windows Malicious Software Removal Tool
Typical file path:C:\Windows\System32\mrt.exe
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Wednesday, September 12, 2012
Expiration date:Wednesday, June 12, 2013

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of Microsoft Windows Malicious Software Removal Tool.)
Apache Software Foundation
1% remove
OpenOffice is a widely used open-source office suite.


(Note, the behaviors below are for all versions of mrt.exe, select a unique version for details.)
Scheduled tasks
  • The job '{FA6955C6-856F-4239-928C-E34C2D27FD1B}' runs on registration in the path '\{FA6955C6-856F-4239-928C-E34C2D27FD1B}'
  • The task '{E1651854-9890-4C9E-92A0-A77E1B91C0A2}' runs on registration in the path '\{E1651854-9890-4C9E-92A0-A77E1B91C0A2}'
  • The task '{968F4498-EC94-4EB5-90B0-51FAC6A713D4}' runs on registration in the path '\{968F4498-EC94-4EB5-90B0-51FAC6A713D4}'
  • The task '{797400D0-088B-4ED0-A249-46CBD2CFE6A7}' runs on registration in the path '\{797400D0-088B-4ED0-A249-46CBD2CFE6A7}'
  • The job '{68B8F0EA-DA21-4A25-B74A-DA061074C5E7}' runs on registration in the path '\{68B8F0EA-DA21-4A25-B74A-DA061074C5E7}'
  • The task '{58EC57F9-8A9D-4532-A60F-705313EDD0DE}' runs on registration in the path '\{58EC57F9-8A9D-4532-A60F-705313EDD0DE}'
  • The job 'MRT_HB' runs in the path '\Microsoft\Windows\RemovalTools\MRT_HB'

VersionsAll file variations of mrt.exe

MD5SHA-1File size
a5f57cc499eec2d4ef8becdfede78875 818327ae306ae2ebea525a71476eada334daf857 90.99 MB
ab4a6df750ebcaeac12e1e7bf72bbca2 271a05be91f4c1c8fb7b88d02347f5df0bbffd6b 88.91 MB
44fe8331d96e0c975b5ad76e19f4a3cc 7b1b6bbfabcf268d3c41c29ccc97f43f743c7696 84.46 MB
49701df58647c3970b2efd344a33fc83 dfb53080be4999c27ce1f5b1d6f547681dc42fa1 81.97 MB
cc9aedaa3c140ecc8ea9a1efa4f9d3f6 6aebfa841957aa023067f3b1c6d2ef43f5bb0d4b 86.51 MB
971bcacc7310db7b8373f6d6dd5b956f 16cc9a38985f828490bdb9ef5a30dcd3f3f2cb38 79.06 MB
6e4916dc5ba0697c28915da5261ff250 aaedfe41ea9ac1d8929c5bc40eb39a872c484895 67.22 MB
d9975158f02198305284bc82b38889b1 1c4d81f3d7350ba14fbf37a8f8b0bf58106d8f7c 62.25 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8.1 41.67%
Windows 7 Home Premium 36.11%
Windows 8.1 Pro 13.89%
Windows 8.1 Pro with Media Center 5.56%
Windows Vista Business 2.78%

Distribution by countryDistribution by country

United States installs about 69.44% of Microsoft Windows Malicious Software Removal Tool.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 39.53%
ASUS 23.26%
Acer 9.30%
Lenovo 9.30%
Toshiba 4.65%
Medion 4.65%
Dell 4.65%
Samsung 2.33%
Alienware 2.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE