mcupdatemgr.exe
by McAfee / Trellix
Endpoint Security
Summary
McAfee Update Manager
mcupdatemgr.exe is the 1484th most commonly executed Windows program in EchoTrail's dataset, observed 740 times across enterprise environments. It typically runs from C:\Program Files\Common Files\McAfee\UPDMGR\6.8.120.1 and it is most often launched by svchost.exe.
1484th
most commonly executed Windows program
740
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Common Files\McAfee\UPDMGR\6.8.120.123.76%
- C:\Program Files\Common Files\mcafee\updmgr\9.3.149.218.66%
- C:\Program Files\Common Files\mcafee\updmgr\9.4.120.117.45%
- C:\Program Files\Common Files\mcafee\updmgr\7.2.142.114.23%
- C:\Program Files\Common Files\mcafee\updmgr\7.0.131.17.11%
- C:\Program Files\Common Files\mcafee\updmgr\7.4.135.16.85%
- C:\Program Files\Common Files\mcafee\updmgr\7.1.144.14.7%
- C:\Program Files\Common Files\mcafee\updmgr\7.3.166.24.16%
- C:\Program Files\Common Files\mcafee\updmgr\6.9.161.12.95%
- C:\Program Files\Common Files\McAfee\UPDMGR\4.0.3031.20.13%
Top Hashes (SHA256)
- bdcb28dd21d69458afb4a04fb5e2ff007c581450652ed246ed08ddd87e0757f621.99%
- 026baada5fe0d4e8ae640087e133b919b394ba0ccaa9630ac2a7532dbf751a5820.57%
- e30acc512dbdbbeba1ced8cb51c6e38743b3bb44c537b5766b4492533d75347216.77%
- e70c2c64bcadce8196b4ea69348bcbe7b157b7830164ca73ca3a098171a6a4b110.13%
- 5bc08e733210e1fdaa2a5482a2a076d0fd2f78b6f1a051f4288a2dc96cb0c16f8.39%
- 66ed9cf6c9ffc51ab9c5ecb68183f0974f11264d11a2404e45b3ec359afc64088.07%
- fe99f3b07f37aa0cfb1079248a54f5f46ad87d020b09ce990ec59e56e48125365.54%
- ca806af116036b07828ba9351275038d4175bcbcb3913a57cda6cfc427876dbf4.91%
- e9570d0c8a4da3a5590fecc90ebd13972d63111a607b06de112aee029c53d68a3.48%
- cc12d13dff3e370dcaf3449dfda15727cbd72c2425223b109748c022967266a90.16%
Process Ancestry
Top Grandparents
- services.exe99.12%
- MCUPDA~1.EXE0.88%
Top Parents
- svchost.exe98.93%
- McInst.exe1.07%
Top Children
- hwupdchk.exe63.21%
- mcvsmap.exe34.52%
- McInst.exe1.94%
- mcupdutl.exe0.22%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mcupdatemgr.exe
Rocky answers questions about mcupdatemgr.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.