Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.6.4.1902 50.00%
1.6.4.1902 50.00%
(Note, CA publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
ReportEventW, RegisterEventSourceW, DeleteService, DeregisterEventSource, CreateServiceW, OpenServiceW, OpenSCManagerW, CloseServiceHandle, RegCreateKeyExW, ControlService, StartServiceW, SetServiceStatus, StartServiceCtrlDispatcherW, SetSecurityDescriptorDacl, SetEntriesInAclW, AllocateAndInitializeSid, InitializeSecurityDescriptor, FreeSid, RegQueryValueExW, RegCloseKey, RegSetValueExW, RegOpenKeyExW
kernel32.dll
ExpandEnvironmentStringsW, ReadFile, FlushFileBuffers, ConnectNamedPipe, CreateNamedPipeW, CreateFileW, WriteFile, DisconnectNamedPipe, LoadLibraryW, LoadLibraryExW, FreeLibrary, InterlockedDecrement, InterlockedCompareExchange, GetTickCount, GetModuleFileNameW, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetFileAttributesW, TlsAlloc, TlsSetValue, TlsGetValue, CancelIo, GetCurrentThreadId, FormatMessageW, DeleteFileW, OutputDebugStringA, GetThreadTimes, OutputDebugStringW, GetCurrentThread, MoveFileW, GetProcessHeap, lstrlenW, HeapAlloc, FileTimeToLocalFileTime, FileTimeToSystemTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, GetSystemTime, HeapFree, GetFileSizeEx, InterlockedExchange, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetCurrentProcessId, GetOverlappedResult, Sleep, LocalAlloc, TerminateThread, GetExitCodeThread, WaitForMultipleObjects, ReleaseMutex, LocalFree, CloseHandle, SetEvent, WaitForSingleObject, ResumeThread, CreateThread, GetLastError, CreateEventW, InterlockedIncrement, CreateMutexW, GetProcAddress
msvcp80.dll
DllMain
msvcr80.dll
DllMain
user32.dll
UnregisterDeviceNotification, wsprintfW
Export table
_SetAMSTraceOptions@8

caamsvc.exe

Anti-Malware SDK by CA (Signed)

Remove caamsvc.exe
Version:   1.6.4.1902
MD5:   f972074401a1111bd3362d755f71dd6c
SHA1:   21f179e6530c5b56af7dc0e2daba08b827631c50
SHA256:   28cb4eea0b2bed0e159f9f5498be030763658f8e8fe44f77ff6b94bb99222e38

Overview

caamsvc.exe runs as a service under the name CAAMSvc with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CA which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:caamsvc.exe
Publisher:CA
Product name:Anti-Malware SDK
Description:CA Anti-Malware Service.
Typical file path:C:\Program Files\total defense\internet security suite\anti-virus\caamsvc.exe
File version:1.6.4.1902
Size:286.82 KB (293,704 bytes)
Build date:3/1/2012 2:45 PM
Certificate
Issued to:CA
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CAAMSvc'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00000465%
0.028634%
Kernel CPU:0.00000465%
0.013761%
Kernel CPU time:31 ms/min
100,923,805ms/min
CPU cycles:463/sec
17,470,203/sec
Memory
Private memory:6.71 MB
21.59 MB
Private (maximum):1.38 MB
Private (minimum):348 KB
Non-paged memory:6.71 MB
21.59 MB
Virtual memory:32.43 MB
140.96 MB
Virtual memory (peak):33.43 MB
169.69 MB
Working set:1.31 MB
18.61 MB
Working set (peak):4.42 MB
37.95 MB
Page faults:1,550/min
2,039/min
I/O
I/O read transfer:106 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:9
12
Handles:85
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\total defense\internet security suite\anti-virus\caamsvc.exe"
Owner:SYSTEM
Windows Service
Service name:CAAMSvc
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 50.00%
Windows 7 Ultimate 50.00%

Distribution by countryDistribution by country

United States installs about 100.00% of Anti-Malware SDK.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Sony 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE