UmxEngine.exe
CA Threat Management Engine by CA (Signed)
Overview
There are 2 versions of umxengine.exe in the wild, the latest version being 1, 0, 0, 19. It is started as a Windows Service called 'TM Engine' with the name 'UmxEngine' and described as “TM Engine Common Components Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 772.83 KB. The file is a digitally signed and issued to CA by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0005% including both foreground and background operations, the average private memory consumption is about 145.03 MB. Addionally, typically read and write I/O disk operations is about 1.71 MB per minute for reads and 31.43 KB per minute for writes.
 Details
|
| File name: | umxengine.exe |
| Publisher: | CA |
| Product name: | CA Threat Management Engine |
| Description: | CA Threat Management Engine Service |
| Typical file path: | C:\Program Files\ca\sharedcomponents\tmengine\umxengine.exe |
| Certificate |
| Issued to: | CA |
| Authority (CA): | VeriSign |
| Windows Service |
| Service name: | UmxEngine |
| Display name: | TM Engine |
| Description: | “TM Engine Common Components Service” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of umxengine.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of umxengine.exe
