mcvsmap.exe
by McAfee/Trellix
Endpoint Security
Sources: 300M+ executions observed in the wild.
Summary
McAfee VirusScan MAP - Managed Anti-virus Process for McAfee endpoint protection.
mcvsmap.exe is the 1187th most commonly executed Windows program in EchoTrail's dataset, observed 1,372 times across enterprise environments. It typically runs from C:\Program Files\mcafee\MfeAV and it is most often launched by MCUPDA~1.EXE.
Get this in your tools
The same record for mcvsmap.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/mcvsmap.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
1187th
most commonly executed Windows program
1,372
observed endpoint executions
Behavior
Top Paths
- C:\Program Files\mcafee\MfeAV96.95%
- C:\...3.05%
Top Hashes (SHA256)
- 96c78801c9893ef8102ec3c47162df5f6843ca06eceae99be81fa39db35a2d4b72.96%
- b60cc7789c9467759ee4008aed13ef197bb215e57e15650e38344e75a26fd5ef23.45%
- b05514868d904907d9662c7c88834268efe18ab7e02500e31c3bb272ed25bbd73.35%
- 0cf311a45ff774af867a53735019da24d6ebaba579ce33270fa67c9ee63edd1c0.16%
- dcd230edfef1cd7c3a43ec4fc3c91abdb96d752c775de0f6f33f10625a9fb7150.08%
Process Ancestry
Top Grandparents
- svchost.exe98.47%
- McInst.exe0.51%
- MCUPDA~1.EXE0.51%
Top Parents
- MCUPDA~1.EXE76.47%
- mcupdatemgr.exe23.24%
- McInst.exe0.29%
Ask Rocky about mcvsmap.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for mcvsmap.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.