mrt.exe
Microsoft Windows Malicious Software Removal Tool by Microsoft Corporation (Signed)
Overview
mrt.exe has 8 known versions, the most recent one is 5.13.10300.0. mrt.exe is run as a standard windows process in the context of the SYSTEM account with extensive privileges. During installation the program adds a job to the Task Scheduler. The average file size is about 80.17 MB. It is an authenticode code-signed executable issued to Microsoft Corporation by the certification authority Microsoft Corporation. Some variations of the file have been seen to be installed with the program OpenOffice 4.0.1 from Apache Software Foundation. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 54.13 MB with the maximum memory reaching around 56.98 MB.
 Details
|
| File name: | mrt.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft Windows Malicious Software Removal Tool |
| Typical file path: | C:\Windows\System32\mrt.exe |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Effective date: | Wednesday, September 12, 2012 |
| Expiration date: | Wednesday, June 12, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of Microsoft Windows Malicious Software Removal Tool.)
|
Apache Software Foundation |
|
OpenOffice is a widely used open-source office suite.
Behaviors
(Note, the behaviors below are for all versions of mrt.exe, select a unique version for details.)
Scheduled tasks
- The job '{FA6955C6-856F-4239-928C-E34C2D27FD1B}' runs on registration in the path '\{FA6955C6-856F-4239-928C-E34C2D27FD1B}'
- The task '{E1651854-9890-4C9E-92A0-A77E1B91C0A2}' runs on registration in the path '\{E1651854-9890-4C9E-92A0-A77E1B91C0A2}'
- The task '{968F4498-EC94-4EB5-90B0-51FAC6A713D4}' runs on registration in the path '\{968F4498-EC94-4EB5-90B0-51FAC6A713D4}'
- The task '{797400D0-088B-4ED0-A249-46CBD2CFE6A7}' runs on registration in the path '\{797400D0-088B-4ED0-A249-46CBD2CFE6A7}'
- The job '{68B8F0EA-DA21-4A25-B74A-DA061074C5E7}' runs on registration in the path '\{68B8F0EA-DA21-4A25-B74A-DA061074C5E7}'
- The task '{58EC57F9-8A9D-4532-A60F-705313EDD0DE}' runs on registration in the path '\{58EC57F9-8A9D-4532-A60F-705313EDD0DE}'
- The job 'MRT_HB' runs in the path '\Microsoft\Windows\RemovalTools\MRT_HB'
All file variations of mrt.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
41.67% |
|
| Windows 7 Home Premium |
36.11% |
|
| Windows 8.1 Pro |
13.89% |
|
| Windows 8.1 Pro with Media Center |
5.56% |
|
| Windows Vista Business |
2.78% |
|
Distribution by country
United States installs about 69.44% of Microsoft Windows Malicious Software Removal Tool.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
39.53% |
|
| ASUS |
23.26% |
|
| Acer |
9.30% |
|
| Lenovo |
9.30% |
|
| Toshiba |
4.65% |
|
| Medion |
4.65% |
|
| Dell |
4.65% |
|
| Samsung |
2.33% |
|
| Alienware |
2.33% |
|
