home

SbCeCore.exe

McAfee, Inc. Endpoint Encryption for Files and Folders

MCAFEE INTERNATIONAL LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SbCeCore’.
Publisher:
McAfee, Inc.  (signed by MCAFEE INTERNATIONAL LTD.)

Product:
McAfee, Inc.(R) Endpoint Encryption for Files and Folders(TM)

Description:
McAfee Endpoint Encryption for Files and Folders Main User Mode Application

Version:
3, 1, 3, 9

MD5:
689e972a7b77d901ca0517d85f8637b6

SHA-1:
a69e1cba5eccc2a3b2bc79f092fa24f7c22eadc8

SHA-256:
947b7cf47da83dc4495f6510f78dd689edd0ac7e84cb41b455b76b7b074ccfb2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:02:01 PM UTC  (today)

File size:
258.6 KB (264,800 bytes)

Product version:
3, 1, 3, 9

Copyright:
(C) 2008 McAfee, Inc." All rights reserved

Trademarks:
Endpoint Encryption for Files and Folders(TM)

Original file name:
SbCeCore.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mcafee\endpoint encryption for files and folders\sbcecore.exe

Digital Signature
Signed by:
MCAFEE INTERNATIONAL LTD.

Authority:
VeriSign, Inc.

Valid from:
9/11/2008 9:00:00 AM

Valid to:
9/12/2009 8:59:59 AM

Subject:
CN=MCAFEE INTERNATIONAL LTD., OU=R&D, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=MCAFEE INTERNATIONAL LTD., L=HOVE, S=EAST SUSSEX, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
34C250BDE781194915867D0286392146

File PE Metadata
Compilation timestamp:
3/27/2009 1:35:57 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x1C80E

Entry point:
E8, 59, 5A, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, 8B, D0, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 66, 8B, 4C, 24, 08, 48, 48, 3B, C2, 74, 05, 66, 39, 08, 75, F5, 66, 8B, 10, 66, 2B, D1, 66, F7, DA, 1B, D2, F7, D2, 23, C2, C3, E8, 76, 35, 00, 00, 8B, 4C, 24, 04, 89, 48, 14, C3, E8, 69, 35, 00, 00, 8B, 48, 14, 69, C9, FD, 43, 03, 00, 81, C1, C3, 9E, 26, 00, 89, 48, 14, 8B, C1, C1, E8, 10, 25, FF, 7F, 00, 00, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08...
 
[+]

Entropy:
6.4563

Code size:
176 KB (180,224 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SbCeCore

Command:
"C:\Program Files\mcafee\endpoint encryption for files and folders\sbcecore.exe"


Scan SbCeCore.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.