home

mrt.exe

Microsoft Windows Malicious Software Removal Tool

Microsoft Corporation

MRT is an anti-malware utility that checks a PC for infection by specific, prevalent malicious software and helps to remove the infection if it is found. The version of the tool delivered by Microsoft Update and Windows Update runs in the background and then reports if a malware infection is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Windows Malicious Software Removal Tool

Version:
4.19.7304.0

MD5:
6e4916dc5ba0697c28915da5261ff250

SHA-1:
aaedfe41ea9ac1d8929c5bc40eb39a872c484895

SHA-256:
9e894332130c6acc345cb46627cc42c6cd772e418ad2daeaa85f71074f6a2a1d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 2:46:56 AM UTC  (today)

File size:
67.2 MB (70,490,256 bytes)

Product version:
4.19.7304.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mrt.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\mrt.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/12/2012 10:44:22 AM

Valid to:
6/12/2013 10:44:22 AM

Subject:
CN=Microsoft Windows, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000019CB58D66BE3198DB7000000000019

File PE Metadata
Compilation timestamp:
4/1/2013 7:32:18 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
1572864:LsGGIsq4DXD9dOw9+E/F/5/Y5xX5xS5xt5x0/+/15xa5x65x95xjvb7/Kdc8au+t:LsLIsxjh8ZE/F/5/Y5xX5xS5xt5x0/+d

Entry address:
0x369BC

Entry point:
E8, 00, 0D, 00, 00, E9, 0B, FE, FF, FF, CC, CC, CC, CC, CC, CC, FF, 25, 70, 8B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 6C, 8B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 64, 8B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 60, 8B, 44, 00, CC, CC, CC, CC, CC, CC, FF, 25, 5C, 8B, 44, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, 00, 60, 44, 00, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD...
 
[+]

Entropy:
7.0650

Code size:
270 KB (276,480 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.