home

f_000bf2

McAfee Virtual Technician

McAfee, Inc.

This is installed with McAfee Virtual Technician. The file has been seen being downloaded from mvt.mcafee.com and multiple other hosts.
Publisher:
McAfee, Inc.  (signed and verified)

Product:
McAfee Virtual Technician

Description:
McAfee Virtual Technician Installer

Version:
7.7.0.366

MD5:
c3bb12b60f04470521ddea77f11e869b

SHA-1:
d8986016ae06bdad20b7cd526fb262a75085b98f

SHA-256:
abdebb24298d99f87fb6803855a6cdb0adec04b455e4ceff1ab08bf2a3d6cf3b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:09:01 PM UTC  (today)

File size:
572.4 KB (586,096 bytes)

Product version:
7.7.0.366

Copyright:
©2015 McAfee, Inc. All Rights Reserved.

Original file name:
MVTInstaller.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\beaglebrowser\user data\default\cache\f_000bf2

Digital Signature
Signed by:
McAfee, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/5/2014 1:00:00 AM

Valid to:
3/5/2017 12:59:59 AM

Subject:
CN="McAfee, Inc.", OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="McAfee, Inc.", L=Santa Clara, S=Oregon, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5DC98B9ADD1B30090983CBE53B9E6406

File PE Metadata
Compilation timestamp:
8/18/2015 11:39:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:6dtCooADI9gjXbpaFiIPbvr1oKOIjESbeqANDEN:6dqCXoDvRoKOIjcqYDEN

Entry address:
0x35BFE

Entry point:
E8, EB, 8B, 00, 00, E9, 17, FE, FF, FF, 68, D0, 4D, 43, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, BC, 64, 46, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, 44, 24, 04, A3, C4, 7D, 46, 00, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 64, 46, 00...
 
[+]

Entropy:
6.1134

Code size:
305.5 KB (312,832 bytes)

The file f_000bf2 has been discovered within the following program.

McAfee Virtual Technician  by McAfee, Inc.
McAfee Virtual Technician collects data that helps diagnose and resolve issues related to the McAfee products installed on your computer.
mvt.mcafee.com
21% remove it
 
Powered by Should I Remove It?

The file f_000bf2 has been seen being distributed by the following 7 URLs.

http://mvt.mcafee.com/.../index.asp?affid=678

http://mvt.mcafee.com/.../index.asp?affid=691

http://download.mcafee.com/products/mvt/.../MVTInstaller.exe

http://mvt.mcafee.com/.../index.asp?affid=662-18&langid=

http://mvt.mcafee.com/.../index.asp?affid=0

http://mvt.mcafee.com/.../index.asp?affid=1244

http://mvt.mcafee.com/.../mvtinstaller.asp

Scan f_000bf2 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.