The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Microsoft Defender’s documented on-demand scans can check your computer or a file or folder on disk, but they do not provide a documented option to scan a running process by PID or inspect its memory. To check a process’s executable file, run a custom scan against its file path; to scan more broadly, choose a quick or full scan.
Can Microsoft Defender scan a running process by PID?
Not through the documented on-demand scan interfaces described here. Microsoft’s Start-MpScan documentation accepts a computer or a file or folder path, while its MpCmdRun command-line documentation describes a custom scan by file or folder path. Neither documents a PID or process-memory target.
That distinction matters: scanning an executable file on disk checks that file; it is not an inspection of the code or data currently held in a process’s memory. Microsoft describes Start-MpScan as starting “a scan on a computer.”
Scan the executable file with PowerShell
If you know the path to the program’s executable, use a custom scan with Start-MpScan. Open PowerShell and run:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- Compatibility: This keycap fits for Microsoft Surface Laptop 3/4/5 13.5" & 15" Models 1867 1868 1872 1873 1950 1951 1953 1958 1959 series 2019-2023 year,Not Compatible for Surface Laptop 6/7, Laptop Go, or Laptop Studio — Please Verify Your Model Before Purchase.
- Before purchasing, please confirm your device model number is compatible. You can find the model number on the bottom cover of your laptop (e.g., model 1867).
- Tips: to remove the old keycaps, gently pry up from the upper left or upper right corner. This requires some patience and careful handling. If you have no prior experience, we recommend watching a tutorial video online before attempting.
- Note: each keyboard key consists of three parts — the upper keycap, the lower hinge, and the silicone cup at the bottom. If the hinge or silicone cup is lost or damaged, replacing the keycap alone will not fix the issue. You will need to replace the hinge and silicone cup first before installing a new keycap.
- Package:1 set of US layout keycaps(note: Win keycpas is not included) and 2 Pcs tool (crowbar triangle flake)
Start-MpScan -ScanPath 'C:PathToprogram.exe' -ScanType CustomScanReplace the example path with the actual executable path. The -ScanPath parameter accepts a file or folder path, and CustomScan is the path-targeted scan type. Microsoft also documents -AsJob for running a long scan as a background job; it does not change what the scan targets.
Choose a scan scope
| Scan type | Scope | When to choose it |
|---|---|---|
| Quick scan | Computer scan | For a quick check of the computer. |
| Full scan | Computer scan | When you want a broader computer scan. |
| Custom scan | A specified file or folder path | To check the executable file on disk or another specific path. |
Microsoft documents these scan types in its guide to running and customizing on-demand scans. A custom scan of a program’s file should not be treated as a live-process or memory scan.
Run a custom scan with MpCmdRun
As an alternative to PowerShell, Microsoft’s command-line tool, MpCmdRun.exe, supports a custom scan using -File and a file or folder path. Microsoft specifies that you run the tool from an elevated Command Prompt.
- Open Command Prompt as an administrator.
- Locate
MpCmdRun.exein the Windows Defender folder or the versioned Defender platform folder. The platform folder can change as Defender updates; Microsoft recommends using the latest available platform version. - Run the tool with
-Filefollowed by the executable’s path, using the syntax documented by Microsoft:MpCmdRun.exe -Scan -ScanType 3 -File <PathAndFilename or Path>.
For the exact current locations and command syntax, see Microsoft’s MpCmdRun command-line reference. This is also a path-based scan, not a PID or process-memory scan.
Check Defender’s status if scanning is unavailable
To check Defender status and protection settings from PowerShell, run:
Get-MpComputerStatusMicrosoft documents this status-checking approach in its PowerShell cmdlets guide. The command reports status; it does not start a scan or change a file scan into live-process inspection.
Quick Recap
Best Value
- Surface Pro Type cover has a new improved design with slightly spread out keys for a more familiar and efficient typing experience that feels like a traditional laptop.Sensors: Accelerometer
- The two button trackpad is now larger for precision control and navigation
- The keyboard is sturdy with enhanced magnetic stability along the fold so you can adjust it to the right angle and work on your lap, on the plane, or at your desk. Since it's designed just for Surface
- Protects and shields the screen from Bumps and Scratches
- Compatible with Surface Pro 3, Surface Pro 4 and Surface Pro. Folds back to prevent unwanted typing
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
