home

SbCeCore.exe

McAfee, Inc. Endpoint Encryption for Files and Folders

MCAFEE INTERNATIONAL LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SbCeCore’.
Publisher:
McAfee, Inc.  (signed by MCAFEE INTERNATIONAL LTD.)

Product:
McAfee, Inc.(R) Endpoint Encryption for Files and Folders(TM)

Description:
McAfee Endpoint Encryption for Files and Folders Main User Mode Application

Version:
3, 2, 8, 2

MD5:
041184470df459311326234fe37f5801

SHA-1:
f003f230f13819c46a68b1a83cc339f06e52b110

SHA-256:
4c7572ae44ca30e88bfd2d2112c6b62ad3d92041f170e4f0032089f71e482209

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:14:09 AM UTC  (today)

File size:
389.8 KB (399,176 bytes)

Product version:
3, 2, 8, 2

Copyright:
(C) 2012 McAfee, Inc." All rights reserved

Trademarks:
Endpoint Encryption for Files and Folders(TM)

Original file name:
SbCeCore.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mcafee\endpoint encryption for files and folders\sbcecore.exe

Digital Signature
Signed by:
MCAFEE INTERNATIONAL LTD.

Authority:
VeriSign, Inc.

Valid from:
8/21/2009 5:30:00 AM

Valid to:
9/11/2012 5:29:59 AM

Subject:
CN=MCAFEE INTERNATIONAL LTD., OU=R&D, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=MCAFEE INTERNATIONAL LTD., L=HOVE, S=EAST SUSSEX, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3AD7ED105BA31EC35DA291FA949DA4F5

File PE Metadata
Compilation timestamp:
1/19/2012 5:20:20 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:kYbqy920bYmpK/w6MYIsq5Fm5aR/nV7O9nG702OnZOfKsQlkHJumx84aJO:kY2ys/w6MOq5g05l8nqin6K/mVfcO

Entry address:
0x284A0

Entry point:
48, 83, EC, 28, E8, 47, 63, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 4C, 8B, C1, 0F, B7, 01, 48, 83, C1, 02, 66, 85, C0, 75, F4, 90, 48, 83, E9, 02, 49, 3B, C8, 74, 09, 66, 39, 11, 75, F2, 48, 8B, C1, C3, 66, 39, 11, 75, 04, 48, 8B, C1, C3, 33, C0, C3, CC, CC, 40, 53, 48, 83, EC, 20, 8B, D9, E8, B3, 26, 00, 00, 89, 58, 1C, 48, 83, C4, 20, 5B, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, E8, 97, 26, 00, 00, 8B, 48, 1C, 69, C9, FD, 43...
 
[+]

Entropy:
6.2601

Code size:
232.5 KB (238,080 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SbCeCore

Command:
"C:\Program Files\mcafee\endpoint encryption for files and folders\sbcecore.exe"


Scan SbCeCore.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.