mcdatrep.exe
by McAfee / Trellix
Endpoint Security
Summary
McAfee DAT reputation service
mcdatrep.exe is the 2914th most commonly executed Windows program in EchoTrail's dataset, observed 105 times across enterprise environments. It typically runs from C:\Program Files\Common Files\mcafee\AMContent\scanners\x86_64\datrep\1.0.5.243 and it is most often launched by svchost.exe.
2914th
most commonly executed Windows program
105
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Common Files\mcafee\AMContent\scanners\x86_64\datrep\1.0.5.24388.57%
- C:\Program Files\Common Files\mcafee\amcontent\scanners\x86_64\datrep\1.0.12.6639.52%
- C:\Program Files\Common Files\mcafee\AMContent\scanners\x86_64\datrep\1.50.1291.11.9%
Top Hashes (SHA256)
- b25dc90442f7a0a85e8d056c11a203a4718922d0dccfcc16461f1dbf74863cb388.57%
- 1301843ab0d1753e7deff5fff34a6b92d1bb9e9a37c5804c9c63f05b5f02bc739.52%
- 76a5ad0e64aa480637fcff95acd059f53c8cc971ac5b4acc2126dd188c486cb91.9%
Process Ancestry
Top Grandparents
- svchost.exe51.22%
- services.exe48.78%
Top Parents
- svchost.exe54.29%
- MCUPDA~1.EXE45.71%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mcdatrep.exe
Rocky answers questions about mcdatrep.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.