Windows 10: MpCmdRun.exe stopping and starting flagged as an anomaly

Hope everyone is having a great day!I'm seeing this process "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MpCmdRun.exe" starting and stopping in my windows 10 OS and our security tool flags this as suspicious activity. I used sysinternal tools to check the processes and this happens occasionally, Is this something I have to worry about or is normal behavior of the process?

:)

 

MpCmdRun killing my internet connection after installing creators update

Hi Brian,

The MpCmdRun.exe is associated with the Windows Defender program and is located in
C:\Program Files\Windows Defender. There are malicious programs that uses the same name so you won't suspect that it is malware. To check if this process is a malicious program, you can follow these steps:

• Right-click Start and select Task Manager.
• Under the Process tab, locate the MpCmdRun.
• Right-click MpCmdRun and select Open file location.

If the location is C:\Program Files\Windows Defender, then the system is safe and secure. If the location is elsewhere then we suggest that you run a virus and malware scan on your computer.

Let us know if you have any other questions.

 

VirusTotal is Flagging Windows .exe's

I see this:








So nothing to worry about. Files scan clean with onboard AV and secondary Anti-Malware programs.

 

Voice Recorder Flags Disappeared

Hi,

I realize the problem you are facing with the voice recorder.

To assist you better, please answer the below:

• 
  Are you using windows built-in voice recorder or any other 3rd party voice recorder application?
  
• 
  If you are using Build in Windows recorder, how did you put the flag?
  

If you are using built-in Windows recorder, there is no option to put a flag on recorded voice. Provide us the screenshot of recording interface with Flag.

Refer the steps given in the below link to provide us screenshots:

How to include a screenshot in your post


In case if you are using any 3rd party recorder, then I suggest you to contact the developer of the application for further help.

Thank you.