mcvsmap.exe
by McAfee/Trellix
Endpoint Security
Summary
McAfee VirusScan MAP - Managed Anti-virus Process for McAfee endpoint protection.
mcvsmap.exe is the 1187th most commonly executed Windows program in EchoTrail's dataset, observed 1,372 times across enterprise environments. It typically runs from C:\Program Files\mcafee\MfeAV and it is most often launched by MCUPDA~1.EXE.
1187th
most commonly executed Windows program
1,372
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\mcafee\MfeAV96.95%
- C:\...3.05%
Top Hashes (SHA256)
- 96c78801c9893ef8102ec3c47162df5f6843ca06eceae99be81fa39db35a2d4b72.96%
- b60cc7789c9467759ee4008aed13ef197bb215e57e15650e38344e75a26fd5ef23.45%
- b05514868d904907d9662c7c88834268efe18ab7e02500e31c3bb272ed25bbd73.35%
- 0cf311a45ff774af867a53735019da24d6ebaba579ce33270fa67c9ee63edd1c0.16%
- dcd230edfef1cd7c3a43ec4fc3c91abdb96d752c775de0f6f33f10625a9fb7150.08%
Process Ancestry
Top Grandparents
- svchost.exe98.47%
- McInst.exe0.51%
- MCUPDA~1.EXE0.51%
Top Parents
- MCUPDA~1.EXE76.47%
- mcupdatemgr.exe23.24%
- McInst.exe0.29%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mcvsmap.exe
Rocky answers questions about mcvsmap.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.