Try now

Program info

Estimated safety rating

 msmpeng.exe

msmpeng.exe is a application which is probably legit. So, if msmpeng.exe is on your laptop or desktop computer, it is probably ok, and will NOT be a cause for concern. Even if your system is virus-free, it is still recommended to use a well-known antivirus with a good detection rate, in order to defend your system against potential security problems.

Executable file path

 C:\Program Files\Windows Defender\MsMpEng.exe

This program is usually stored on disk in C:\Program Files\Windows Defender\MsMpEng.exe.

MD5 hash of the executable file

 5d31780eabba5fb994ae217ff79ac01c

The MD5 fingerprint for this program is 5d31780eabba5fb994ae217ff79ac01c.

Is running as a service

 Yes

This program is set up as a Windows service. This means it operates on your system in background, usually without displaying anything to you. Most Windows services are useful programs, which provide useful functions to other programs or to Windows in general.

Belongs to the operating system

 Yes

msmpeng.exe seems to use the functions of Windows SFC (System File Checker) or Windows File Protection.

Is a 64 bit executable file

 Yes

64-bit code has been detected. This exe can put to good use the full power of a modern computer cpu.

File description

 Antimalware Service Executable

The description extracted from the file is Antimalware Service Executable.

File version

 4.10.14393.0 (rs1_release.160715-1616)

File version stored as a property 4.10.14393.0 (rs1_release.160715-1616).

Manufacturer

 Microsoft Corporation

Author Microsoft Corporation.

Copyright

 © Microsoft Corporation. All rights reserved.

Copyright notice © Microsoft Corporation. All rights reserved..

Digitally signed

 Yes

msmpeng.exe is digitally signed. Today the large majority of serious software applications are digitally signed.

Valid digital signature

 Yes

The digital signature extracted from msmpeng.exe checks out perfectly. This is very good.

Certifier name

 Microsoft Corporation

Digitally signed by: Microsoft Corporation

Issuer name

 Microsoft Code Signing PCA

Certificate's issuer name: Microsoft Code Signing PCA

Can be uninstalled

 No

This executable does NOT have an uninstall routine stored in registry.