Try now

Program info

Estimated safety rating

 msmpeng.exe

msmpeng.exe is a application which is probably NOT a virus. So, if msmpeng.exe is on your system, it is probably ok, and will NOT cause problems. Even if your PC is clean, it is still recommended to run a well-known antivirus with a good track record, in order to defend your system against potential security problems.

Executable file path

 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe

Usually, this application is located in C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe.

MD5 hash of the executable file

 529d41cfa7605ef8803f1aa1c6fbd1fe

The MD5 checksum for this executable is 529d41cfa7605ef8803f1aa1c6fbd1fe.

Is running as a service

 Yes

This application is a Windows service. This means it runs on your system in background, usually without displaying any user interface to you. Most Windows services are legit programs, which provide useful features to other applications or to the Windows Operating System.

Is a 64 bit executable file

 Yes

64-bit code has been detected. This exe can put to good use the full power of a modern PC cpu.

File description

 Antimalware Service Executable

The description present in the exe is Antimalware Service Executable.

File version

 4.18.24070.5 (e798126f926dd886b32c6c109a80cc3baf14090c)

File version extracted from the file 4.18.24070.5 (e798126f926dd886b32c6c109a80cc3baf14090c).

Manufacturer

 Microsoft Corporation

Company Microsoft Corporation.

Copyright

 © Microsoft Corporation. All rights reserved.

Legal copyright © Microsoft Corporation. All rights reserved..

Digitally signed

 Yes

msmpeng.exe is digitally signed. Today most virus-free programs are digitally signed.

Valid digital signature

 Yes

The digital signature extracted from msmpeng.exe checks out perfectly. This is excellent.

Certifier name

 Microsoft Windows Publisher

Digital certificate name: Microsoft Windows Publisher

Issuer name

 Microsoft Windows Production PCA 2011

Certificate's issuer name: Microsoft Windows Production PCA 2011

Can be uninstalled

 No

This executable does NOT have a removal routine stored in registry.