RIVET
Home / Process library / mpdefendercoreservice.exe
What is mpdefendercoreservice.exe?
mpdefendercoreservice.exe is Defender Core Service. Supports Defender's antivirus engine and keeps it running.
| Name | mpdefendercoreservice.exe |
|---|---|
| Full name | Defender Core Service |
| Publisher | Microsoft Windows Publisher |
| Normal location | %ProgramData%\Microsoft\Windows Defender\Platform or %ProgramFiles%\Windows Defender |
| Safe to end? | Keep No. mpdefendercoreservice.exe is part of Windows and should keep running. |
| If you end it | Defender protection is weakened. |
How to check it's the real mpdefendercoreservice.exe
- Open Task Manager (Ctrl+Shift+Esc) and go to Details.
- Right-click mpdefendercoreservice.exe and choose Open file location. It should open
%ProgramData%\Microsoft\Windows Defender\Platformor%ProgramFiles%\Windows Defender. - Right-click the file, choose Properties, then Digital Signatures. The signer should be Microsoft Windows Publisher.
A file called mpdefendercoreservice.exe somewhere else, or without that signature, is worth scanning with Microsoft Defender.
What RIVET shows
RIVET's process list shows mpdefendercoreservice.exe with this explanation, the verdict above, and a signature check, so you can see at a glance whether it is the genuine Windows file. Ending a process can't be undone, and RIVET warns you before it ends anything Windows needs.
Questions
Is mpdefendercoreservice.exe a virus?
The genuine mpdefendercoreservice.exe is part of Windows, signed by Microsoft Windows Publisher, and runs from %ProgramData%\Microsoft\Windows Defender\Platform, %ProgramFiles%\Windows Defender. Malware sometimes copies the name, so check the location and signature as shown above.
Can I end mpdefendercoreservice.exe?
No. mpdefendercoreservice.exe is part of Windows and should keep running. Defender protection is weakened.