Should I block it?

40%
40% of PCs block this file from running.
Possible reason:
Performance resource utilization

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
ReportEventW, RegisterEventSourceW, OpenProcessToken, LookupPrivilegeValueW, LookupAccountSidW, GetUserNameW, GetTokenInformation, DuplicateTokenEx, DeregisterEventSource, CreateProcessAsUserW, AdjustTokenPrivileges, StartServiceW, StartServiceCtrlDispatcherW, SetServiceStatus, QueryServiceConfigW, OpenServiceW, OpenSCManagerW, DeleteService, CreateServiceW, CloseServiceHandle, ChangeServiceConfigW
datastate.dll
Func, Server, Clear
kernel32.dll
GetModuleHandleW, WritePrivateProfileStringW, WinExec, WideCharToMultiByte, WaitForMultipleObjects, Sleep, SetProcessWorkingSetSize, SetPriorityClass, SetFileAttributesW, SetEvent, ReadProcessMemory, QueryDosDeviceW, OutputDebugStringW, OpenProcess, OpenMutexW, LocalFree, LocalAlloc, LoadLibraryW, GetWindowsDirectoryW, GetVersionExA, GetVersionExW, GetTempPathW, GetSystemInfo, GetSystemDirectoryW, GetProcessTimes, GetProcAddress, GetLastError, GetCurrentProcessId, GetCurrentProcess, FreeLibrary, FileTimeToSystemTime, FileTimeToLocalFileTime, CreateMutexW, CreateEventW, CloseHandle, LoadLibraryA, GetModuleHandleA
madbasic_.bpl
@Madstrings@initialization$qqrv, @Madstrings@Finalization$qqrv, @Madtools@initialization$qqrv, @Madtools@Finalization$qqrv
maddisasm_.bpl
@Maddisasm@initialization$qqrv, @Maddisasm@Finalization$qqrv
madexcept_.bpl
@Madexcept@initialization$qqrv, @Madexcept@Finalization$qqrv, @Madexcept@UnregisterExceptActionHandler$qqrynpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v, @Madexcept@RegisterExceptActionHandler$qqrynpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType, @Madexcept@UnregisterExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v, @Madexcept@RegisterExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType22Madexcept@TExceptPhase, @Madexcept@RegisterExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType22Madexcept@TExceptPhase, @$xp$30Madexcept@TExceptActionEventOO, @$xp$24Madexcept@TExceptEventOO, @Madmapfile@initialization$qqrv, @Madmapfile@Finalization$qqrv, @Madstacktrace@initialization$qqrv, @Madstacktrace@Finalization$qqrv, @Madlinkdisasm@initialization$qqrv, @Madlinkdisasm@Finalization$qqrv, @Madlisthardware@initialization$qqrv, @Madlisthardware@Finalization$qqrv, @Madlistprocesses@initialization$qqrv, @Madlistprocesses@Finalization$qqrv, @Madlistmodules@initialization$qqrv, @Madlistmodules@Finalization$qqrv
ntdll.dll
NtQueryInformationProcess, NtQuerySystemInformation
ole32.dll
CoInitialize
rtl120.bpl
@System@initialization$qqrv, @System@Finalization$qqrv, @System@LoadResString$qqrp20System@TResStringRec, @System@FreeMemory$qpv, @System@GetMemory$qi, @System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID, @System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%, @System@RegisterModule$qqrp17System@TLibModule, @System@@DynArrayAddRef$qqrv, @System@@DynArrayAsg$qqrv, @System@@DynArrayClear$qqrrpvpv, @System@@DynArraySetLength$qqrv, @System@@DynArrayHigh$qqrv, @System@@_lldiv$qqrv, @System@@_llmul$qqrv, @System@StringToWideChar$qqrx20System@UnicodeStringpbi, @System@@CopyRecord$qqrv, @System@@FinalizeArray$qqrpvt1ui, @System@@FinalizeRecord$qqrpvt1, @System@@InitializeRecord$qqrpvt1, @System@Pos$qqrx20System@UnicodeStringt1, @System@@UniqueStringU$qqrr20System@UnicodeString, @System@@Write0UString$qqrr15System@TTextRecx20System@UnicodeString, @System@@UStrDelete$qqrr20System@UnicodeStringii, @System@@UStrCopy$qqrx20System@UnicodeStringii, @System@@UStrEqual$qqrv, @System@@UStrCatN$qqrv, @System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2, @System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrSetLength$qqrr20System@UnicodeStringi, @System@@UStrLen$qqrx20System@UnicodeString, @System@@UStrFromString$qqrr20System@UnicodeStringrx28System@%SmallString$iuc$255%, @System@@UStrToString$qqrp28System@%SmallString$iuc$255%x20System@UnicodeStringi, @System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString, @System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString, @System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus, @System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%, @System@@UStrFromWArray$qqrr20System@UnicodeStringpbi, @System@@UStrFromPWChar$qqrr20System@UnicodeStringpb, @System@@UStrFromWChar$qqrr20System@UnicodeStringb, @System@@UStrToPWChar$qqrx20System@UnicodeString, @System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrArrayClr$qqrpvi, @System@@UStrClr$qqrpv, @System@@UStrAddRef$qqrpv, @System@@WStrAddRef$qqrr17System@WideString, @System@@WStrSetLength$qqrr17System@WideStringi, @System@@WStrLen$qqrx17System@WideString, @System@@WStrToPWChar$qqrx17System@WideString, @System@@WStrFromWChar$qqrr17System@WideStringb, @System@@WStrArrayClr$qqrpvi, @System@@WStrClr$qqrpv, @System@@LStrSetLength$qqrv, @System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%, @System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%, @System@@LStrCatN$qqrv, @System@@LStrCat3$qqrv, @System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%, @System@@LStrFromString$qqrr27System@%AnsiStringT$us$i0$%rx28System@%SmallString$iuc$255%us, @System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus, @System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus, @System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us, @System@@EnsureUnicodeString$qqrr20System@UnicodeString, @System@@LStrArrayClr$qqrpvi, @System@@LStrClr$qqrpv, @System@@Halt0$qqrv, @System@@InitResStringImports$qqrv, @System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule, @System@@TryFinallyExit$qqrv, @System@@DoneExcept$qqrv, @System@@RaiseAgain$qqrv, @System@@HandleFinally$qqrv, @System@@HandleOnException$qqrv, @System@@HandleAnyException$qqrv, @System@@BeforeDestruction$qqrp14System@TObjectzc, @System@@AfterConstruction$qqrp14System@TObject, @System@@ClassDestroy$qqrp14System@TObject, @System@@ClassCreate$qqrp17System@TMetaClasso, @System@TObject@Dispatch$qqrpv, @System@TObject@BeforeDestruction$qqrv, @System@TObject@AfterConstruction$qqrv, @System@TObject@DefaultHandler$qqrpv, @System@TObject@ToString$qqrv, @System@TObject@SafeCallException$qqrp14System@TObjectpv, @System@TObject@InheritsFrom$qqrp17System@TMetaClass, @System@@CallDynaInst$qqrv, @System@@AsClass$qqrp14System@TObjectp17System@TMetaClass, @System@@IsClass$qqrp14System@TObjectp17System@TMetaClass, @System@TObject@GetHashCode$qqrv, @System@TObject@Equals$qqrp14System@TObject, @System@TObject@Free$qqrv, @System@TObject@$bdtr$qqrv, @System@TObject@$bctr$qqrv, @System@TObject@FreeInstance$qqrv, @System@TObject@NewInstance$qqrv, @System@@_CToPasStr$qqrp28System@%SmallString$iuc$255%pxc, @System@@WriteLn$qqrr15System@TTextRec, @System@@FillChar$qqrpvib, @System@@AStrCmp$qqrv, @System@@PStrNCpy$qqrp28System@%SmallString$iuc$255%t1uc, @System@@PStrCpy$qqrp28System@%SmallString$iuc$255%t1, @System@@PStrNCat$qqrv, @System@@Close$qqrr15System@TTextRec, @System@@Assign$qqrr15System@TTextRecpxb, @System@@Append$qqrr15System@TTextRec, @System@@RewritText$qqrr15System@TTextRec, @System@@AbstractError$qqrv, @System@@TRUNC$qqrv, @System@@ROUND$qqrv, @System@Random$qqrxi, @System@Randomize$qqrv, @System@ParamStr$qqri, @System@Move$qqrpxvpvi, @System@@_IOTest$qqrv, @System@@ReallocMem$qqrrpvi, @System@@FreeMem$qqrpv, @System@@GetMem$qqri, @System@AllocMem$qqrui, @$xp$16System@TDateTime, @System@TObject@, @$xp$13System@string, @$xp$6Double, @$xp$8Cardinal, @$xp$7Integer, @$xp$7Boolean, @Classes@initialization$qqrv, @Classes@Finalization$qqrv, @Classes@TDataModule@ReadState$qqrp15Classes@TReader, @Classes@TDataModule@DefineProperties$qqrp14Classes@TFiler, @Classes@TDataModule@DoDestroy$qqrv, @Classes@TDataModule@DoCreate$qqrv, @Classes@TDataModule@$bdtr$qqrv, @Classes@TDataModule@BeforeDestruction$qqrv, @Classes@TDataModule@$bctr$qqrp18Classes@TComponenti, @Classes@TDataModule@AfterConstruction$qqrv, @Classes@TDataModule@$bctr$qqrp18Classes@TComponent, @Classes@TComponent@QueryInterface$qqsrx5_GUIDpv, @Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2, @Classes@TComponent@SafeCallException$qqrp14System@TObjectpv, @Classes@TComponent@GetComponentCount$qqrv, @Classes@TComponent@GetComponent$qqri, @Classes@TComponent@SetName$qqrx20System@UnicodeString, @Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2, @Classes@TComponent@WriteState$qqrp15Classes@TWriter, @Classes@TComponent@ReadState$qqrp15Classes@TReader, @Classes@TComponent@Loaded$qqrv, @Classes@TComponent@DefineProperties$qqrp14Classes@TFiler, @Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation, @Classes@TComponent@Destroying$qqrv, @Classes@TComponent@DestroyComponents$qqrv, @Classes@TComponent@BeforeDestruction$qqrv, @Classes@TComponent@$bdtr$qqrv, @Classes@TComponent@$bctr$qqrp18Classes@TComponent, @Classes@TThread@WaitFor$qqrv, @Classes@TThread@Terminate$qqrv, @Classes@TThread@Resume$qqrv, @Classes@TThread@Suspend$qqrv, @Classes@TThread@Synchronize$qqrynpqqrv$v, @Classes@TThread@DoTerminate$qqrv, @Classes@TThread@AfterConstruction$qqrv, @Classes@TThread@$bdtr$qqrv, @Classes@TThread@$bctr$qqro, @Classes@TStringStream@GetDataString$qqrv, @Classes@TStringStream@$bctr$qqrx20System@UnicodeString, @Classes@TStream@SetPosition$qqrxj, @Classes@TStream@GetPosition$qqrv, @Classes@TStringList@$bctr$qqrv, @Classes@TCollection@Notify$qqrp23Classes@TCollectionItem31Classes@TCollectionNotification, @Classes@TCollection@Deleting$qqrp23Classes@TCollectionItem, @Classes@TCollection@Added$qqrrp23Classes@TCollectionItem, @Classes@TCollection@Update$qqrp23Classes@TCollectionItem, @Classes@TCollection@SetItemName$qqrp23Classes@TCollectionItem, @Classes@TCollection@GetItem$qqri, @Classes@TCollection@GetCount$qqrv, @Classes@TCollection@EndUpdate$qqrv, @Classes@TCollection@BeginUpdate$qqrv, @Classes@TCollection@Assign$qqrp19Classes@TPersistent, @Classes@TCollection@$bdtr$qqrv, @Classes@TCollection@$bctr$qqrp17System@TMetaClass, @Classes@TCollectionItem@SetIndex$qqri, @Classes@TCollectionItem@SetDisplayName$qqrx20System@UnicodeString, @Classes@TCollectionItem@SetCollection$qqrp19Classes@TCollection, @Classes@TCollectionItem@GetDisplayName$qqrv, @Classes@TCollectionItem@$bdtr$qqrv, @Classes@TCollectionItem@$bctr$qqrp19Classes@TCollection, @Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler, @Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent, @Classes@TPersistent@Assign$qqrp19Classes@TPersistent, @Classes@TList@Get$qqri, @Classes@TList@Delete$qqri, @Classes@TList@Add$qqrpv, @$xp$19Classes@TDataModule, @Classes@TDataModule@, @$xp$18Classes@TComponent, @Classes@TComponent@, @Classes@TThread@, @Classes@TStringStream@, @Classes@TStringList@, @$xp$19Classes@TCollection, @Classes@TCollection@, @$xp$23Classes@TCollectionItem, @Classes@TCollectionItem@, @Classes@TList@, @Typinfo@initialization$qqrv, @Typinfo@Finalization$qqrv, @Sysutils@initialization$qqrv, @Sysutils@Finalization$qqrv, @Sysutils@TEncoding@GetUnicode$qqrv, @Sysutils@FreeAndNil$qqrpv, @Sysutils@RaiseLastOSError$qqrv, @Sysutils@GetModuleName$qqrui, @Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeStringrx29System@%Set$tc$iuc$0$iuc$255%o, @Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__15$iuc$0$iuc$1%, @Sysutils@SysErrorMessage$qqrui, @Sysutils@StrToDateTime$qqrx20System@UnicodeStringrx24Sysutils@TFormatSettings, @Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTimerx24Sysutils@TFormatSettings, @Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime, @Sysutils@Now$qqrv, @Sysutils@SystemTimeToDateTime$qqrrx11_SYSTEMTIME, @Sysutils@EncodeDate$qqrususus, @Sysutils@EncodeTime$qqrusususus, @Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi, @Sysutils@StrPas$qqrpxb, @Sysutils@StrECopy$qqrpbpxb, @Sysutils@CreateDir$qqrx20System@UnicodeString, @Sysutils@ExtractFileExt$qqrx20System@UnicodeString, @Sysutils@ExtractFileName$qqrx20System@UnicodeString, @Sysutils@ExtractFileDir$qqrx20System@UnicodeString, @Sysutils@ExtractFilePath$qqrx20System@UnicodeString, @Sysutils@DeleteFile$qqrx20System@UnicodeString, @Sysutils@FindClose$qqrr19Sysutils@TSearchRec, @Sysutils@FindNext$qqrr19Sysutils@TSearchRec, @Sysutils@FindFirst$qqrx20System@UnicodeStringir19Sysutils@TSearchRec, @Sysutils@FileIsReadOnly$qqrx20System@UnicodeString, @Sysutils@FileSetAttr$qqrx20System@UnicodeStringi, @Sysutils@ForceDirectories$qqr20System@UnicodeString, @Sysutils@DirectoryExists$qqrx20System@UnicodeString, @Sysutils@FileExists$qqrx20System@UnicodeString, @Sysutils@FileClose$qqri, @Sysutils@FileSeek$qqriii, @Sysutils@FileWrite$qqripxvui, @Sysutils@FileRead$qqripvui, @Sysutils@FileCreate$qqrx20System@UnicodeString, @Sysutils@FileOpen$qqrx20System@UnicodeStringui, @Sysutils@BoolToStr$qqroo, @Sysutils@StrToInt$qqrx20System@UnicodeString, @Sysutils@IntToHex$qqrii, @Sysutils@IntToStr$qqrj, @Sysutils@UIntToStr$qqrui, @Sysutils@IntToStr$qqri, @Sysutils@Trim$qqrx20System@UnicodeString, @Sysutils@AnsiCompareText$qqrx20System@UnicodeStringt1, @Sysutils@SameText$qqrx20System@UnicodeStringt1, @Sysutils@LowerCase$qqrx20System@UnicodeString, @Sysutils@UpperCase$qqrx20System@UnicodeString, @Sysutils@AddExitProc$qqrpqqrv$v, @$xp$24Sysutils@TFormatSettings, @Sysutils@Win32MajorVersion, @Sysutils@Exception@, @$xp$19Sysutils@TSearchRec, @Math@Max$qqrxdxd, @Math@Max$qqrxixi, @Math@Min$qqrxdxd, @Math@Min$qqrxixi, @Variants@initialization$qqrv, @Variants@Finalization$qqrv, @Varutils@initialization$qqrv, @Varutils@Finalization$qqrv, @Registry@initialization$qqrv, @Registry@Finalization$qqrv, @Registry@TRegistry@ValueExists$qqrx20System@UnicodeString, @Registry@TRegistry@ReadBool$qqrx20System@UnicodeString, @Registry@TRegistry@ReadInteger$qqrx20System@UnicodeString, @Registry@TRegistry@ReadString$qqrx20System@UnicodeString, @Registry@TRegistry@WriteString$qqrx20System@UnicodeStringt1, @Registry@TRegistry@GetDataType$qqrx20System@UnicodeString, @Registry@TRegistry@GetValueNames$qqrp16Classes@TStrings, @Registry@TRegistry@DeleteValue$qqrx20System@UnicodeString, @Registry@TRegistry@OpenKeyReadOnly$qqrx20System@UnicodeString, @Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo, @Registry@TRegistry@CreateKey$qqrx20System@UnicodeString, @Registry@TRegistry@SetRootKey$qqrp6HKEY__, @Registry@TRegistry@CloseKey$qqrv, @Registry@TRegistry@$bctr$qqrv, @Registry@TRegistry@, @Inifiles@initialization$qqrv, @Inifiles@Finalization$qqrv, @Inifiles@TIniFile@UpdateFile$qqrv, @Inifiles@TIniFile@DeleteKey$qqrx20System@UnicodeStringt1, @Inifiles@TIniFile@EraseSection$qqrx20System@UnicodeString, @Inifiles@TIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TIniFile@ReadSections$qqrp16Classes@TStrings, @Inifiles@TIniFile@ReadString$qqrx20System@UnicodeStringt1t1, @Inifiles@TIniFile@$bdtr$qqrv, @Inifiles@TMemIniFile@WriteString$qqrx20System@UnicodeStringt1t1, @Inifiles@TMemIniFile@SetStrings$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@ReadString$qqrx20System@UnicodeStringt1t1, @Inifiles@TMemIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TMemIniFile@GetStrings$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@EraseSection$qqrx20System@UnicodeString, @Inifiles@TMemIniFile@DeleteKey$qqrx20System@UnicodeStringt1, @Inifiles@TMemIniFile@$bdtr$qqrv, @Inifiles@TMemIniFile@$bctr$qqrx20System@UnicodeString, @Inifiles@TCustomIniFile@ReadSections$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TCustomIniFile@WriteBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ReadBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ValueExists$qqrx20System@UnicodeStringt1, @Inifiles@TCustomIniFile@WriteBool$qqrx20System@UnicodeStringt1o, @Inifiles@TCustomIniFile@WriteTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteFloat$qqrx20System@UnicodeStringt1d, @Inifiles@TCustomIniFile@WriteDateTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteDate$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadFloat$qqrx20System@UnicodeStringt1d, @Inifiles@TCustomIniFile@ReadDateTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadDate$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadBool$qqrx20System@UnicodeStringt1o, @Inifiles@TCustomIniFile@WriteInteger$qqrx20System@UnicodeStringt1i, @Inifiles@TCustomIniFile@ReadInteger$qqrx20System@UnicodeStringt1i, @Inifiles@TCustomIniFile@SectionExists$qqrx20System@UnicodeString, @Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString, @Inifiles@TIniFile@, @Inifiles@TMemIniFile@, @Syncobjs@initialization$qqrv, @Syncobjs@Finalization$qqrv, @Uxtheme@initialization$qqrv, @Uxtheme@Finalization$qqrv, @Multimon@initialization$qqrv, @Multimon@Finalization$qqrv, @Dwmapi@initialization$qqrv, @Dwmapi@Finalization$qqrv, @Helpintfs@initialization$qqrv, @Helpintfs@Finalization$qqrv, @Mapi@initialization$qqrv, @Mapi@Finalization$qqrv, @Flatsb@initialization$qqrv, @Flatsb@Finalization$qqrv, @Dateutils@IncMilliSecond$qqrx16System@TDateTimexj, @Dateutils@IncDay$qqrx16System@TDateTimexi, @Dateutils@MilliSecondsBetween$qqrx16System@TDateTimet1, @Dateutils@SecondsBetween$qqrx16System@TDateTimet1, @Dateutils@HoursBetween$qqrx16System@TDateTimet1, @Comobj@initialization$qqrv, @Comobj@Finalization$qqrv, @Comobj@CreateComObject$qqrrx5_GUID
shell32.dll
SHGetSpecialFolderPathW
user32.dll
ShowOwnedPopups, PostThreadMessageW, PostMessageW, PeekMessageW, GetSystemMetrics, GetMessageW, DispatchMessageW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
vcl120.bpl
@Consts@_SServiceUninstallFailed, @Consts@_SServiceUninstallOK, @Consts@_SServiceInstallFailed, @Consts@_SServiceInstallOK, @Consts@_SCustomError, @Consts@_SShutdown, @Consts@_SInterrogate, @Consts@_SContinue, @Consts@_SPause, @Consts@_SStop, @Consts@_SStart, @Consts@_SExecute, @Consts@_SServiceFailed, @Dialogs@initialization$qqrv, @Dialogs@Finalization$qqrv, @Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i, @Comctrls@initialization$qqrv, @Comctrls@Finalization$qqrv, @Actnlist@initialization$qqrv, @Actnlist@Finalization$qqrv, @Graphics@initialization$qqrv, @Graphics@Finalization$qqrv, @Themes@initialization$qqrv, @Themes@Finalization$qqrv, @Controls@initialization$qqrv, @Controls@Finalization$qqrv, @Menus@initialization$qqrv, @Menus@Finalization$qqrv, @Forms@initialization$qqrv, @Forms@Finalization$qqrv, @Forms@TApplication@SetShowHint$qqro, @Forms@TApplication@GetExeName$qqrv, @Forms@TApplication@Terminate$qqrv, @Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv, @Forms@TApplication@Initialize$qqrv, @Forms@TApplication@UnhookMainWindow$qqrynpqqrr17Messages@TMessage$o, @Forms@TApplication@HookMainWindow$qqrynpqqrr17Messages@TMessage$o, @Forms@TApplication@HandleMessage$qqrv, @Forms@TApplication@ProcessMessages$qqrv, @Forms@Application, @Graphutil@initialization$qqrv, @Graphutil@Finalization$qqrv, @Extctrls@initialization$qqrv, @Extctrls@Finalization$qqrv, @Extctrls@TTimer@SetOnTimer$qqrynpqqrp14System@TObject$v, @Extctrls@TTimer@SetInterval$qqrui, @Extctrls@TTimer@SetEnabled$qqro, @Extctrls@TTimer@$bctr$qqrp18Classes@TComponent, @Extctrls@TTimer@, @Printers@initialization$qqrv, @Printers@Finalization$qqrv, @Clipbrd@initialization$qqrv, @Clipbrd@Finalization$qqrv, @Extactns@initialization$qqrv, @Extactns@Finalization$qqrv, @Extdlgs@initialization$qqrv, @Extdlgs@Finalization$qqrv, @Buttons@initialization$qqrv, @Buttons@Finalization$qqrv
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winmm.dll
timeGetTime

ascsvc.exe

Advanced SystemCare with Antivirus by IObit Information Technology (Signed)

Remove ascsvc.exe
Version:   5.5.0.61
MD5:   b5c089558c870482d871b7c4ff20b38d
SHA1:   a8d4fab9a5edac0eb74d4cbb0265774c6b22bdb3
SHA256:   adbeb7f81226c6c4144c57048df6a47af709c79efaf948bbe30b15275cd301ce

Overview

ascsvc.exe runs as a service under the name Advanced SystemCare Service 5 (AdvancedSystemCareService5) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Advanced SystemCare with Antivirus 2013 published by IObit, Advanced SystemCare with Antivirus 2013 from IObit and Advanced SystemCare with Antivirus 2013 by IObit. The file is digitally signed by IObit Information Technology which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:ascsvc.exe
Publisher:IObit
Product name:Advanced SystemCare with Antivirus
Description:Advanced SystemCare Service
Typical file path:C:\Program Files\iobit\advanced systemcare with antivirus 2013\ascsvc.exe
Original name:Advanced SystemCare Service
File version:5.5.0.61
Product version:5.5.0.0
Size:502.38 KB (514,432 bytes)
Certificate
Issued to:IObit Information Technology
Authority (CA):VeriSign
Effective date:Tuesday, December 8, 2009
Expiration date:Saturday, January 5, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
IObit
22% remove
Already proven powerful PC tune-up ability unleashes the full power of your PC. With Real-time optimization and ActiveBoost feature, system resources are intelligently managed to ensure you a super-fast PC.

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'AdvancedSystemCareService5' (Advanced SystemCare Service 5)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01313784%
0.028634%
Kernel CPU:0.01037857%
0.013761%
User CPU:0.00275927%
0.014873%
Kernel CPU time:33,517 ms/min
100,923,805ms/min
CPU cycles:6,159,806/sec
17,470,203/sec
Memory
Private memory:14.84 MB
21.59 MB
Private (maximum):4.09 MB
Private (minimum):942 KB
Non-paged memory:14.84 MB
21.59 MB
Virtual memory:89.2 MB
140.96 MB
Virtual memory (peak):115.56 MB
169.69 MB
Working set:958 KB
18.61 MB
Working set (peak):15.02 MB
37.95 MB
Page faults:15,116,744/min
2,039/min
I/O
I/O read transfer:12.55 KB/sec
1.02 MB/min
I/O read operations:11/sec
343/min
I/O write transfer:4.54 KB/sec
274.99 KB/min
I/O write operations:11/sec
227/min
I/O other transfer:1.58 KB/sec
448.09 KB/min
I/O other operations:104/sec
1,671/min
Resource allocations
Threads:8
12
Handles:188
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\iobit\advanced systemcare with antivirus 2013\ascsvc.exe"
Owner:SYSTEM
Windows Service
Service name:AdvancedSystemCareService5
Display name:Advanced SystemCare Service 5
Description:“Advanced SystemCare Service”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ascsvc.exe (main module)
Total CPU:0.18850069%
0.272967%
Kernel CPU:0.13744665%
0.107585%
User CPU:0.05105404%
0.165382%
CPU cycles:5,825,666/sec
5,741,424/sec
Memory:512 KB
1.16 MB
rtl120.bpl
Total CPU:0.00100115%
Kernel CPU:0.00094566%
User CPU:0.00005548%
CPU cycles:650,690/sec
Context switches:2/sec
Memory:1.09 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 66.67%
Windows 7 Home Premium 33.33%

Distribution by countryDistribution by country

Thailand installs about 66.67% of Advanced SystemCare with Antivirus.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE