McAfee Anti-Malware Engine 6400 and Command Line Scanner 7.0.1 BETA

McAfee Anti-Malware Engine 6400 BETA

McAfee is pleased to announce the BETA for the McAfee Anti-Malware Engine 6400. This will be a new maintenance update to the current Engine 6300. The McAfee Anti-Malware Engine is the core component at the heart of the award-winning McAfee Endpoint and Gateway products. Using patented technology, the Engine analyzes potentially malicious code to detect and block Trojans, viruses, worms, adware, spyware, and other threats.

We encourage you to actively participate in this Beta program and provide us your valuable feedback.

New Features

  • Improved DMG extraction support to include the APFS filesystem and UDRW format
  • Security enhancements by moving away from the vulnerable OpenSSL libraries
  • Provision for decoding the b64decode from buffer
  • Augmented driver-limits to enable Research author bigger and complex detection codes
  • Ability to use Regular Expressions in drivers to supplement pattern matching algorithms
  • Expanding the exhausted hit-type limits to target more malware families
  • Supplement the contemporary XL4 code to add support for RC4 cryptoAPI decryption
  • Code optimization and minor bug fixes

Release availability

The Engine 6400 will be delivered through a throttled update approach expected early 2022 for all Enterprise ENS and consumer WSS installations that received update via V3 daily DAT updates, with no further action required.

For VSE installations, non-Windows platforms and OEM customers, the new Engine will be available from the Security Updates page and SDK as an Elective update early 2022.

The auto-update push to VSE, ENSL, ENSM and other products consuming V2 and MED DATs is expected in early 2022.

The existing Engine 6300 will be supported for the first 6 months of this new release until McAfee announces its EOL, however the use of this new release is recommended.

Command Line Scanner 7.0.1 Beta

Command Line Scanner BETA version 7.0.1 is now available for evaluation.

This release of Command Line Scanner includes several bug fixes as well as the new Engine 6400 BETA.

We encourage you to participate in this BETA program and provide us your valuable feedback.

Instructions for ENS customers to evaluate the 6400 Engine BETA

  1. In McAfee ePO, select Menu | Configuration | Server Settings.
  2. Select Source Sites, then click Edit | Add Source Site.
    1. Enter “AMCore Beta Content” as the Repository Name, then type HTTP, and click Next.
    2. In the Server name (URL) field, ensure that DNS Name is selected as the default and enter “betaupdate.mcafee.com”, with default port 80, and click Next.
    3. Continue clicking Next until the last screen, then click Save.
    4. Click Enable Fallback, then click Save.
  3. Select Menu | Automation | Server Tasks.
    1. Select Update Master Repository task and click Edit.
    2. Click Next to navigate to the Action tab, then click +.
    3. In the New Action section, select Repository Pull.
    4. Select the AMCore Beta Content as the Source site, Evaluation for Branch (if the current production AMCore content is being pulled into the current branch), and click Save.
  4. Select the Update Master Repository task and click Run.

To change the McAfee Agent policy to pull from the Evaluation branch:

  1. In McAfee ePO, edit the McAfee Agent General policy assigned to the endpoints you are using for beta testing.
  2. Click the Updates tab.
  3. Select Evaluation from the AMCore Content Package drop-down list, then save the policy.

New Supported Platforms

  • Windows 10 version 21H2
  • Windows 11
  • Windows Server 2022
  • MacOS 12.0 Monterey

System Requirements

  • At least 512 MB of free hard disk space
  • At least an additional 512 MB of free hard disk space reserved for temporary files
  • At least 512 MB of RAM for scanning operations (1024 MB recommended minimum)
  • At least 1024 MB of RAM for updating operations

Installation Requirements

Microsoft operating systems:

  • Windows 7, Windows 8.x, Windows 10 (all 32-bit and x64 Editions)
  • Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022 (all 32-bit and x64 Editions)

UNIX operating systems:

  • IBM AIX 6.1 , 7.1 or 7.2 for RS6000 with the latest maintenance packages installed.
  • FreeBSD 9.x, 10.x and 11.x for Intel with legacy compatibility library libc.so.3 installed
  • Hewlett-Packard HP-UX 11iv3 for PA-RISC with the latest Standard HP-UX patch bundles installed
  • Linux for Intel 32-bit distributions shipping with version 2.6, 3.x, 4.x or 5.x production kernels with libstdc++.so.5.0.5 installed
  • Linux for Intel 64-bit distributions shipping with version 2.6 , 3.x, 4.x or 5.x production kernels with libstdc++.so.6 installed
  • Oracle Solaris for SPARC versions 9, 10 and 11 (32 and 64-bit) with the latest Solaris OS recommended cluster installed
  • Oracle Solaris for X86 versions version 10 and 11 (32 and 64-bit) with the latest Solaris OS recommended cluster installed
  • Apple Mac OS 10.13, 10.14, and 10.15, 11.0 and the new MacOS 12.0 Monterey

Engine Downloads

Package Platform
Windows 6400 ePO package Windows (32-bit and 64-bit)
Linux 6400 ePO package Linux (32-bit and 64-bit)
Mac 6400 ePO package Mac (Intel 64-bit , ARM 64-bit)
Engine 6400 Beta Readme Readme document