Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.6.0.2935 55.56%
4.6.0.1694 11.11%
4.5.0.1810 11.11%
4.5.0.1499 11.11%
4.0.0.1496 11.11%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
OpenThreadToken, ControlService, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, OpenProcessToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, RegCloseKey, CloseServiceHandle, SetServiceStatus, GetTokenInformation, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, ChangeServiceConfigW
kernel32.dll
WaitForSingleObject, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetLocaleInfoA, GetACP, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, VirtualAlloc, GetCurrentProcessId, CloseHandle, GetCurrentThread, DeleteCriticalSection, SetEvent, ResetEvent, FreeLibrary, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, SetProcessWorkingSetSize, GetCurrentProcess, VirtualFree, InterlockedIncrement, InterlockedDecrement, lstrlenA, Sleep, GetCurrentThreadId, SizeofResource, LoadResource, GetVersion, DebugBreak, GetUserDefaultLangID, GetCommandLineW, GetLastError, FlushInstructionCache, SetLastError, CompareStringA, GetModuleHandleA, GetModuleFileNameA, GetWindowsDirectoryA, GetSystemDirectoryA, LoadLibraryA, InterlockedExchange, IsProcessorFeaturePresent, HeapAlloc, GetProcessHeap, HeapFree, InterlockedCompareExchange, GetVersionExA, GetThreadLocale, ExitProcess
msvcp71.dll
DllMain
msvcp80.dll
DllMain
msvcr71.dll
DllMain
msvcr80.dll
DllMain
nacmnlib3_71.dll
GetResString, LoadResourceDLLW
nailog3.dll
_naimcomn_SetSystem@4, _naimcomn_SetLogToStdout@4, _naimcomn_InitTracer@0, _naimcomn_GetLogLevelFromRegistry@0, _naimcomn_EndFileLogging@0, _naimcomn_StartFileLogging@4
ole32.dll
CreateStreamOnHGlobal, CoMarshalInterface, CoInitialize, CoInitializeSecurity, StringFromGUID2, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CLSIDFromString, CoImpersonateClient, CoRevertToSelf
shlwapi.dll
PathFindExtensionW
user32.dll
DestroyWindow, ShowWindow, UnregisterClassA

frameworkservice.exe

McAfee Agent by McAfee (Signed)

Remove frameworkservice.exe
Version:   4.5.0.1499
MD5:   200d973a6ec41d29d9cca21ea75e1edd
SHA1:   b20e79e6a97b2f42c014955565c4b8b62980f6d8
SHA256:   4ea894de9586a6606a9df90554b9bdf8fcda7a8f27daf4595ec4d6f90fe55680

What is frameworkservice.exe?

Framework Service is part of McAfee Agent. The McAfee Agent is a process that runs in the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a PC. The McAfee Agent offers access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the notifications area of the taskbar and will load on each reboot.

Overview

frameworkservice.exe runs as a service under the name McAfee Framework Service (McAfeeFramework) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including McAfee Agent published by McAfee, Inc. and McAfee Agent published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:frameworkservice.exe
Publisher:McAfee, Inc.
Product name:McAfee Agent
Description:Framework Service
Typical file path:C:\Program Files\mcafee\common framework\frameworkservice.exe
Original name:Framework.exe
File version:4.5.0.1499
Size:117.31 KB (120,128 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Expiration date:Monday, October 10, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
McAfee Agent
 McAfee, Inc.
11% remove
The McAfee Agent is placed on the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a computer. The McAfee Agent offers quick access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the taskbar with the letter M.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'McAfeeFramework' (McAfee Framework Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\McAfee\Common Framework\FrameworkService.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 8082

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00024142%
    0.028634%
    Kernel CPU:0.00018396%
    0.013761%
    User CPU:0.00005746%
    0.014873%
    Kernel CPU time:11,778 ms/min
    100,923,805ms/min
    CPU cycles:13,375,283/sec
    17,470,203/sec
    Memory
    Private memory:11.61 MB
    21.59 MB
    Private (maximum):12.75 MB
    Private (minimum):3.54 MB
    Non-paged memory:11.61 MB
    21.59 MB
    Virtual memory:124.77 MB
    140.96 MB
    Virtual memory (peak):130.77 MB
    169.69 MB
    Working set:10.68 MB
    18.61 MB
    Working set (peak):15.32 MB
    37.95 MB
    Page faults:140,492/min
    2,039/min
    I/O
    I/O read transfer:16.74 KB/sec
    1.02 MB/min
    I/O read operations:12/sec
    343/min
    I/O write transfer:15.15 KB/sec
    274.99 KB/min
    I/O write operations:15/sec
    227/min
    I/O other transfer:9.44 KB/sec
    448.09 KB/min
    I/O other operations:362/sec
    1,671/min
    Resource allocations
    Threads:57
    12
    Handles:456
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\mcafee\common framework\frameworkservice.exe" /servicestart
    Owner:SYSTEM
    Windows Service
    Service name:McAfeeFramework
    Display name:McAfee Framework Service
    Description:“Framework voor gedeelde componenten voor McAfee-producten”
    Type:Win32OwnProcess

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.00352408%
    0.272967%
    Kernel CPU:0.00352408%
    0.107585%
    User CPU:0.00000000%
    0.165382%
    CPU cycles:93,241/sec
    5,741,424/sec
    Memory:1.66 MB
    1.16 MB
    FrameworkService.exe (main module)
    Total CPU:0.00265725%
    Kernel CPU:0.00195559%
    User CPU:0.00070166%
    CPU cycles:148,631/sec
    Memory:116 KB
    wow64.dll
    Total CPU:0.00032277%
    Kernel CPU:0.00020540%
    User CPU:0.00011737%
    CPU cycles:11,624/sec
    Memory:252 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Microsoft Windows XP 55.56%
    Windows 7 Professional 33.33%
    Windows 8 Enterprise 11.11%

    Distribution by countryDistribution by country

    Indonesia installs about 44.44% of McAfee Agent.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Toshiba 80.00%
    Hewlett-Packard 20.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE