mcshield.exe
Anti-Malware Core by McAfee (Signed)
Version: | Anti-Malware Core.1.1.1.244.x64 |
MD5: | e96acd89e17d63d5966659e6424118cb |
SHA1: | 364442793648442c37db50ebf7e8ca9d073cd75e |
SHA256: | 3857af7bb9573f41ead5f67d7c109a9fe459d32147aad2a8ee5071a208c91291 |
What is mcshield.exe?
McAfee On-Access Scanner service features true blocking On Access Scanning. It scans every file being accessed from or written to the machine and blocks infections if any. On Access Scanner can be configured to scan on Read Only, Write only or both. It can also be configured to scan files on network volumes.
Overview
mcshield.exe runs as a service under the name McAfee Anti-Malware Core (mfecore) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).
Details
File name: | mcshield.exe |
Publisher: | McAfee, Inc. |
Product name: | Anti-Malware Core |
Description: | McAfee On-Access Scanner service |
Typical file path: | C:\Program Files\common files\mcafee\amcore\mcshield.exe |
File version: | Anti-Malware Core.1.1.1.244.x64 |
Size: | 993.18 KB (1,017,016 bytes) |
Build date: | 2/11/2013 3:43 PM |
Certificate |
Issued to: | McAfee |
Authority (CA): | VeriSign |
Effective date: | Friday, June 10, 2011 |
Digital DNA |
File packed: | No |
Code language: | Microsoft Visual C# / Basic .NET |
.NET CLR: | Yes |
.NET NGENed: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'mfecore' (McAfee Anti-Malware Core)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00607628% | |
Kernel CPU: | 0.00314396% | |
User CPU: | 0.00293232% | |
Kernel CPU time: | 59,922 ms/min | |
CPU cycles: | 29,469,628/sec | |
Context switches: | 70/sec | |
Memory |
Private memory: | 221.95 MB | |
Private (maximum): | 219.84 MB | |
Private (minimum): | 90.55 MB | |
Non-paged memory: | 221.95 MB | |
Virtual memory: | 423.96 MB | |
Virtual memory (peak): | 660.84 MB | |
Working set: | 212.39 MB | |
Working set (peak): | 443.59 MB | |
Page faults: | 3,456,742/min | |
I/O |
I/O read transfer: | 21.97 MB/sec | |
I/O read operations: | 3,389/sec | |
I/O write transfer: | 142.7 KB/sec | |
I/O write operations: | 22/sec | |
I/O other transfer: | 18.76 MB/sec | |
I/O other operations: | 6,134/sec | |
Resource allocations |
Threads: | 42 | |
Handles: | 748 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command line: | "C:\Program Files\common files\mcafee\amcore\mcshield.exe" |
Owner: | SYSTEM |
Windows Service |
Service name: | mfecore |
Display name: | McAfee Anti-Malware Core |
Description: | “McAfee OnAccess Scanner” |
Type: | Win32OwnProcess |
Parent process: | services.exe (by Microsoft) |
Threads
Averages
sechost.dll |
Total CPU: | 1.14836559% | |
Kernel CPU: | 0.13897282% | |
User CPU: | 1.00939277% | |
CPU cycles: | 24,453,159/sec | |
Context switches: | 20/sec | |
Memory: | 288 KB | |
ncapi.dll |
Total CPU: | 0.24010433% | |
Kernel CPU: | 0.00744866% | |
User CPU: | 0.23265567% | |
CPU cycles: | 5,369,300/sec | |
Context switches: | 2/sec | |
Memory: | 116 KB | |
MCNormalizer.dat |
Total CPU: | 0.18331075% | |
Kernel CPU: | 0.04950884% | |
User CPU: | 0.13380191% | |
CPU cycles: | 3,769,667/sec | |
Context switches: | 3/sec | |
Memory: | 204 KB | |
EMMain.dll |
Total CPU: | 0.00960239% | |
Kernel CPU: | 0.00241838% | |
User CPU: | 0.00718401% | |
CPU cycles: | 269,181/sec | |
Context switches: | 5/sec | |
Memory: | 284 KB | |
MSVCR90.dll |
Total CPU: | 0.00804166% | |
Kernel CPU: | 0.00160224% | |
User CPU: | 0.00643942% | |
CPU cycles: | 165,625/sec | |
Memory: | 652 KB | |
ts.dat |
Total CPU: | 0.00134615% | |
Kernel CPU: | 0.00075385% | |
User CPU: | 0.00059231% | |
CPU cycles: | 66,263/sec | |
Memory: | 1.19 MB | |
mcshield.exe (main module) |
Total CPU: | 0.00021330% | |
Kernel CPU: | 0.00021330% | |
User CPU: | 0.00000000% | |
CPU cycles: | 3,640/sec | |
Memory: | 1004 KB | |
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
27.94% |
|
Windows 8.1 |
22.06% |
|
Windows 8.1 Single Language |
16.18% |
|
Windows 8 |
16.18% |
|
Windows 8 Single Language |
5.88% |
|
Windows 8.1 Pro with Media Center |
2.94% |
|
Windows 8 Pro |
2.94% |
|
Windows 7 Professional |
1.47% |
|
Windows 7 Ultimate |
1.47% |
|
Windows Vista Home Premium |
1.47% |
|
Windows 7 Starter |
1.47% |
|
Distribution by country
United States installs about 50.00% of Anti-Malware Core.
Distribution by PC manufacturer
PC Manufacturer | distribution |
ASUS |
29.13% |
|
Dell |
23.30% |
|
Acer |
12.62% |
|
Lenovo |
11.65% |
|
Hewlett-Packard |
11.65% |
|
Sony |
7.77% |
|
Toshiba |
3.88% |
|