ISafe.exe
Computer Associates Antivirus by Total Defense (Signed)
Overview
There are 2 versions of isafe.exe in the wild, the latest version being Version 9.5.0.0. It is started as a Windows Service with the name 'CAISafe'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 263.08 KB. The file is a digitally signed and issued to Total Defense by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 3.97 MB with the maximum memory reaching around 4.31 MB.
 Details
|
| File name: | isafe.exe |
| Publisher: | Computer Associates International, Inc. |
| Product name: | Computer Associates Antivirus |
| Description: | CA ISafe Service |
| Typical file path: | C:\Program Files\total defense\internet security suite\anti-virus\isafe.exe |
| Certificate |
| Issued to: | Total Defense |
| Authority (CA): | VeriSign |
| Windows Service |
| Service name: | CAISafe |
| Type: | Win32OwnProcess, InteractiveProcess |
Behaviors
(Note, the behaviors below are for all versions of isafe.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of isafe.exe
