MCUPDA~1.EXE
by McAfee/Trellix
Endpoint Security
Sources: 300M+ executions observed in the wild.
Summary
McAfee Update (8.3 truncated) - McAfee update component.
MCUPDA~1.EXE is the 1072nd most commonly executed Windows program in EchoTrail's dataset, observed 1,744 times across enterprise environments. It typically runs from C:\... and it is most often launched by svchost.exe.
Get this in your tools
The same record for mcupda~1.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/mcupda~1.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
1072nd
most commonly executed Windows program
1,744
observed endpoint executions
Behavior
Top Paths
- C:\...86.78%
- C:\Program Files\COMMON~1\McAfee\UPDMGR\403031~1.213.22%
Top Hashes (SHA256)
- cc12d13dff3e370dcaf3449dfda15727cbd72c2425223b109748c022967266a926.12%
- 36f006439637b85d12b75bbeb57e718907440afded9ba144e787a7ae783617ce10.12%
- 40993dcb9867017b82b7255bdfed68c1e768d636f25634f1d5d7489383941a628.22%
- e30acc512dbdbbeba1ced8cb51c6e38743b3bb44c537b5766b4492533d7534727.91%
- 66ed9cf6c9ffc51ab9c5ecb68183f0974f11264d11a2404e45b3ec359afc64087.34%
- 1840f8b4e258dc1232b0d1c1336f96cc7b29ee1353b1c9cbbcdefac9aa7b914f6.07%
- fe99f3b07f37aa0cfb1079248a54f5f46ad87d020b09ce990ec59e56e48125365.44%
- 0405fec53741256308a03c7775bba0c381e52b355ff31e92a3ec48cec4aa40c45%
- 5bc08e733210e1fdaa2a5482a2a076d0fd2f78b6f1a051f4288a2dc96cb0c16f4.3%
- 8c125160cc60b7b8a8a402ab1d48a18cec8de6f4a465ee86576e7f1b6a79e9ee4.3%
Process Ancestry
Top Grandparents
- services.exe99.22%
- MCUPDA~1.EXE0.63%
- mcupdutl.exe0.16%
Top Parents
- svchost.exe99.03%
- McInst.exe0.97%
Top Children
- hwupdchk.exe29.2%
- mcvsmap.exe29.2%
- McInst.exe25.55%
- mcdatrep.exe8.21%
- mcupdutl.exe4.56%
- mcinfo.exe1.64%
Ask Rocky about MCUPDA~1.EXE
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for MCUPDA~1.EXE. The free tier returns the summary, 500 lookups a month. Or ask Rocky.