McNASvc.exe
McAfee Integrated Security Platform by McAfee (Signed)
Overview
There are 5 versions of McNASvc.exe in the wild, the latest version being 3,15,101,0. It is started as a Windows Service called 'McNASvc' with the name 'McNASvc' and described as “Allows McAfee applications to communicate securely on the local network.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 2.3 MB. The file is a digitally signed and issued to McAfee by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0003% including both foreground and background operations, the average private memory consumption is about 9.18 MB. Addionally, typically read and write I/O disk operations is about 5.05 KB per minute for reads and 166 Bytes per minute for writes.
 Details
|
| File name: | McNASvc.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee Integrated Security Platform |
| Description: | McAfee Network Agent |
| Typical file path: | C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Effective date: | Friday, September 12, 2008 |
| Expiration date: | Sunday, October 9, 2011 |
| Windows Service |
| Service name: | McNASvc |
| Display name: | McNASvc |
| Description: | “Allows McAfee applications to communicate securely on the local network.” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of McNASvc.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- McNASvc
- 'McNASvc' (McAfee Network Agent)
All file variations of McNASvc.exe
