How to remove MpCmdRun.exe
- File Details
- Overview
- Analysis
MpCmdRun.exe
The module MpCmdRun.exe has been detected as Possible Threat
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4a97718c3d21c275df1df85bf7f758b7 |
| Size: |
1 MB |
| First Published: |
2025-11-04 23:01:17 (2 weeks ago) |
| Latest Published: |
2025-11-04 23:01:20 (2 weeks ago) |
| Status: |
Possible Threat (on last analysis) |
|
| Analysis Date: |
2025-11-04 23:01:20 (2 weeks ago) |
| %commonappdata%\microsoft\windows defender\platform |
| %commonappdata%\microsoft\windows defender\platform |
| %commonappdata%\microsoft\windows defender\platform |
| %commonappdata%\microsoft\windows defender\platform |
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x000e3fc0 |
| Name |
Size of data |
MD5 |
| .text |
1212416 |
88dbf30dc822974fbe58b3e71658a067 |
| .rdata |
409600 |
f0d94ae993849e2bab40e036ec460104 |
| .data |
28672 |
2dda28548fa22b10581c18567500c58a |
| .pdata |
45056 |
db4f0de8c7c689896b126a2e5b31fa3d |
| .didat |
4096 |
5d07d4dd0f07f36f9d7db5d0811e507e |
| .rsrc |
53248 |
304a0f86ac17bb2b3a73a72b5641cabf |
| .reloc |
8192 |
636766c812de565f85ce3fad724b7c9b |