Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3.7.51309.18101 33.33%
3.6.51305.2101 33.33%
3.6.51302.6102 33.33%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegCreateKeyExW, RegCloseKey, RegOpenKeyExW, SetServiceStatus, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, OpenSCManagerW, CreateServiceW, RegSetValueExW, RegQueryValueExA, RegOpenKeyExA, StartServiceW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, RegDeleteValueW, DeleteService, QueryServiceStatus, OpenServiceW, CloseServiceHandle
crypt32.dll
CryptDecodeObject, CertFreeCertificateContext, CertGetNameStringW, CertFindCertificateInStore, CryptQueryObject, CryptMsgClose, CertCloseStore, CryptMsgGetParam
kernel32.dll
GetCurrentProcess, CreateProcessW, HeapFree, GetProcessHeap, HeapAlloc, CreateEventA, GetSystemTimeAsFileTime, SetEvent, WaitForSingleObject, GetModuleFileNameA, lstrcmpiW, CreateEventW, SetLastError, lstrcmpA, lstrcpyW, VirtualAlloc, LocalAlloc, GetModuleHandleA, CreateFileW, CopyFileW, MoveFileExW, SetFileAttributesW, TerminateProcess, GetExitCodeProcess, OpenProcess, Process32NextW, GetModuleFileNameW, GetEnvironmentVariableW, SetEnvironmentVariableW, MultiByteToWideChar, GetModuleHandleW, LoadLibraryExA, FormatMessageA, RemoveDirectoryW, FindNextFileW, LocalFree, GetPrivateProfileStringA, ReleaseMutex, CreateMutexA, OpenMutexA, CreateWaitableTimerA, SetWaitableTimer, WaitForMultipleObjects, SystemTimeToFileTime, ResumeThread, TlsSetValue, ResetEvent, OpenEventA, GetCurrentProcessId, TlsGetValue, TlsFree, TlsAlloc, GetVolumeInformationW, FreeLibrary, CompareStringW, InterlockedDecrement, GetSystemInfo, GetVersionExW, SetPriorityClass, DeviceIoControl, CreateFileA, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, lstrlenA, CloseHandle, WideCharToMultiByte, DeleteCriticalSection, InitializeCriticalSection, GetProcAddress, LoadLibraryW, GetCurrentThreadId, LeaveCriticalSection, EnterCriticalSection, FindClose, MoveFileW, FindFirstFileW, DeleteFileW, GetLastError, Sleep, GetTickCount, GetFileAttributesW, GetFileAttributesExW, SetFileTime, CreateDirectoryW, AreFileApisANSI, EncodePointer, DosDateTimeToFileTime, LocalFileTimeToFileTime, CreateToolhelp32Snapshot, IsProcessorFeaturePresent, DecodePointer
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoUninitialize, CoInitializeSecurity, CoInitializeEx, CoCreateInstance, CoSetProxyBlanket
rpcrt4.dll
NdrAsyncServerCall, RpcServerRegisterIf, RpcAsyncAbortCall, RpcServerListen, RpcServerRegisterAuthInfoW, RpcEpRegisterW, RpcServerInqBindings, NdrServerCall2, RpcServerUseProtseqW, RpcBindingVectorFree, RpcEpUnregister, RpcMgmtStopServerListening
shell32.dll
SHGetSpecialFolderPathW, SHGetFolderPathW
shlwapi.dll
SHGetValueA
user32.dll
ExitWindowsEx, MessageBoxA
wininet.dll
InternetReadFile, InternetOpenW, InternetGetConnectedState, InternetCloseHandle, InternetOpenUrlW

PSafesvc.exe

PSafe Core by PSafe Tecnologia S.A. (Signed)

Remove PSafesvc.exe
Version:   3.7.51309.18101
MD5:   0e283dad5593b0fdf673c8d53a5aa40c
SHA1:   d1d022d7a0bc1f1882ae0046036fd9855f714605

Overview

psafesvc.exe runs as a service under the name PSafeSVC within the local user context. The file is digitally signed by PSafe Tecnologia S.A. which was issued by the DigiCert Inc certificate authority (CA).

DetailsDetails

File name:psafesvc.exe
Publisher:PSafe S/A
Product name:PSafe Core
Description:PSafe Core Service
Typical file path:C:\Program Files\psafe\psafesvc.exe
File version:3.7.51309.18101
Size:2.4 MB (2,520,776 bytes)
Build date:9/18/2013 12:33 PM
Certificate
Issued to:PSafe Tecnologia S.A.
Authority (CA):DigiCert Inc
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'PSafeSVC'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00171014%
0.028634%
Kernel CPU:0.00076006%
0.013761%
User CPU:0.00095008%
0.014873%
Kernel CPU time:312,002 ms/min
100,923,805ms/min
Context switches:5/sec
284/sec
Memory
Private memory:4 MB
21.59 MB
Private (maximum):9.11 MB
Private (minimum):8.52 MB
Non-paged memory:4 MB
21.59 MB
Virtual memory:59.65 MB
140.96 MB
Virtual memory (peak):66.29 MB
169.69 MB
Working set:9.02 MB
18.61 MB
Working set (peak):9.48 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:157
600

BehaviorsProcess properties

Integrety level:Undefined
Platform:64-bit
Command line:"C:\Program Files\psafe\psafesvc.exe"
Owner:User
Windows Service
Service name:PSafeSVC
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 66.67%
Windows 7 Home Basic 33.33%

Distribution by countryDistribution by country

Brazil installs about 66.67% of PSafe Core.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 50.00%
Hewlett-Packard 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE