McCBEntAndInstru.exe
by McAfee/Trellix
Endpoint Security
Summary
McAfee CB Entitlement and Instrumentation - licensing and telemetry for McAfee.
McCBEntAndInstru.exe is the 1079th most commonly executed Windows program in EchoTrail's dataset, observed 1,720 times across enterprise environments. It typically runs from C:\Program Files\Common Files\McAfee\platform\CommonBuild.
1079th
most commonly executed Windows program
1,720
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Common Files\McAfee\platform\CommonBuild100%
Top Hashes (SHA256)
- ef6820024c1481fe02e57f40075ac1b8c570814148c4545ee77b2beca17bb31265.05%
- a9eb8c658005c6fcb0ab84cb14d0271e66efac8d44b13577ea90bd972c75878c22.89%
- 37466cdf670be1d140481aead363e37bd42096c5e57beba54267dbb4e90186be10.31%
- 4bd647e22c173decb7b652d173feb6f4e1c8723d09ccd7faf19f4737010934451.69%
- a1aecfe8e74ef7495bc8d583602333d280e2598cf9fa6e22825f59bab492712f0.06%
Process Ancestry
Top Grandparents
- services.exe100%
Top Children
- conhost.exe64.42%
- McUICnt.exe35.58%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about McCBEntAndInstru.exe
Rocky answers questions about McCBEntAndInstru.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.