home

mrt.exe

Ferramentas de Remoção de Software Mal-Intencionado para Microsoft Windows

Microsoft Corporation

MRT is an anti-malware utility that checks a PC for infection by specific, prevalent malicious software and helps to remove the infection if it is found. The version of the tool delivered by Microsoft Update and Windows Update runs in the background and then reports if a malware infection is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Ferramentas de Remoção de Software Mal-Intencionado para Microsoft Windows

Version:
4.7.6100.0

MD5:
0f69c1693254c8e6af0ae09775783145

SHA-1:
fec80fd2af59ae513bf47836e115e6aafe5285e9

SHA-256:
1550ad0f0e638e62648b47b53f977e8271fd6c673379650637810ef2fd77ef05

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/27/2024 12:39:29 AM UTC  (today)

File size:
52.6 MB (55,154,568 bytes)

Product version:
4.7.6100.0

Copyright:
© Microsoft Corporation. Todos os direitos reservados.

Original file name:
mrt.exe

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\Windows\System32\mrt.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/14/2011 6:11:44 PM

Valid to:
5/14/2012 6:11:44 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61030556000000000010

File PE Metadata
Compilation timestamp:
3/29/2012 6:46:29 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
1572864:vNLfDn8Ghu5q/w/9/z5xx5x85xp5xN/+/L5x95xe5xF5xwg7/JPTH:l8Gh8q/w/9/z5xx5x85xp5xN/+/L5x9Q

Entry address:
0x2B2CF

Entry point:
E8, 4D, 0A, 00, 00, E9, 0B, FE, FF, FF, CC, CC, CC, CC, CC, FF, 25, EC, 14, 40, 00, CC, CC, CC, CC, CC, CC, FF, 25, E8, 14, 40, 00, CC, CC, CC, CC, CC, CC, FF, 25, E0, 14, 40, 00, CC, CC, CC, CC, CC, CC, FF, 25, DC, 14, 40, 00, CC, CC, CC, CC, CC, CC, FF, 25, D8, 14, 40, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, 00, 40, 44, 00, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF...
 
[+]

Code size:
263 KB (269,312 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.