Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegDeleteValueW, RegSetValueExA, RegQueryValueExW, RegCreateKeyW, RegOpenKeyW, RegEnumKeyW, RegEnumKeyExW, RegDeleteKeyW, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegCloseKey
kernel32.dll
lstrlenW, GetStartupInfoA, GetModuleHandleA, lstrlenA, GetModuleFileNameW, CreateProcessW, RemoveDirectoryW, FindClose, GetVersionExW, FindFirstFileW, MoveFileExW, DeleteFileW, FindNextFileW
nscrt.dll
__dllonexit, _onexit, _wcsicmp, _strcmpi, __getmainargs, _controlfp, _except_handler3, _amsg_exit, _acmdln, __set_app_type, exit, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _vsnwprintf, strstr, memcmp, memset, wcslen, wcscmp, wcsncmp, toupper, _c_exit, _exit, _XcptFilter, _ismbblead, _cexit, _initterm
ole32.dll
CoRevokeClassObject, CoRegisterClassObject, CoInitialize, StringFromGUID2, CoUninitialize
shell32.dll
SHFileOperationW
shlwapi.dll
PathCombineW
user32.dll
FindWindowW, DispatchMessageW, TranslateMessage, GetMessageW, SendMessageW, CharUpperW, PostQuitMessage

elevator.exe

By Nullsoft Inc. (Signed)

Remove elevator.exe
MD5:   c60c86f64ff83da274b6c19e6c45d56f
SHA1:   551f950c18ac2d41469f394fe9cd24ef83a50738
SHA256:   09dcb5771920a8a24c7d7e94d5772c40d65d0c28e306a8182370c966f5827ce6

Overview

elevator.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). It is installed with a couple of know programs including Winamp published by Nullsoft, Inc, ClassicPro© v1.13 from Skin Consortium and ClassicPro© v1.13 by Skin Consortium. The file is digitally signed by Nullsoft Inc. which was issued by the America Online Inc. certificate authority (CA). This particular version is usually found on Windows 7 Professional (6.1.7601.65536).

DetailsDetails

File name:elevator.exe
Typical file path:C:\Program Files\winamp\elevator.exe
Size:21.34 KB (21,856 bytes)
Certificate
Issued to:Nullsoft Inc.
Authority (CA):America Online Inc.
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Winamp Essentials Pack
 Christoph Grether
7% remove
InFlac
 Michael Facquet
3% remove
“This plug-in allows to play native FLAC files with Winamp. It stands for Free Lossless Audio Codec. It is similar to MP3, but lossless, meaning that audio is compressed in FLAC without any loss in quality: you get a perfect copy of your CD tracks, but with files significantly smaller than WAVs.”
Winamp
 Nullsoft, Inc
9% remove
Winamp is a media player for Windows-based PCs and Android devices, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features. Winamp supports music playback using MP3, MIDI, MOD, MPEG-1 audio layers 1 and 2, AAC, M4A, FLAC, WAV and WMA. Winamp was one of the first common mu...
Winamp AudioPlayer
 Nullsoft, Inc
12% remove
“Winamp is a free multimedia player made by Nullsoft. It supports numerous audio and video formats. It also plays streamed video and audio content, both live and recorded, authored worldwide. It has an extremely customizable media library, and allows you to rip and burn your favorite music CDs. Winamp has thousands of skins and plug-ins that allow you to change the look-and-feel of the player, as well as add new features. The player also...”
DFX 8 for Winamp
 Power Technology
9% remove
ClassicPro©
 Skin Consortium
9% remove

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00002322%
0.028634%
User CPU:0.00002322%
0.014873%
Memory
Private memory:1.2 MB
21.59 MB
Private (maximum):4.16 MB
Private (minimum):3.27 MB
Non-paged memory:1.2 MB
21.59 MB
Virtual memory:47.13 MB
140.96 MB
Virtual memory (peak):50.13 MB
169.69 MB
Working set:3.51 MB
18.61 MB
Working set (peak):4.16 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:72
600
GUI GDI count:9
103
GUI GDI peak:9
142
GUI USER count:2
49
GUI USER peak:3
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\Program Files\winamp\elevator.exe" -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Professional 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE