Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

LookupPrivilegeValueW, RegQueryValueW, RegOpenKeyW, RegEnumKeyW, RegOpenKeyExA, RegQueryValueExA, RegQueryInfoKeyW, RegEnumValueW, RegOpenCurrentUser, RegDeleteValueW, RegDeleteKeyW, OpenProcessToken, RegSetValueExW, AdjustTokenPrivileges, DeleteService, CreateServiceW, StartServiceW, QueryServiceStatusEx, RegFlushKey, OpenSCManagerW, OpenServiceW, ControlService, CloseServiceHandle, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW

comdlg32.dll

GetFileTitleW

gdi32.dll

ScaleViewportExtEx, SetWindowExtEx, ScaleWindowExtEx, ExtSelectClipRgn, CreatePatternBrush, GetStockObject, IntersectClipRect, GetCharWidthW, CreateFontW, StretchDIBits, GetTextMetricsW, CreateRectRgnIndirect, OffsetViewportOrgEx, GetMapMode, GetBkColor, GetTextColor, GetRgnBox, SetViewportOrgEx, Escape, TextOutW, RectVisible, ExcludeClipRect, SetMapMode, RestoreDC, SaveDC, CreateBitmap, SetBkColor, GetClipBox, CreateRoundRectRgn, CreateCompatibleDC, CreateCompatibleBitmap, Rectangle, GetTextExtentPoint32W, SetBkMode, SetTextColor, ExtTextOutW, GetDeviceCaps, CreateSolidBrush, SelectObject, DeleteDC, DeleteObject, GetObjectW, CreateFontIndirectW, PtVisible, GetPixel, BitBlt, GetWindowExtEx, GetViewportExtEx, SetViewportExtEx

gdiplus.dll

GdipDeleteGraphics, GdipDrawImageRectRectI, GdipGetImageWidth, GdipGetImageHeight, GdipFree, GdipCreateFromHDC, GdipCreateBitmapFromStream, GdipCreateBitmapFromStreamICM, GdipDisposeImage, GdipCloneImage, GdiplusShutdown, GdipAlloc, GdiplusStartup

hid.dll

HidP_GetSpecificValueCaps, HidP_GetCaps, HidD_GetPreparsedData, HidD_GetHidGuid, HidD_SetFeature, HidD_GetAttributes, HidP_SetUsageValue, HidP_GetUsageValue, HidD_GetFeature, HidP_GetUsageValueArray, HidD_FreePreparsedData

kernel32.dll

DllMain

ole32.dll

CoRevokeClassObject, OleInitialize, CreateStreamOnHGlobal, CoCreateInstance, CoInitializeEx, CoUninitialize, OleIsCurrentClipboard, CoTaskMemFree, CoTaskMemAlloc, CoRegisterMessageFilter, OleFlushClipboard, CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CLSIDFromString, CLSIDFromProgID

oledlg.dll

OleUIBusyW

powrprof.dll

SetSuspendState

rpcrt4.dll

UuidCreate

setupapi.dll

SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsW, SetupDiOpenDeviceInfoW, CM_Get_Parent, SetupDiGetDeviceRegistryPropertyW, CM_Get_Device_IDW

shell32.dll

ShellExecuteExW, SHGetFolderPathW, Shell_NotifyIconW, DragFinish, DragQueryFileW, CommandLineToArgvW

shlwapi.dll

PathFindFileNameW, PathStripToRootW, PathIsUNCW, PathFindExtensionW

user32.dll

DllMain

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

winmm.dll

mixerClose, mixerGetLineControlsW, mixerGetNumDevs, mixerGetControlDetailsW, mixerSetControlDetails, mixerOpen, mixerGetDevCapsW, mixerGetLineInfoW, PlaySoundW

winspool.drv

ClosePrinter, DocumentPropertiesW, OpenPrinterW

wtsapi32.dll

WTSUnRegisterSessionNotification, WTSRegisterSessionNotification

Bootcamp.exe

Boot Camp by Apple Inc. (Signed)

Remove Bootcamp.exe

Version:	3.1.0.10
MD5:	d796af92a9a75bbdf500ed88bbe20f6d
SHA1:	e2978d0b6ca51170868f249fd147355ba92764f5
SHA256:	b3b6c3b71aa11cc1ebf3ee88cede1d714e499fc2382887ac74910dd61b8fc7c7

What is Bootcamp.exe?

Boot Camp Manager guides users through non-destructive re-partitioning (including resizing of an existing HFS+ partition, if necessary) of their hard disk drive and using the Mac OS X Leopard or Snow Leopard disc to install Windows drivers. In addition to device drivers for the hardware, the disc includes an applet for the Windows control panel for selecting the boot operating system.

About Bootcamp.exe (from Apple Inc.)

“Boot Camp lets you install Windows on a Mac computer in its own partition, using a Microsoft Windows installation disc that you provide. After installation, you can use either Windows or Mac OS X on y”

Details

File name:	Bootcamp.exe
Publisher:	Apple Inc.
Product name:	Boot Camp
Description:	Boot Camp Manager
Typical file path:	C:\Program Files\boot camp\bootcamp.exe
File version:	3.1.0.10
Product version:	3.1
Size:	512.8 KB (525,112 bytes)
Certificate
Issued to:	Apple Inc.
Authority (CA):	VeriSign
Effective date:	Sunday, May 17, 2009
Expiration date:	Sunday, June 26, 2011
Digital DNA
Entropy:	6.354511
File packed:	No
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Apple_KbdMgr' → C:\Program Files\Boot Camp\Bootcamp.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00039185%	0.028634%
Kernel CPU:	0.00011584%	0.013761%
User CPU:	0.00027601%	0.014873%
Kernel CPU time:	1,953,593 ms/min	100,923,805ms/min
User CPU time:	1 ms/min	0 ms/min
CPU cycles:	16,974,979/sec	17,470,203/sec
Context switches:	28/sec	284/sec
Memory
Private memory:	6.78 MB	21.59 MB
Private (maximum):	4.81 MB
Private (minimum):	4.81 MB
Non-paged memory:	6.78 MB	21.59 MB
Virtual memory:	81.3 MB	140.96 MB
Virtual memory (peak):	85.74 MB	169.69 MB
Working set:	4.75 MB	18.61 MB
Working set (peak):	7.86 MB	37.95 MB
Page faults:	10,268/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	127 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	3.69 KB/sec	448.09 KB/min
I/O other operations:	380/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	160	600
GUI GDI count:	173	103
GUI GDI peak:	176	142
GUI USER count:	23	49
GUI USER peak:	25	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\Program Files\boot camp\bootcamp.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads