McOds.exe
McAfee VirusScan API by McAfee (Signed)
| Version: | 16,8,708,2 |
| MD5: | 63d93a440e7ac015d85b9a3da0c1bbaf |
| SHA1: | 6e20410830303fa12a6209c5a4e8e2c054d7e11b |
| SHA256: | 849a13e91b041dec2a47f5be65adba6cac8af01675d0d8e13730724b54b4dd15 |
Overview
mcods.exe runs as a service under the name McAfee Scanner (McODS) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).
Details
| File name: | mcods.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee VirusScan API |
| Description: | McAfee VirusScan On-Demand Scan |
| Typical file path: | C:\Program Files\mcafee\virusscan\mcods.exe |
| File version: | 16,8,708,2 |
| Product version: | 16,8,0,0 |
| Size: | 588.81 KB (602,944 bytes) |
| Build date: | 8/2/2013 3:28 PM |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, May 10, 2011 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'McODS' (McAfee Scanner)
- McODS
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00142138% | |
| Kernel CPU: | 0.00116693% | |
| User CPU: | 0.00025446% | |
| Kernel CPU time: | 54,340 ms/min | |
| CPU cycles: | 11,536,494/sec | |
| Memory |
| Private memory: | 7.73 MB | |
| Private (maximum): | 18.19 MB | |
| Private (minimum): | 14.17 MB | |
| Non-paged memory: | 7.73 MB | |
| Virtual memory: | 93.22 MB | |
| Virtual memory (peak): | 103.11 MB | |
| Working set: | 14.8 MB | |
| Working set (peak): | 19.75 MB | |
| Page faults: | 23,402/min | |
| I/O |
| I/O read transfer: | 4.82 MB/sec | |
| I/O read operations: | 13,681/sec | |
| I/O write transfer: | 26.75 KB/sec | |
| I/O write operations: | 6,848/sec | |
| I/O other transfer: | 2.73 MB/sec | |
| I/O other operations: | 24,597/sec | |
| Resource allocations |
| Threads: | 9 | |
| Handles: | 300 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\mcafee\virusscan\mcods.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | McODS |
| Display name: | McAfee Scanner |
| Description: | “McAfee Scanner” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.00013223% | |
| Kernel CPU: | 0.00005289% | |
| User CPU: | 0.00007934% | |
| CPU cycles: | 5,550/sec | |
| Memory: | 1.66 MB | |
| mcods.exe (main module) |
| Total CPU: | 0.00008516% | |
| Kernel CPU: | 0.00004753% | |
| User CPU: | 0.00003763% | |
| CPU cycles: | 1,697/sec | |
| Memory: | 608 KB | |
| combase.dll |
| Total CPU: | 0.00000728% | |
| Kernel CPU: | 0.00000364% | |
| User CPU: | 0.00000364% | |
| CPU cycles: | 296/sec | |
| Memory: | 1.84 MB | |
| mcrtmui.dll (McAfee Runtime MUI by McAfee) |
| Total CPU: | 0.00000410% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000410% | |
| CPU cycles: | 28/sec | |
| Memory: | 248 KB | |
| perfdisk.dll |
| Total CPU: | 0.00000364% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000364% | |
| CPU cycles: | 2/sec | |
| Memory: | 56 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
29.03% |
|
| Windows 7 Home Premium |
25.81% |
|
| Windows 8.1 Single Language |
19.35% |
|
| Windows 7 Professional |
9.68% |
|
| Windows 8 Single Language |
6.45% |
|
| Windows 8 |
6.45% |
|
| Windows 8.1 Pro with Media Center |
3.23% |
|
Distribution by country
United States installs about 54.84% of McAfee VirusScan API.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
31.37% |
|
| ASUS |
27.45% |
|
| Acer |
11.76% |
|
| Sony |
11.76% |
|
| Lenovo |
7.84% |
|
| Hewlett-Packard |
5.88% |
|
| Toshiba |
3.92% |
|
