Gridinsoft Logo

The mbupdatrV5.exe (Malwarebytes Component Updater) File Analysis

Updated 2 months ago
Checked by Malaware Check
mbupdatrV5.exe

Technical Analysis

File Name mbupdatrV5.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 21:00:49 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
6,179,088
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
742fb1aa28842afc699d183995dfc4b9
SHA1
7135326099fa72d41bfa6bc7172c04b09473ca9d
SHA256
218ccfa0e3bb5a37e9562f16b66bfc0785cd6f9cee9115f0da0699c76825dc5c
SHA512
96b7f06fbe7abc9421abf69787abb6d761ceb37847c00e5c479d763880e4a4c8363d3de07f84e7732e2aa34471b21e71faa2167db00bb1cdfc6e6d7a7cb6ac04
ImpHash
f3c39030e2a28e20f9dfc10d4d17c28e

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1402c40a8
Compilation Time 2025-03-07 02:45:45
Checksum 0x005f1bea (Actual: 0x005f1bea)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path D:\Jenkins\workspace\A_MBAM3_UPDATEREXE\bin\x64\Release\mbupdatr.pdb
Digital Signature OK
Imports 23 libraries
Exports 0 functions
Resources 3 Resources
Sections 7 Sections

Version Information

▼
CompanyName Malwarebytes
FileDescription Malwarebytes Component Updater
FileVersion 3.1.0.505
LegalCopyright (c) Malwarebytes. All rights reserved.
InternalName mbupdatr.exe
OriginalFilename mbupdatr.exe
ProductName Malwarebytes
ProductVersion 3.1.0.505
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,428,664 bytes 3,428,864 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D3AC0C83C9EFB2585173F4F3FD0124C1
.rdata 0x00347000 1,432,810 bytes 1,433,088 bytes 5.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 588F07D15290BEDC665F7531866FB7C4
.data 0x004a5000 128,124 bytes 97,792 bytes 4.51 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 651101D9D1E2608BA0DCF402970E82B9
.pdata 0x004c5000 154,128 bytes 154,624 bytes 6.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 52DE23A8439BC61945E8C94783FB670E
_RDATA 0x004eb000 500 bytes 512 bytes 4.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 151D03CECC0141DAD2E1D621196E89FA
.rsrc 0x004ec000 944,280 bytes 944,640 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7A94A3E1F2C16519ACE404F55CC9D835
.reloc 0x005d3000 37,576 bytes 37,888 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ AF4629AE531CECC1F5E5A68B560DBA0B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 3 (944,007 bytes)
Resource Type Count Total Size Percentage
BINARY 1 942,378 bytes
99.8%
RT_VERSION 1 796 bytes
0.1%
RT_MANIFEST 1 833 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product Malwarebytes
Description Malwarebytes Component Updater
File Version 3.1.0.505
Original Name mbupdatr.exe
Signing Date 02:58 AM 03/07/2025 (91 days ago)
Verification Status Signed
Signers Malwarebytes Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name mbupdatr.exe
Copyright (c) Malwarebytes. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Malwarebytes Inc #3 Chain
Validity Period: 2024-12-13 00:00:00 → 2027-12-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 2C 3C 46 81 63 EB 51 3E 02 E9 99 22 67 43 D6
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #6 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Microsoft Identity Verification Root Certificate Authority 2020 #7 Chain
Validity Period: 2020-04-16 18:36:16 → 2045-04-16 18:44:40
Signature Algorithm: sha384RSA
Serial Number: 54 98 D2 D1 D4 5B 19 95 48 13 79 C8 11 C0 87 99
Malwarebytes Inc #8 Chain
Validity Period: 2025-03-06 06:49:10 → 2025-03-09 06:49:10
Signature Algorithm: sha384RSA
Serial Number: 33 00 01 F9 CB 2C 56 8D E6 23 B7 0E EA 00 00 00 01 F9 CB
Microsoft ID Verified CS EOC CA 01 #9 Chain
Validity Period: 2021-04-13 17:31:54 → 2026-04-13 17:31:54
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 06 4A 1A FA CF 05 61 6A 74 00 00 00 00 00 06
Microsoft ID Verified Code Signing PCA 2021 #10 Chain
Validity Period: 2021-04-01 20:05:20 → 2036-04-01 20:15:20
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 07 87 A3 34 A3 7B A5 8E 1C 00 00 00 00 00 07
Microsoft Public RSA Timestamping CA 2020 #11 Chain
Validity Period: 2020-11-19 20:32:31 → 2035-11-19 20:42:31
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 05 E5 CF 0F FF 66 2E C9 87 00 00 00 00 00 05
Microsoft Public RSA Time Stamping Authority #12 Chain
Validity Period: 2024-11-26 18:48:49 → 2025-11-19 18:48:49
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 46 17 E4 75 7A CA FD DA E5 00 00 00 00 00 46

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware