File scan report
Verdict Safe
Is Md
No engine flagged this verified Microsoft-signed executable, and its static structure shows neither packing nor suspicious code entropy.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
The evidence supports normal use when the executable came from Microsoft or a trusted Windows update channel. Keep security protection enabled and avoid copies obtained from unrelated download sites.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 68 flagged
- Flagged 0
- No detection 68
- No result 7
- Code signing Microsoft Windows
- Test run Partial
- First seen 2mo ago
Chapter 02
Why we think so
3 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 68 antivirus engines that checked it avoided flagging the file, including the reporting major antivirus engines. Its Microsoft Windows signature verifies successfully, the publisher matches Microsoft, and static PE analysis found no packing or suspicious code entropy; however, no completed sandbox run is available.
The strongest evidence is complete detection silence: 0 of the 68 antivirus engines that checked it marked the executable malicious or suspicious. The signature verifies as Microsoft Windows and matches the curated Microsoft publisher identity, with no brand conflict detected. Static PE inspection found no identified packer, no high-entropy code, and no suspicious section. No external threat-intelligence source supplied a matching malware family or research rule. Behavior in the test run cannot be characterized because behaviour.sandboxCount is zero, and no complete contacted-host reputation result is available.
What We Detected
None of the 68 antivirus engines that checked it flagged the executable, and 16 major antivirus engines explicitly reported no detection. The file carries a verified Microsoft Windows signature, the recognised-publisher check is true for Microsoft, and no brand mismatch was detected.
Threat Behavior
Static PE analysis found no identified packer, no high-entropy code, and no suspicious section. Four routine MITRE indicators were extracted, but the absence of a sandbox run means there was no completed observation from the test run; contactedHosts was also unavailable, so no complete host-reputation conclusion can be made.
What To Do Now
Use the file only if it came through Microsoft or another trusted Windows distribution channel. Keep security software enabled and recheck the digital signature if the file was obtained from an unexpected source.
Where this verdict could be wrong3 caveats
- No sandbox run was recorded, so no completed behaviour in the test run supports the static and reputation evidence.
- No contacted-host reputation result was saved, meaning no completed host-reputation cross-check is available.
- This signer has no saved history, so this exact signer identity has no saved sample-history record despite the verified Microsoft certificate.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/68 engines reported a malicious or suspicious result.
- Verified signature from 'Microsoft Windows'.
- The signer is a recognised publisher for Microsoft.
- No packing, high-entropy code, or suspicious PE sections.
- No YARAify, MalwareBazaar, or CIRCL match.
- No completed sandbox execution was available.
- No complete contacted-host reputation check was available.
- The file has only three recorded submissions across three sources.
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 68 antivirus engines that checked it flag it; signed by Microsoft Windows.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 8, 2026, 8:00 PM UTC
- SHA-256
d65ee81d84ecdaea73f7b2a7f11d09156d7151c3fb412bde43164394417c52db- SHA-1
f65355ee17303145cdf5e53c3e12062152808456- MD5
e2ddb1d2b85830935e3b9ba04b4ce2fa
About this file
MdOdrMcpFilter.exe is a Win32 EXE file of 219.2 kB.
- Type and size
- Win32 EXE · 219.2 kB
- Signer
- Microsoft WindowsValid code signature.
- First seen
- Aug 19, 2026On VirusTotal.
- Submitted by
- 3 distinct sourcesRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 7.55 of 8
First scanned
Antivirus consensus
0 of 68 engines flagged this file
7 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-117 engines0flagged
- Tier-234 engines0flagged
- Low-trust17 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVNo result
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusNo result
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 04
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is MdOdrMcpFilter.exe safe?
What is MdOdrMcpFilter.exe?
How many antivirus engines detected MdOdrMcpFilter.exe?
Is MdOdrMcpFilter.exe digitally signed?
What is the SHA-256 hash of MdOdrMcpFilter.exe?
Is it safe to run MdOdrMcpFilter.exe?
How up to date is this analysis of MdOdrMcpFilter.exe?
Community
Member reviews and reports for this exact file hash.