McUICnt.exe
by McAfee/Trellix
Endpoint Security
Summary
McAfee UI Container - hosts the McAfee endpoint protection user interface.
McUICnt.exe is the 728th most commonly executed Windows program in EchoTrail's dataset, observed 4,758 times across enterprise environments. It typically runs from C:\... and it is most often launched by McPltCmd.exe.
728th
most commonly executed Windows program
4,758
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\...61.23%
- C:\Program Files\Common Files\mcafee\platform32.27%
- C:\Program Files\McAfee Security Scan\3.11.20230.52%
- C:\Program Files (x86)\McAfee Security Scan\4.1.2130.52%
- C:\Program Files (x86)\McAfee Security Scan\4.1.2900.48%
- C:\Program Files\McAfee Security Scan\3.11.5000.42%
- C:\Program Files (x86)\McAfee Security Scan\4.1.2620.42%
- C:\Program Files\McAfee Security Scan\3.11.19240.36%
- C:\Program Files\McAfee Security Scan\3.11.9680.36%
- C:\Program Files\McAfee Security Scan\3.11.11370.34%
Top Hashes (SHA256)
- 5b7faaa1415dbf6593107a47c02c1d1cb7a47b5ab10eece5a4acefce77e9c00b61.43%
- 6350306f382a53b802305026948a31da4c8f6b2372b249781b2b37f2e66e5d0528.35%
- e0c9b0f737e230cfadece51f3c66c3ccaf611389bc07ebde224b2aa80b1c251a2.93%
- 1bca7e8f5f57e306a0948380d8fbf2922f6c4c6b47fb713ed1b58e509dd4e18c0.6%
- becce12944a178523d14ab19733a13d55bf7addd56a9cf010b82b7923a555a1e0.58%
- eef62b9bee155c54e99e4887622cbc1dbf7ffe114a85ae0e3e5aa913eb0bc40e0.53%
- 5de94cc65cec8b677bd4af388dd8889fd052c3b7e36508b133c36569d34e9b650.46%
- 7c51806ee58b5fa32438791125c985c79e0458ed50fa2ce5dc3959ffd8a09c920.46%
- 37b5396cbc0c1ed2653cc52b19582adc9c80c8a2d03f78fc3eb4265f07d47a040.39%
- bb4bdebf929ec0f28a484c82916802dd2a053e42997a3a297097312895e1333c0.37%
Process Ancestry
Top Grandparents
- explorer.exe9.83%
- services.exe8.24%
- svchost.exe4.75%
- McUICnt.exe2.69%
- runonce.exe2.22%
- McCHSvc.exe1.9%
- mcagent.exe0.16%
- Uninstall.exe0.16%
Top Parents
- McPltCmd.exe53.6%
- McCBEntAndInstru.exe19.63%
- SSScheduler.exe5.7%
- svchost.exe5.66%
- McUICnt.exe4.75%
- mcagent.exe4.23%
- McInstru.exe0.02%
- taskhostw.exe0.02%
Top Children
- mcupdate.exe98.43%
- McUICnt.exe1.38%
- firefox.exe0.14%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about McUICnt.exe
Rocky answers questions about McUICnt.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.