Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 6.96%
6.2.9200.16384 (win8_rtm.120725-1247) 16.52%
6.2.9200.16384 (win8_rtm.120725-1247) 2.61%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.87%
6.1.7600.16385 (win7_rtm.090713-1255) 6.09%
6.1.7600.16385 (win7_rtm.090713-1255) 15.65%
6.1.7600.16385 (win7_rtm.090713-1255) 4.35%
6.1.7600.16385 (win7_rtm.090713-1255) 33.91%
6.0.6000.16386 (vista_rtm.061101-2205) 8.70%
6.0.6000.16386 (vista_rtm.061101-2205) 2.61%
6.0.5308.17 (winmain_idx01.060217-2200) 1.74%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegQueryValueExA, RegOpenKeyExA
comctl32.dll
InitCommonControlsEx
d3d9.dll
Direct3DCreate9
gdi32.dll
SelectObject, CreateBitmap, CreateCompatibleDC, GetStockObject, GetDIBits, SetBkColor, SetTextColor, BitBlt, DeleteObject, DeleteDC, ExcludeClipRect, CreateFontW, GetDeviceCaps
kernel32.dll
GetTickCount, QueryPerformanceFrequency, GetCommandLineW, MulDiv, GetModuleHandleW, FindResourceW, SizeofResource, InterlockedExchange, InterlockedCompareExchange, GetStartupInfoA, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetSystemInfo, GetVersionExA, IsProcessorFeaturePresent, GetProcAddress, OutputDebugStringA, MultiByteToWideChar, InitializeCriticalSection, DeleteCriticalSection, Sleep, LockResource, LoadResource
msvcrt.dll
DllMain
ole32.dll
CoInitializeEx, CoUninitialize
user32.dll
PostQuitMessage, DispatchMessageW, TranslateMessage, GetMessageW, PostMessageW, DefWindowProcW, KillTimer, SetTimer, EndPaint, BeginPaint, SetCursor, UnionRect, SetWindowPos, FillRect, SystemParametersInfoW, DrawTextW, ScreenToClient, InvalidateRect, UpdateWindow, SetRect, LoadCursorW, LoadIconW, RegisterClassW, AdjustWindowRect, CreateWindowExW, GetClientRect, EnumDisplaySettingsW, IntersectRect, OffsetRect, LoadStringW, GetDC, EnumDisplayMonitors, PeekMessageW, SystemParametersInfoA, GetSystemMetrics, GetWindowRect, GetWindowPlacement, IsIconic, SetRectEmpty, MessageBoxW
winmm.dll
timeGetTime

bubbles.scr

Bubbles Screen Saver by Microsoft

Remove bubbles.scr
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   775c41c2f2ef3dd150a7444b95e631d0
SHA1:   29a6bad211d6b85c140aaf450d009b6bec4bfcb2
SHA256:   eb1041c803a5c1b56b3fe315666c82578e4b74faf7e2b252089190aec5d3bc1e
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is bubbles.scr?

Bubbles Screen Saver is a default Windows screen saver automatically installed with Windows.

Overview

bubbles.scr executes as a process with the local user's privileges typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7 and is compiled as a 32 bit program.

DetailsDetails

File name:bubbles.scr
Publisher:Microsoft Corporation
Product name:Bubbles Screen Saver
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\bubbles.scr
Original name:Bubbles
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:858 KB (878,592 bytes)
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Screensaver
  • bubbles.scr

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00153036%
0.028634%
Kernel CPU:0.00018568%
0.013761%
User CPU:0.00134469%
0.014873%
Kernel CPU time:234,735 ms/min
100,923,805ms/min
Memory
Private memory:61.52 MB
21.59 MB
Private (maximum):43.85 MB
Private (minimum):43.47 MB
Non-paged memory:61.52 MB
21.59 MB
Virtual memory:135.34 MB
140.96 MB
Virtual memory (peak):135.34 MB
169.69 MB
Working set:43.85 MB
18.61 MB
Working set (peak):43.85 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:84
600
GUI GDI count:18
103
GUI GDI peak:20
142
GUI USER count:6
49
GUI USER peak:6
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:C:\Windows\System32\bubbles.scr /s
Owner:User
Parent process:winlogon.exe (Windows Logon Application by Microsoft)

ResourcesThreads

Averages
 
Bubbles.scr (main module)
Total CPU:2.17660329%
0.272967%
Kernel CPU:0.91573114%
0.107585%
User CPU:1.26087215%
0.165382%
CPU cycles:130,129,971/sec
5,741,424/sec
Context switches:241/sec
79/sec
Memory:880 KB
1.16 MB
d3d9.dll
Total CPU:0.00048692%
Kernel CPU:0.00000000%
User CPU:0.00048692%
CPU cycles:16,549,076/sec
Context switches:62/sec
Memory:1.76 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 28.07%
Windows Vista Home Premium 17.54%
Windows 8.1 8.77%
Windows 7 Home Premium 8.77%
Windows 7 Professional 7.02%
Windows 8.1 Pro 5.26%
Windows 7 Starter 5.26%
Windows Vista Ultimate 5.26%
Microsoft Windows XP 3.51%
Windows 8 Pro 3.51%
Windows Vista Home Basic 3.51%
Windows 8 Pro with Media Center 1.75%
Windows 8 Release Preview 1.75%

Distribution by countryDistribution by country

United States installs about 31.58% of Bubbles Screen Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 24.49%
Hewlett-Packard 22.45%
Toshiba 12.24%
ASUS 12.24%
Acer 10.20%
Samsung 6.12%
Gateway 4.08%
Sony 4.08%
GIGABYTE 4.08%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE