Windows 10: MpSigStub.exe => is this required for Win10?

Discus and support MpSigStub.exe => is this required for Win10? in Windows 10 Installation and Upgrade to solve the problem; Hi, one of a few submissions today re: a new HP x360 Spectre convertible laptop with OEM Win10 Home and McAfee trial pre-installed. I purchased from... Discussion in 'Windows 10 Installation and Upgrade' started by Hooty_CA, Dec 10, 2018.

  1. HOOTY_CA
    Hooty_CA Win User

    MpSigStub.exe => is this required for Win10?


    Hi, one of a few submissions today re: a new HP x360 Spectre convertible laptop with OEM Win10 Home and McAfee trial pre-installed. I purchased from Best Buy on Dec 9 and have already done one reset.


    I came across a MpSigStub.log file in the temp directory, contents below, and can't find much info on either MpSigStub.exe or AM_Engine.exe.


    Any insight appreciated.




    From MpSigStub.log file:

    --------------------------------------------------------------------------------
    Start time: 2018-12-10 17:20:31Z
    Process: 46e8.1d490aca723974a
    Command: /Store
    Administrator: yes
    Version: 1.1.15500.1

    ================================ CacheMpSigStub ================================

    Copied MpSigStub.exe to C:\WINDOWS\system32\MpSigStub.exe
    End time: 2018-12-10 17:20:31Z
    --------------------------------------------------------------------------------

    --------------------------------------------------------------------------------
    Start time: 2018-12-10 17:20:31Z
    Process: 4200.1d490aca73b4af3
    Command: /stub 1.1.15500.1 /payload 1.1.15500.2 /MpWUStub /program C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Engine.exe /LastPackage
    Administrator: yes
    Version: 1.1.15500.1

    ================================ ProductSearch =================================

    Microsoft Windows Defender (RS1+):
    Status: Active
    ProductGUID: 77BDAF73-B396-481F-9042-AD358843EC24
    Engine: c2cf669da9305da3cc83d3ec269595d69df584836874e7a2c52aeef877291c87 1.1.14600.4
    AS base VDM: a7109d65f26c0efb301d2f894c4862e6bf109f0fb389d70913a47fd780e1db0b 1.263.0.0
    AV base VDM: 5aa7b21fbf43adcd179e77fcbf18bd2676770dc4a02c07df6ce3410b8a708784 1.263.0.0
    AS delta VDM: f8fba537d923344e2353d46b3482237d6e87e7e4b07f35f77731879e7b97915a 1.263.48.0
    AV delta VDM: 8d933b563bd05d244024c7d72e232a73098a2ac0eb81370a12588da93943f4c4 1.263.48.0
    NIS engine:
    NIS base VDM:
    NIS full VDM:
    Platform: 2737effb0e4c9f3c818542c0c8976f3c3e8bb76fd2215d598cc33a5b90add4c3 4.13.17134.320

    ============================== AccumulatePackages ==============================

    PackageName:+C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Engine.exe

    =============================== PackageDiscovery ===============================

    Package files discovered:
    Directory: C:\WINDOWS\Temp\503BD147-D6E4-4A45-B2A2-A83F25CA3F494200.1d490aca73b4af3
    mpengine.dll: f048947f0358e058e94403c9ea6913bbccaa717ea6fdb557a198b3511c5c8426 1.1.15500.2
    Engine only:
    Engine: 1.1.15500.2
    AS base VDM: Not included
    AV base VDM: Not included
    AS delta VDM: Not included
    AV delta VDM: Not included

    ==================================== Update ====================================

    Product name: Microsoft Windows Defender (RS1+)
    Package files:
    Directory: C:\WINDOWS\Temp\503BD147-D6E4-4A45-B2A2-A83F25CA3F494200.1d490aca73b4af3
    mpengine.dll: f048947f0358e058e94403c9ea6913bbccaa717ea6fdb557a198b3511c5c8426 1.1.15500.2
    SignatureLocation changed from C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default to C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{38341901-416A-434B-82D1-26B099698117}
    Signatures updated from C:\WINDOWS\Temp\503BD147-D6E4-4A45-B2A2-A83F25CA3F494200.1d490aca73b4af3

    ================================ ValidateUpdate ================================

    MpSigStub successfully updated Microsoft Windows Defender (RS1+) using the Engine only package.

    Original: Updated to:
    Engine: 1.1.14600.4 1.1.15500.2

    DeltaUpdateFailure set to 0
    BddUpdateFailure set to 0
    End time: 2018-12-10 17:20:35Z
    --------------------------------------------------------------------------------

    --------------------------------------------------------------------------------
    Start time: 2018-12-10 17:20:37Z
    Process: 15f4.1d490acaae2733a
    Command: /stub 1.1.15500.1 /payload 1.283.0.0 /MpWUStub /program C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Base.exe
    Administrator: yes
    Version: 1.1.15500.1

    ================================ ProductSearch =================================

    Microsoft Windows Defender (RS1+):
    Status: Active
    ProductGUID: 77BDAF73-B396-481F-9042-AD358843EC24
    Engine: f048947f0358e058e94403c9ea6913bbccaa717ea6fdb557a198b3511c5c8426 1.1.15500.2
    AS base VDM: a7109d65f26c0efb301d2f894c4862e6bf109f0fb389d70913a47fd780e1db0b 1.263.0.0
    AV base VDM: 5aa7b21fbf43adcd179e77fcbf18bd2676770dc4a02c07df6ce3410b8a708784 1.263.0.0
    AS delta VDM: f8fba537d923344e2353d46b3482237d6e87e7e4b07f35f77731879e7b97915a 1.263.48.0
    AV delta VDM: 8d933b563bd05d244024c7d72e232a73098a2ac0eb81370a12588da93943f4c4 1.263.48.0
    NIS engine:
    NIS base VDM:
    NIS full VDM:
    Platform: 2737effb0e4c9f3c818542c0c8976f3c3e8bb76fd2215d598cc33a5b90add4c3 4.13.17134.320

    ============================== AccumulatePackages ==============================

    PackageName: C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Base.exe
    PackageName:*C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe

    =============================== PackageDiscovery ===============================

    Package files discovered:
    Directory: C:\WINDOWS\Temp\C17BFBAF-CFD5-45E3-97E5-9C38FFFFE17115f4.1d490acaae2733a
    mpasbase.vdm: 7958f8dd85b6aa253ece30f7d7f594b3d6722cd5b0cba5a58832b0f2cd86a4f1 1.283.0.0
    mpasdlta.vdm: 05e0da58909e92844aa6313a0435f7974ea3a51d024dc1c3c87cfe0d12adcca0 1.283.285.0
    mpavbase.vdm: 9c397d0bbeaba01c2b869883d2ee41d960417f1fe6d5f272fb6528a65372170e 1.283.0.0
    mpavdlta.vdm: 662d4e2e0fb5e9f08b5b90faa1ee17f535724ed9b1780c69d1b33d8139bb7178 1.283.285.0
    AM Bases and Delta:
    Engine: Not included
    AS base VDM: 1.283.0.0
    AV base VDM: 1.283.0.0
    AS delta VDM: 1.283.285.0
    AV delta VDM: 1.283.285.0

    ==================================== Update ====================================

    Product name: Microsoft Windows Defender (RS1+)
    Package files:
    Directory: C:\WINDOWS\Temp\C17BFBAF-CFD5-45E3-97E5-9C38FFFFE17115f4.1d490acaae2733a
    mpasbase.vdm: 7958f8dd85b6aa253ece30f7d7f594b3d6722cd5b0cba5a58832b0f2cd86a4f1 1.283.0.0
    mpasdlta.vdm: 05e0da58909e92844aa6313a0435f7974ea3a51d024dc1c3c87cfe0d12adcca0 1.283.285.0
    mpavbase.vdm: 9c397d0bbeaba01c2b869883d2ee41d960417f1fe6d5f272fb6528a65372170e 1.283.0.0
    mpavdlta.vdm: 662d4e2e0fb5e9f08b5b90faa1ee17f535724ed9b1780c69d1b33d8139bb7178 1.283.285.0
    SignatureLocation changed from C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{38341901-416A-434B-82D1-26B099698117} to C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BB0A4ADC-B4D7-4F17-935F-6C4573F2D5D5}
    Signatures updated from C:\WINDOWS\Temp\C17BFBAF-CFD5-45E3-97E5-9C38FFFFE17115f4.1d490acaae2733a

    ================================ ValidateUpdate ================================

    MpSigStub successfully updated Microsoft Windows Defender (RS1+) using the AM Bases and Delta package.

    Original: Updated to:
    AS base VDM: 1.263.0.0 1.283.0.0
    AV base VDM: 1.263.0.0 1.283.0.0
    AS delta VDM: 1.263.48.0 1.283.285.0
    AV delta VDM: 1.263.48.0 1.283.285.0

    DeltaUpdateFailure set to 0
    BddUpdateFailure set to 0
    End time: 2018-12-10 17:20:45Z
    --------------------------------------------------------------------------------

    :)
     
    Hooty_CA, Dec 10, 2018
    #1
  2. CUTTING_EDGE=5
    Cutting_Edge=5 Win User

    Is MPSigStub a virus?

    Hard Drive than C:\b4ee9cbc316dd6b6a18f32b9b0 but you need admin access and on top of that even with full admin you can't run MPsigStub
     
    Cutting_Edge=5, Dec 10, 2018
    #2
  3. SAM960
    Sam960 Win User
    Is MPSigStub a virus?

    It is in C:\(a bunch of random numbers and letters, I wont put it here since I can't figure out how to copy and paste it, not to mention I'm not sure if it turns out to contain any
    of my personal info)\MPSigStub. Also, no I do not have Malwarebytes. I have found someone who appears
    to have MPSigStub in the same place as me, and he said when he scanned it with malwarebytes he reported no infections, but pointed out it could potentially camouflage itself. I am just wondering, but do you think you could check your computer and tell me if
    you have it? If you do, then we could probably assume that it is an official file by Microsoft...
     
    Sam960, Dec 10, 2018
    #3
  4. DALCHINA
    dalchina Win User

    MpSigStub.exe => is this required for Win10?

    dalchina, Dec 10, 2018
    #4
Thema:

MpSigStub.exe => is this required for Win10?

Loading...

  1. MpSigStub.exe => is this required for Win10? - Similar Threads - MpSigStub exe required

  2. Removing MPSigStub from old Harddrive

    in Windows 10 Network and Sharing
    Removing MPSigStub from old Harddrive: Recently our main OS hard drive crashed, new hard drive installed, reinstalled windows, now going thru and cleaning up computer. On one of our larger, non bootable, extra, hard drives, it has an Applications file folder that has 5 file folders inside of it, that are at least...

  3. Fix MPSigStub high CPU usage in Windows 10

    in Windows 10 News
    Fix MPSigStub high CPU usage in Windows 10: In Windows, you may often come across file names you never heard of and so, find them suspicious. However, not all of them should be dismissed as viruses or malware. Most of them are legitimate files necessary for some processes. One such instance is of MPSigStub.exe file. At...

  4. Win10 Log in: SS3Svc32.exe shows up...

    in Windows 10 Software and Apps
    Win10 Log in: SS3Svc32.exe shows up...: Hi All: when i turn my desktop PC on every day, this strange request comes on: it is an ".exe" file with the name: SS3Svc32.exe it comes on EVERYTIME i turn the PC on. may i ask if this is ok or something is wrong please? why is it asking me this each time? My Windows...

  5. Win10 Log in: SS3Svc32.exe

    in Windows 10 Customization
    Win10 Log in: SS3Svc32.exe: Hi All: when i turn my desktop PC on every day, this strange request comes on: it is an ".exe" file with the name: SS3Svc32.exe it comes on EVERYTIME i turn the PC on. may i ask if this is ok or something is wrong please? why is it asking me this each time? thank...

  6. Exe's require a reboot to delete?

    in Windows 10 Ask Insider
    Exe's require a reboot to delete?: Every since a recent update this/last week I'm having issues with deleting exe's. This is what happens. I delete the executable and it'll disappear from Windows Explorer. I close the window and re-open it and the file is back. However, not really. If I try to delete this...

  7. Win10 required outbound rules for update

    in AntiVirus, Firewalls and System Security
    Win10 required outbound rules for update: Dear Community, I just switched to windows 10 and I'm having problems with the firewall. I set it to block all, as a good fw should be. What processes do I need to allow for windows update and virus definitions (but nothing else) to work? Thanks in advance! 151751

  8. Mpsigstub - What is it?

    in AntiVirus, Firewalls and System Security
    Mpsigstub - What is it?: Hello all, I have a folder under root C which is named a random selection of letters & numbers. In that folder is a file called Mpsigstub.exe? Looks like it appeared back in 2015. I right clicked properties and there's no name saying who its from? What is it? Should I...

  9. activation required win10

    in Windows 10 Updates and Activation
    activation required win10: Hello, I recently changed my laptop's motherboard, and after few days windows is asking for activation. Although prior changing the motherboard everything was running just fine. I upgraded from win 7 with genuine key. 22265

  10. Runtime error of rundll32.exe on Win10

    in Windows 10 Software and Apps
    Runtime error of rundll32.exe on Win10: Has anyone met this issue? It came sometimes, but I don't know why it happens. [img] 59047