Additional versions

Anti-Malware Core.1.1.3.164.x64	55.88%
Anti-Malware Core.1.1.3.136.x64	1.47%
Anti-Malware Core.1.1.2.123.x64	19.12%
Anti-Malware Core.1.1.2.118.x64	1.47%
Anti-Malware Core.1.1.1.244.x86	1.47%
Anti-Malware Core.1.1.1.244.x64	1.47%
Anti-Malware Core.1.0.1.118.x64	16.18%
Anti-Malware Core.1.0.0.1921.x86	1.47%
Anti-Malware Core.1.0.0.1921.x64	1.47%

Parent process

Related files

McAfee On-Access Scanner service features true blocking On Access Scanning. It scans every file being accessed from or written to the machine and blocks infections if any. On Access Scanner can be configured to scan on Read Only, Write only or both. It can also be configured to scan files on network volumes.

mcshield.exe runs as a service under the name McAfee Anti-Malware Core (mfecore) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

CPU
Total CPU:	0.00103215%	0.028634%
Kernel CPU:	0.00080497%	0.013761%
User CPU:	0.00022718%	0.014873%
Kernel CPU time:	1,814,479 ms/min	100,923,805ms/min
Memory
Private memory:	192.11 MB	21.59 MB
Private (maximum):	172.85 MB
Private (minimum):	168.46 MB
Non-paged memory:	192.11 MB	21.59 MB
Virtual memory:	378.49 MB	140.96 MB
Virtual memory (peak):	390.43 MB	169.69 MB
Working set:	172.59 MB	18.61 MB
Working set (peak):	180.48 MB	37.95 MB
Resource allocations
Threads:	38	12
Handles:	666	600

ncapi.dll (Anti-Malware Core by McAfee)
Total CPU:	1.83720990%	0.272967%
Kernel CPU:	0.19118961%	0.107585%
User CPU:	1.64602030%	0.165382%
CPU cycles:	34,613,468/sec	5,741,424/sec
Memory:	92 KB	1.16 MB
MCNormalizer.dat
Total CPU:	0.32755822%
Kernel CPU:	0.08078108%
User CPU:	0.24677714%
CPU cycles:	6,004,097/sec
Memory:	156 KB
ADVAPI32.dll
Total CPU:	0.07517000%
Kernel CPU:	0.05879634%
User CPU:	0.01637366%
CPU cycles:	1,361,946/sec
Memory:	792 KB
emmain.dll (Anti-Malware Core by McAfee)
Total CPU:	0.03268667%
Kernel CPU:	0.00385118%
User CPU:	0.02883550%
CPU cycles:	655,719/sec
Memory:	216 KB
MSVCR90.dll
Total CPU:	0.00774689%
Kernel CPU:	0.00260552%
User CPU:	0.00514137%
CPU cycles:	162,068/sec
Memory:	652 KB
ts.dat
Total CPU:	0.00051859%
Kernel CPU:	0.00019447%
User CPU:	0.00032412%
CPU cycles:	9,872/sec
Memory:	1.04 MB
mcshield.exe (main module)
Total CPU:	0.00009708%
Kernel CPU:	0.00009708%
User CPU:	0.00000000%
CPU cycles:	3,544/sec
Memory:	616 KB
RPCRT4.dll
Total CPU:	0.00003236%
Kernel CPU:	0.00003236%
User CPU:	0.00000000%
CPU cycles:	133/sec
Memory:	780 KB