mpfsrv.exe
McAfee Personal Firewall by McAfee (Signed)
Overview
There are 5 versions of mpfsrv.exe in the wild, the latest version being 10.15.106.0. It is started as a Windows Service called 'MpfService' with the name 'MpfService' and described as “Helps protect your computer from intrusion and let's you manage your computer's trusted programs.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 846.77 KB. The file is a digitally signed and issued to McAfee by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0008% including both foreground and background operations, the average private memory consumption is about 8.29 MB with the maximum memory reaching around 11.59 MB. Addionally, typically read and write I/O disk operations is about 66.7 KB per minute for reads and 910 Bytes per minute for writes.
 Details
|
| File name: | mpfsrv.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee Personal Firewall |
| Description: | McAfee Personal Firewall Service |
| Typical file path: | C:\Program Files\mcafee\mpf\mpfsrv.exe |
| Original name: | MpfService.exe |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Effective date: | Friday, September 12, 2008 |
| Expiration date: | Sunday, October 9, 2011 |
| Windows Service |
| Service name: | MpfService |
| Display name: | MpfService |
| Description: | “Helps protect your computer from intrusion and let's you manage your computer's trusted programs.” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of mpfsrv.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- MpfService
- 'MpfService' (McAfee Personal Firewall Service)
All file variations of mpfsrv.exe
