MpDlpCmd.exe

• File Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MpDlpCmd.exe
• Description: Microsoft Malware Protection DLP Command Line Utility

Hashes

Type	Hash
MD5	3F78DD1AA45AE707133B087A3BDC0ED8
SHA1	077BFBF7F471E257AD97FB4A89DB62E53BF1A804
SHA256	D558255073AFC3582D6AD5E9E3F65BE7CAC733C6A6851A073B79888A69107564
SHA384	C3A556521D7DAA147ABED941D7B97E534012DF10794E3C8F74197257091F125915A08F08B6E7188E36B7E56FC4F12888
SHA512	B8E6DC9CC8FD31045C2E865606FCF824EDF04D868A4D87FF2841912B9D009DC77A8805F5EEEE90218253E64C378998FF507E18A976ACB8E729835C5095AD36DD
SSDEEP	6144:uTNySR7aJARoGasAttmiTVVmVVV8VVNVVVcVVVxVVVPVVlVVVRVVVtVVWV60jVLN:uTNyFSGGa3tH/

Runtime Data

Usage (stdout):

MpDlpCmd: Failed with hr = 0x80070667.MpDlpCmd: Invalid command line argument

Usage: MpDlpCmd -<Command>

Signature

• Status: Signature verified.
• Serial: 330000024A0E8AFDF15C662D2B00000000024A
• Thumbprint: 96384A7F5F1C438F32E2454697DC6D312A74517B
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: MpDlpCmd.exe
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 4.18.2005.5 (WinBuild.160101.0800)
• Product Version: 4.18.2005.5
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpDlpCmd.exe	74
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MpDlpCmd.exe	75
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2007.8-0\MpDlpCmd.exe	74
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2008.9-0\MpDlpCmd.exe	74
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\MpDlpCmd.exe	74
C:\WINDOWS\system32\SecurityHealthSystray.exe	74

MIT License. Copyright (c) 2020-2021 Strontic.