Additional versions

Anti-Malware Core.1.1.3.164.x64	55.88%
Anti-Malware Core.1.1.3.136.x64	1.47%
Anti-Malware Core.1.1.2.123.x64	19.12%
Anti-Malware Core.1.1.2.118.x64	1.47%
Anti-Malware Core.1.1.1.244.x86	1.47%
Anti-Malware Core.1.1.1.244.x64	1.47%
Anti-Malware Core.1.0.1.118.x64	16.18%
Anti-Malware Core.1.0.0.1921.x86	1.47%
Anti-Malware Core.1.0.0.1921.x64	1.47%

Parent process

Related files

McAfee On-Access Scanner service features true blocking On Access Scanning. It scans every file being accessed from or written to the machine and blocks infections if any. On Access Scanner can be configured to scan on Read Only, Write only or both. It can also be configured to scan files on network volumes.

mcshield.exe runs as a service under the name McAfee Anti-Malware Core (mfecore) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

CPU
Total CPU:	0.00103824%	0.028634%
Kernel CPU:	0.00056015%	0.013761%
User CPU:	0.00047809%	0.014873%
Kernel CPU time:	389,637 ms/min	100,923,805ms/min
CPU cycles:	18,968,263/sec	17,470,203/sec
Context switches:	40/sec	284/sec
Memory
Private memory:	284.3 MB	21.59 MB
Private (maximum):	174.42 MB
Private (minimum):	8.22 MB
Non-paged memory:	284.3 MB	21.59 MB
Virtual memory:	493.37 MB	140.96 MB
Virtual memory (peak):	741.29 MB	169.69 MB
Working set:	126.04 MB	18.61 MB
Working set (peak):	427.09 MB	37.95 MB
Page faults:	97,265,303/min	2,039/min
I/O
I/O read transfer:	59.3 MB/sec	1.02 MB/min
I/O read operations:	1,025/sec	343/min
I/O write transfer:	26.03 KB/sec	274.99 KB/min
I/O write operations:	39/sec	227/min
I/O other transfer:	34.82 MB/sec	448.09 KB/min
I/O other operations:	15,954/sec	1,671/min
Resource allocations
Threads:	47	12
Handles:	742	600

ntdll.dll
Total CPU:	16.60599055%	0.272967%
Kernel CPU:	1.01877302%	0.107585%
User CPU:	15.58721753%	0.165382%
CPU cycles:	364,223,588/sec	5,741,424/sec
Context switches:	113/sec	79/sec
Memory:	1.66 MB	1.16 MB
ncapi.dll (Anti-Malware Core by McAfee)
Total CPU:	0.75975813%
Kernel CPU:	0.03275007%
User CPU:	0.72700805%
CPU cycles:	13,213,073/sec
Context switches:	1/sec
Memory:	120 KB
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:	0.60144799%
Kernel CPU:	0.26500635%
User CPU:	0.33644164%
CPU cycles:	16,139,337/sec
Context switches:	2/sec
Memory:	124 KB
MCNormalizer.dat
Total CPU:	0.19333583%
Kernel CPU:	0.06014490%
User CPU:	0.13319093%
CPU cycles:	3,800,789/sec
Context switches:	1/sec
Memory:	208 KB
emmain.dll (Anti-Malware Core by McAfee)
Total CPU:	0.02630209%
Kernel CPU:	0.00987478%
User CPU:	0.01642730%
CPU cycles:	517,435/sec
Memory:	284 KB
MSVCR90.dll
Total CPU:	0.00576997%
Kernel CPU:	0.00087522%
User CPU:	0.00489475%
CPU cycles:	138,010/sec
Memory:	652 KB
ts.dat
Total CPU:	0.00251442%
Kernel CPU:	0.00151684%
User CPU:	0.00099758%
CPU cycles:	60,877/sec
Memory:	1.32 MB
mcshield.exe (main module)
Total CPU:	0.00020527%
Kernel CPU:	0.00019605%
User CPU:	0.00000922%
CPU cycles:	2,677/sec
Memory:	1004 KB
amgti.dat
Total CPU:	0.00013605%
Kernel CPU:	0.00011481%
User CPU:	0.00002125%
CPU cycles:	2,578/sec
Memory:	216 KB