frameworkservice.exe
McAfee Agent by McAfee (Signed)
| Version: | 4.6.0.1694 |
| MD5: | 4be4e5ff1d5fc78ce130c87faaa5b0f1 |
| SHA1: | c3216b3e6e8ad4b66a5c23b17306533adac96bdb |
| SHA256: | 4ae3afad8bc652ee1131601d41ac8a587834be563903340e356016e4a9dfa147 |
What is frameworkservice.exe?
Framework Service is part of McAfee Agent. The McAfee Agent is a process that runs in the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a PC. The McAfee Agent offers access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the notifications area of the taskbar and will load on each reboot.
Overview
frameworkservice.exe runs as a service under the name McAfee Framework Service (McAfeeFramework) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program McAfee Agent published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).
Details
| File name: | frameworkservice.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee Agent |
| Description: | Framework Service |
| Typical file path: | C:\Program Files\mcafee\common framework\frameworkservice.exe |
| Original name: | Framework.exe |
| File version: | 4.6.0.1694 |
| Product version: | 4.6.0 |
| Size: | 129.31 KB (132,416 bytes) |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, October 10, 2011 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following program will install this file
The McAfee Agent is placed on the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a computer. The McAfee Agent offers quick access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the taskbar with the letter M.
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'McAfeeFramework' (McAfee Framework Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\McAfee\Common Framework\FrameworkService.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 8082
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00020789% | |
| Kernel CPU: | 0.00011585% | |
| User CPU: | 0.00009204% | |
| Kernel CPU time: | 44,647 ms/min | |
| CPU cycles: | 1,150,358/sec | |
| Context switches: | 1/sec | |
| Memory |
| Private memory: | 9.09 MB | |
| Private (maximum): | 8.34 MB | |
| Private (minimum): | 360 KB | |
| Non-paged memory: | 9.09 MB | |
| Virtual memory: | 108.48 MB | |
| Virtual memory (peak): | 111.48 MB | |
| Working set: | 5.91 MB | |
| Working set (peak): | 14.14 MB | |
| Page faults: | 866,958/min | |
| I/O |
| I/O read transfer: | 30.73 KB/sec | |
| I/O read operations: | 36/sec | |
| I/O write transfer: | 9.8 KB/sec | |
| I/O write operations: | 39/sec | |
| I/O other transfer: | 310 Bytes/sec | |
| I/O other operations: | 194/sec | |
| Resource allocations |
| Threads: | 47 | |
| Handles: | 449 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\mcafee\common framework\frameworkservice.exe" /servicestart |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | McAfeeFramework |
| Display name: | McAfee Framework Service |
| Description: | “Framework voor gedeelde componenten voor McAfee-producten” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| agent.dll (McAfee Agent by McAfee) |
| Total CPU: | 0.00963997% | |
| Kernel CPU: | 0.00786110% | |
| User CPU: | 0.00177887% | |
| CPU cycles: | 324,302/sec | |
| Memory: | 548 KB | |
| sechost.dll |
| Total CPU: | 0.00022340% | |
| Kernel CPU: | 0.00010053% | |
| User CPU: | 0.00012287% | |
| CPU cycles: | 6,975/sec | |
| Memory: | 100 KB | |
| MSVCR80.dll |
| Total CPU: | 0.00017872% | |
| Kernel CPU: | 0.00010053% | |
| User CPU: | 0.00007819% | |
| CPU cycles: | 34,108/sec | |
| Memory: | 620 KB | |
| mfelpc.dll (McAfee Agent by McAfee) |
| Total CPU: | 0.00001117% | |
| Kernel CPU: | 0.00001117% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 32,216/sec | |
| Memory: | 344 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
55.56% |
|
| Windows 7 Professional |
33.33% |
|
| Windows 8 Enterprise |
11.11% |
|
Distribution by country
Indonesia installs about 44.44% of McAfee Agent.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
80.00% |
|
| Hewlett-Packard |
20.00% |
|
