Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1.701.3.3014	8.79%
1, 7, 4, 0	34.56%
1, 7, 2, 0	28.37%
1, 7, 0, 0	9.54%
1, 6, 5, 0	15.06%
1, 6, 5, 0	0.08%
1, 5, 7, 0	3.60%

Relationships

services.exe (Services and Controller app by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

OpenSCManagerW, RegisterEventSourceW, CloseServiceHandle, DeleteService, StartServiceCtrlDispatcherW, OpenServiceW, RegCreateKeyExW, RegQueryValueExW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegSetValueExW, RegCloseKey, RegEnumKeyExW, ControlService, ReportEventW, RegisterServiceCtrlHandlerW, RegOpenKeyExW, SetServiceStatus, RegDeleteValueW, RegDeleteKeyW, DeregisterEventSource, CreateServiceW

crypt32.dll

CryptDecodeObject, CryptQueryObject, CertGetNameStringW, CertFreeCertificateContext, CertFindCertificateInStore, CertCloseStore, CryptMsgGetParam, CryptMsgClose

kernel32.dll

UnmapViewOfFile, FormatMessageW, GetLocalTime, CreateFileMappingW, OpenFileMappingW, GetVolumeInformationW, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, MapViewOfFile, LocalFree, CloseHandle, GetCurrentThreadId, DeleteCriticalSection, lstrcmpiW, LocalAlloc, FindClose, GetProcAddress, GetLastError, RaiseException, lstrlenW, MultiByteToWideChar, lstrcmpW, GetModuleFileNameW, GetFileAttributesW, SizeofResource, InitializeCriticalSection, GetModuleHandleW, InterlockedDecrement, InterlockedIncrement, LoadLibraryExW, TerminateProcess, GetStartupInfoW, GetSystemTimeAsFileTime, Sleep, InterlockedExchange, GetCurrentProcessId, lstrcmpA, FindFirstFileW, FindResourceW, FreeLibrary, LoadResource, InterlockedCompareExchange

msvcr90.dll

DllMain

ole32.dll

CoRevokeClassObject, CoTaskMemAlloc, CoTaskMemFree, CoCreateInstance, CoUninitialize, CoTaskMemRealloc, CoRegisterClassObject, StringFromGUID2, CoInitialize

shell32.dll

ShellExecuteExW, SHGetFolderPathW

user32.dll

DispatchMessageW, PostThreadMessageW, LoadStringW, CharNextW, GetMessageW

wintrust.dll

WinVerifyTrust

armsvc.exe

Adobe Acrobat Update Service by Adobe Systems (Signed)

Remove armsvc.exe

Version:	1, 6, 5, 0
MD5:	d19c4ee2ac7c47b8f5f84fff1a789d8a
SHA1:	e232fe92e8f71232219c93b5c8603faff0189b70
SHA256:	f419e159d3e428a3929a1a983142e7b0783d3f104ee9587585418e51011e4b8f

What is armsvc.exe?

Adobe Acrobat Update Service is a program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.

About armsvc.exe (from Adobe Systems)

“Adobe Reader software is the global standard for electronic document sharing. It is the only PDF file viewer that can open and interact with all PDF documents. Use Adobe Reader to view, search, digita”

Details

File name:	armsvc.exe
Publisher:	Adobe Systems Incorporated
Product name:	Adobe Acrobat Update Service
Typical file path:	C:\Program Files\common files\adobe\arm\1.0\armsvc.exe
File version:	1, 6, 5, 0
Size:	62.46 KB (63,960 bytes)
Certificate
Issued to:	Adobe Systems
Authority (CA):	VeriSign
Expiration date:	Friday, September 20, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following program will install this file

Adobe Common File Installer

Adobe Systems Incorporated

3% remove

Adobe Common File Installer installs a number of shared components between multiple Adobe programs. If you remove this program some features of other related programs might not function properly.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'AdobeARMservice' (Adobe Acrobat Update Service)
AdobeARMservice

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.01512262%	0.028634%
Kernel CPU:	0.01062478%	0.013761%
User CPU:	0.00449784%	0.014873%
Kernel CPU time:	595,956 ms/min	100,923,805ms/min
CPU cycles:	2,899/sec	17,470,203/sec
Memory
Private memory:	3.15 MB	21.59 MB
Private (maximum):	10.16 MB
Private (minimum):	2.83 MB
Non-paged memory:	3.15 MB	21.59 MB
Virtual memory:	57.82 MB	140.96 MB
Virtual memory (peak):	62.5 MB	169.69 MB
Working set:	5.19 MB	18.61 MB
Working set (peak):	10.85 MB	37.95 MB
Page faults:	5,737/min	2,039/min
I/O
I/O read transfer:	11 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	4 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	5	12
Handles:	87	600
GUI GDI count:	29	103
GUI GDI peak:	61	142
GUI USER count:	6	49
GUI USER peak:	8	71

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\common files\adobe\arm\1.0\armsvc.exe"
Owner:	SYSTEM
Windows Service
Service name:	AdobeARMservice
Display name:	Adobe Acrobat Update Service
Description:	“Adobe Acrobat Updater keeps your Adobe software up to date.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads