home

mrt.exe

Herramienta de eliminación de software malintencionado de Microsoft Windows

Microsoft Corporation

MRT is an anti-malware utility that checks a PC for infection by specific, prevalent malicious software and helps to remove the infection if it is found. The version of the tool delivered by Microsoft Update and Windows Update runs in the background and then reports if a malware infection is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Herramienta de eliminación de software malintencionado de Microsoft Windows

Version:
4.18.7203.0

MD5:
276546554068eca27671416398c2c26e

SHA-1:
4f83c38f0a8ba60a83ffcb29cd0ca98f71f12bde

SHA-256:
5a8057f9815b09df336b1483d3e852ac947b683e56c5bf36b8b9f149cc85dc16

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 11:05:12 AM UTC  (today)

File size:
66.6 MB (69,796,088 bytes)

Product version:
4.18.7203.0

Copyright:
© Microsoft Corporation. Reservados todos los derechos.

Original file name:
mrt.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\Windows\System32\mrt.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/12/2012 12:44:22 PM

Valid to:
6/12/2013 12:44:22 PM

Subject:
CN=Microsoft Windows, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000019CB58D66BE3198DB7000000000019

File PE Metadata
Compilation timestamp:
3/4/2013 3:58:38 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
1572864:OmmXy9i7gyvZk+HLu/j/5/75xM5xS5xt5x0/+/35xa5x65xK5xGv07/gy0f+P/vF:RUMwO6u/j/5/75xM5xS5xt5x0/+/35xM

Entry address:
0x36129

Entry point:
E8, 03, 0D, 00, 00, E9, 0B, FE, FF, FF, CC, CC, CC, CC, CC, FF, 25, 70, 7B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 6C, 7B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 64, 7B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 60, 7B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 5C, 7B, 44, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, 00, 50, 44, 00, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF...
 
[+]

Entropy:
7.0625

Code size:
267.5 KB (273,920 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.