What is MpSigStub.exe?
MpSigStub.exe is part of Microsoft Malware Protection and developed by Microsoft Corporation according to the MpSigStub.exe version information.
MpSigStub.exe's description is "Microsoft Malware Protection Signature Update Stub"
MpSigStub.exe is digitally signed by Microsoft Corporation.
MpSigStub.exe is usually located in the 'c:\WINDOWS\SYSTEM32\' folder.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
The following is the available information on MpSigStub.exe:
| Property | Value |
|---|---|
| Product name | Microsoft Malware Protection |
| Company name | Microsoft Corporation |
| File description | Microsoft Malware Protection Signature Update Stub |
| Internal name | MpSigStub.exe |
| Original filename | MpSigStub.exe |
| Legal copyright | © Microsoft Corporation. All rights reserved. |
| Product version | 2.0.1009.0 |
| File version | 2.0.1009.0 |
Here's a screenshot of the file properties when displayed by Windows Explorer:
| Product name | Microsoft Malware Protection |
| Company name | Microsoft Corporation |
| File description | Microsoft Malware Protection Signatu.. |
| Internal name | MpSigStub.exe |
| Original filename | MpSigStub.exe |
| Legal copyright | © Microsoft Corporation. All right.. |
| Product version | 2.0.1009.0 |
| File version | 2.0.1009.0 |
Digital signatures [?]
MpSigStub.exe has a valid digital signature.
| Property | Value |
|---|---|
| Signer name | Microsoft Corporation |
| Certificate issuer name | Microsoft Code Signing PCA |
| Certificate serial number | 61062781000000000008 |
Hashes [?]
| Property | Value |
|---|---|
| MD5 | b8a8cea597bd1b01db53a94e16b6c175 |
| SHA256 | d7a5c710018ab1b24802f0f1bbab806bf4f0839473bbb1dd25fa9a9dbf0d6f6d |
Error Messages
These are some of the error messages that can appear related to mpsigstub.exe:
mpsigstub.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
mpsigstub.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
Microsoft Malware Protection Signature Update Stub has stopped working.
End Program - mpsigstub.exe. This program is not responding.
mpsigstub.exe is not a valid Win32 application.
mpsigstub.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with MpSigStub.exe?
To help other users, please let us know what you will do with MpSigStub.exe:
What did other users do?
The poll result listed below shows what users chose to do with MpSigStub.exe. 88% have voted for removal. Based on votes from 361 users.
NOTE: Please do not use this poll as the only source of input to determine what you will do with MpSigStub.exe.
Malware or legitimate?
If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.
And now some shameless self promotion ;)
Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.
If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
this mpsigstub folder suddenly appear in my computer and its shown locked,after this folder appear many things not working correctly, actually,what is this program, should i let it be or remove,specially my ie. not working well,
# 5 Mar 2015, 6:58
/john/ writes
keep finding MPSigStub inside a Padlocked file called 9b2c503b649da7667c18a756 on my D partition. have successfully removed this twice & now back again. Thanks to the info supplied can confirm MPSigStub also in C drive Windows32 with Details tab showing is Microsoft. But the MPSigStub appearing on D drive has no Details tab in Properties. Still think it is Malware & have removed it again despite Bitdefender scan saying OK.
# 20 Apr 2015, 4:00
anonymous coward writes
I also found a padlocked (must shield/admin confirm OK) directory on my D: drive containing this file, except mine is a slave drive, not a partition.. I can't delete it even with admin authority because it says I need "NETWORK SERVICE" permission to remove it. Removed that permission in properties, still won't delete. I have a copy of it in win/sys32 already. The folder has only been there within the last few days as I browse the directory tree regularly and only just noticed it. Creeping me out :-/
# 11 Jan 2016, 17:29
Dave Rye writes
I have the same issue. I have MPSigStub.exe in 4 different folders (all with long name like cf5c20dac080c3ff40ed08895e7b0987). All say I need "NETWORK SERVICE" permission to remove it. I've changed the permissions properties to no avail. I see tons of instances of this issue on the internet but I have yet to find ANYTHING that actually shows how to delete this file of folder. Can anyone help?
# 12 Feb 2016, 10:41
Lol writes
I recently used avast to remove it saying it was a virus so I just moved it to the virus chest and has never been seen on my computer since
# 28 May 2019, 21:37
rai ramesh writes