Windows 10: MpCmdRun.exe Undocumented Option

Hello,


On some windows 10 workstation in our organization, I am seeing the following log entry:

"C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\MpCmdRun.exe" GetDeviceTicket -AccessKey <RANDOM_HEX_STRING>


I've been trying to find documentation on the GetDeviceTicket option, but can't seem to find anything. It is not an option presented in the mpcmdrun.exe command line help file.


Is anyone able to provide any information on this option? I'd just like to understand what this is.


Thank you for any help you can provide.


Regards,


Chris

:)

 

MpCmdRun killing my internet connection after installing creators update

Hi Brian,

The MpCmdRun.exe is associated with the Windows Defender program and is located in
C:\Program Files\Windows Defender. There are malicious programs that uses the same name so you won't suspect that it is malware. To check if this process is a malicious program, you can follow these steps:

• Right-click Start and select Task Manager.
• Under the Process tab, locate the MpCmdRun.
• Right-click MpCmdRun and select Open file location.

If the location is C:\Program Files\Windows Defender, then the system is safe and secure. If the location is elsewhere then we suggest that you run a virus and malware scan on your computer.

Let us know if you have any other questions.

 

Windows 10 1709 System Restore problems...

That seems to be an attempt at Option 2 in the tutorial, which requires you to
a. Boot to a command prompt (Did you?)
b. You then seem to be mixing steps 3,4 and 5, thus your command is incorrect.

I suggest Option 1 is easier.

If you still have problems, please repost listing each specific step and saying which option from the tutorial you are using. Thanks.

 

USB drive will not run exes.

Hi,

Thank you for posting your query in Microsoft Community. I understand the inconvenience caused to you and will help you in solving the issue.

To assist you better, I would like to ask if you have installed any Antivirus in the Laptop.

I suggest you to run the program in compatibility mode by following the steps provided below and check if the issue persist.

• Right click on the “.exe” file of the program and select properties.
• Under Compatibility tab, check the option for “Run in Compatibility mode”.
• Select the Operating System from the drop down list.
• Click on Apply and OK.

Hope the information is helpful. Feel free to write to us for any other assistance with Windows, we’ll be glad to assist you.