Additional versions

Anti-Malware Core.1.1.3.164.x64	55.88%
Anti-Malware Core.1.1.3.136.x64	1.47%
Anti-Malware Core.1.1.2.123.x64	19.12%
Anti-Malware Core.1.1.2.118.x64	1.47%
Anti-Malware Core.1.1.1.244.x86	1.47%
Anti-Malware Core.1.1.1.244.x64	1.47%
Anti-Malware Core.1.0.1.118.x64	16.18%
Anti-Malware Core.1.0.0.1921.x86	1.47%
Anti-Malware Core.1.0.0.1921.x64	1.47%

Parent process

Related files

McAfee On-Access Scanner service features true blocking On Access Scanning. It scans every file being accessed from or written to the machine and blocks infections if any. On Access Scanner can be configured to scan on Read Only, Write only or both. It can also be configured to scan files on network volumes.

mcshield.exe runs as a service under the name McAfee Anti-Malware Core (mfecore) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

CPU
Total CPU:	0.00322071%	0.028634%
Kernel CPU:	0.00016177%	0.013761%
User CPU:	0.00305894%	0.014873%
Kernel CPU time:	160,837 ms/min	100,923,805ms/min
Memory
Private memory:	222.9 MB	21.59 MB
Private (maximum):	138.14 MB
Private (minimum):	108.43 MB
Non-paged memory:	222.9 MB	21.59 MB
Virtual memory:	413.29 MB	140.96 MB
Virtual memory (peak):	464.82 MB	169.69 MB
Working set:	107.7 MB	18.61 MB
Working set (peak):	182.38 MB	37.95 MB
Resource allocations
Threads:	50	12
Handles:	751	600

sechost.dll
Total CPU:	9.59107782%	0.272967%
Kernel CPU:	3.96912431%	0.107585%
User CPU:	5.62195351%	0.165382%
CPU cycles:	152,118,435/sec	5,741,424/sec
Memory:	100 KB	1.16 MB
MCNormalizer.dat
Total CPU:	2.30832090%
Kernel CPU:	0.89441788%
User CPU:	1.41390302%
CPU cycles:	36,163,105/sec
Memory:	172 KB
ncapi.dll (Anti-Malware Core by McAfee)
Total CPU:	0.61467699%
Kernel CPU:	0.09160916%
User CPU:	0.52306783%
CPU cycles:	9,918,515/sec
Memory:	96 KB
MSVCR90.dll
Total CPU:	0.40811505%
Kernel CPU:	0.11459417%
User CPU:	0.29352088%
CPU cycles:	6,555,377/sec
Memory:	652 KB
emmain.dll (Anti-Malware Core by McAfee)
Total CPU:	0.04689478%
Kernel CPU:	0.01863343%
User CPU:	0.02826135%
CPU cycles:	762,148/sec
Memory:	216 KB
ts.dat
Total CPU:	0.01697959%
Kernel CPU:	0.00754648%
User CPU:	0.00943311%
CPU cycles:	352,751/sec
Memory:	1.04 MB
ntdll.dll
Total CPU:	0.01346695%
Kernel CPU:	0.01346695%
User CPU:	0.00000000%
CPU cycles:	265,328/sec
Memory:	1.23 MB
mcshield.exe (main module)
Total CPU:	0.00628418%
Kernel CPU:	0.00628418%
User CPU:	0.00000000%
CPU cycles:	84,858/sec
Memory:	628 KB
amgti.dat
Total CPU:	0.00188541%
Kernel CPU:	0.00188541%
User CPU:	0.00000000%
CPU cycles:	19,128/sec
Memory:	184 KB