MpCmdRun.exe
Microsoft Malware Protection Command Line Utility by Microsoft Corporation (Signed)
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | 050b12a317dd0d9a2a595ed8f06f0ee5 |
| SHA1: | f0c732715dec1de01ac12c6ba204df7b8c1e4640 |
| SHA256: | 1550fa7b31a98d65e3d6ade58f24732de750c5b04421e5b73bf89d746c438922 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is MpCmdRun.exe?
You can use this tool to automate and troubleshoot Microsoft Antimalware Service. So for instance if you wish to do a quick scan from the command line, you can use -Scan 1 parameter. Microsoft Security Essentials is efficient and compact. Scans and updates are scheduled to run when the PC is idle and the software works in a way that your PC is still snappy when you’re using it.
About MpCmdRun.exe (from Microsoft Corporation)
“There are a host of nasty intruders on the Internet including viruses, trojans, worms and spyware. Microsoft Security Essentials offers award-winning protection against these intruders without getting”
Details
| File name: | mpcmdrun.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft Malware Protection Command Line Utility |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Program Files\windows defender\mpcmdrun.exe |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 153.5 KB (157,184 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Skype is a proprietary Voice over IP service and software application. The service allows users to communicate with peers by voice using a microphone, video by using a webcam, and instant messaging over the Internet. Phone calls may be placed to recipients on the traditional telephone networks. Calls to other users within the Skype service are free of charge, while calls to landline telephones and mobile phones are charged via a debit-b...
Behaviors
Scheduled tasks
- The job 'MP Scheduled Scan' runs weekly in the path '\Microsoft\Windows Defender\MP Scheduled Scan'
- The task 'Windows Defender Verification' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- The job 'Windows Defender Scheduled Scan' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- The task 'Windows Defender Cleanup' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- The job 'Windows Defender Cache Maintenance' runs in the path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
- Entry path '\Microsoft\Windows Defender\MpIdleTask'
- Entry path '\Microsoft\Windows Defender\MP Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Verification'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cleanup'
- Entry path '\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.04909371% | |
| Kernel CPU: | 0.03760111% | |
| User CPU: | 0.01149261% | |
| Kernel CPU time: | 24 ms/min | |
| Context switches: | 3/sec | |
| Memory |
| Private memory: | 2.71 MB | |
| Private (maximum): | 4.97 MB | |
| Private (minimum): | 4.49 MB | |
| Non-paged memory: | 2.71 MB | |
| Virtual memory: | 44.51 MB | |
| Virtual memory (peak): | 46.59 MB | |
| Working set: | 4.9 MB | |
| Working set (peak): | 5.3 MB | |
| Resource allocations |
| Threads: | 6 | |
| Handles: | 148 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command lines: |
- "C:\Program Files\windows defender\mpcmdrun.exe" scan -schedulejob -wintask -restrictprivilegesscan -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey e44b07ed-fa22-6f47-7c7e-237af02aa40a -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" signaturesupdateservice -schedulejob
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey a5db7c60-9b33-5c23-5f97-c6c8d0392c77 -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey cc0f4f94-e2d6-d026-16cd-92997b10d9e0 -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey d68d756e-fae9-36cd-8971-d48425dfe950 -reinvoke
- "C:\Program Files\windows defender\mpcmdrun.exe" spynetservice -restrictprivileges -accesskey b35db75d-6429-1328-668d-287f5e5ee087 -reinvoke
- (7 more)
|
| Owner: | NETWORK SERVICE |
| Parent process: | svchost.exe (Host Process for Windows Services by Microsoft Corporation) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.05768538% | |
| Kernel CPU: | 0.01922846% | |
| User CPU: | 0.03845692% | |
| CPU cycles: | 1,501,667/sec | |
| Context switches: | 6/sec | |
| Memory: | 1.23 MB | |
| MpClient.dll |
| Total CPU: | 0.03736939% | |
| Kernel CPU: | 0.03736939% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,644,684/sec | |
| Memory: | 396 KB | |
| MpCmdRun.exe (main module) |
| Total CPU: | 0.03012089% | |
| Kernel CPU: | 0.02373389% | |
| User CPU: | 0.00638700% | |
| CPU cycles: | 756,128/sec | |
| Context switches: | 1/sec | |
| Memory: | 164 KB | |
| msvcrt.dll (Windows NT CRT DLL by Microsoft) |
| Total CPU: | 0.01921922% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.01921922% | |
| CPU cycles: | 650,465/sec | |
| Context switches: | 2/sec | |
| Memory: | 688 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
29.00% |
|
| Windows 8 Pro |
29.00% |
|
| Windows 8.1 Pro |
13.00% |
|
| Windows 8.1 Pro Preview |
7.00% |
|
| Windows 8 |
4.00% |
|
| Windows 8 Pro with Media Center |
2.50% |
|
| Windows 8 Enterprise |
2.50% |
|
| Windows 8 Enterprise N |
2.00% |
|
| Windows 8.1 Enterprise |
2.00% |
|
| Windows 8.1 Pro with Media Center |
2.00% |
|
| Windows 8.1 Single Language Preview |
2.00% |
|
| Windows 8 Single Language |
2.00% |
|
| Windows 8 Enterprise Evaluation |
2.00% |
|
| Windows 7 Ultimate |
0.50% |
|
| Windows 8.1 Pro Preview with Media Center |
0.50% |
|
Distribution by country
United States installs about 41.71% of Microsoft Malware Protection Command Line Utility.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
26.13% |
|
| Hewlett-Packard |
15.32% |
|
| Dell |
12.61% |
|
| Acer |
11.26% |
|
| Toshiba |
10.81% |
|
| Lenovo |
8.11% |
|
| Sony |
4.50% |
|
| Intel |
3.60% |
|
| GIGABYTE |
3.60% |
|
| Samsung |
2.25% |
|
| Packard Bell |
1.80% |
|
