MCAC.exe
by McAfee / Trellix
Endpoint Security
Summary
McAfee Application Control
MCAC.exe is the 2052nd most commonly executed Windows program in EchoTrail's dataset, observed 292 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by MCAC.exe.
2052nd
most commonly executed Windows program
292
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Users\...100%
Top Hashes (SHA256)
- 016ff331e93bf9e28544777815d40c347068a2cbaf70b0e8bc5795e45b2d60a575%
- 70303b08539dd10da9f0e5bded4bfbbc521ee186f8d9cfcf59376ffeed6d2c3815.75%
- b0963e6ca26ae0541aeea6eb3f2ab0496bb3e35d66585c1ec9ebddeb9d18e51d6.51%
- 5b7651fd7a8c3cf4b0402745a8ef8d66c631eb6b0dee55a3fe023534cba518552.74%
Process Ancestry
Top Grandparents
- explorer.exe35.82%
- chrome.exe31.34%
- userinit.exe10.45%
- MCAC.exe8.21%
- OUTLOOK.EXE8.21%
- browser_broker.exe1.87%
- iexplore.exe1.49%
- msiexec.exe1.49%
- jp2launcher.exe0.37%
- RuntimeBroker.exe0.37%
Top Parents
- MCAC.exe36.13%
- chrome.exe31.39%
- explorer.exe13.14%
- UCA.exe12.41%
- iexplore.exe1.46%
- RuntimeBroker.exe0.36%
Top Children
- MCAC.exe85.34%
- WerFault.exe2.59%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about MCAC.exe
Rocky answers questions about MCAC.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.