Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3, 1, 5, 7619 80.00%
3, 1, 1, 7317 20.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyA, RegUnLoadKeyA, RegSetKeySecurity, RegSaveKeyA, RegRestoreKeyA, RegReplaceKeyA, RegNotifyChangeKeyValue, RegLoadKeyA, RegGetKeySecurity, RegFlushKey, RegEnumKeyExA, RegDeleteKeyA, RegQueryValueA, RegQueryValueExA, RegQueryInfoKeyA, RegSetValueExA, RegCreateKeyA, RegOpenKeyExA, RegEnumValueA, RegCloseKey, RegConnectRegistryA, RegCreateKeyExA, RegDeleteValueA
comctl32.dll
ImageList_SetBkColor, ImageList_SetImageCount, ImageList_GetIcon, ImageList_GetImageCount, ImageList_ReplaceIcon
gdi32.dll
DeleteDC, CreateHalftonePalette, GetStretchBltMode, GetBitmapBits, GetDIBits, GetNearestPaletteIndex, SetPaletteEntries, StretchDIBits, SetBrushOrgEx, GetPaletteEntries, SetBitmapBits, GetDeviceCaps, CreateRoundRectRgn, FrameRgn, GetTextMetricsA, GetTextColor, SelectObject, GetStockObject, CreateFontIndirectA, CreateEllipticRgn, CreateRectRgn, SelectClipRgn, DeleteObject, GetTextExtentPoint32A, CreateRectRgnIndirect, CreatePen, Rectangle, StretchBlt, RealizePalette, GetObjectA, CreateBitmap, GetPixel, BitBlt, CreatePalette, Ellipse, CreateCompatibleDC, CreateCompatibleBitmap, CreateFontA, CreateSolidBrush, PatBlt, ExtTextOutA, GetBkColor, SetPixel, Polygon, RectVisible, CombineRgn, RectInRegion, GetRgnBox, PtInRegion, CreatePolygonRgn, FillRgn, GetCharWidthA, CreatePatternBrush, CreateDIBitmap, GetViewportOrgEx, GetCurrentObject, DPtoLP
kernel32.dll
GetLocaleInfoA, GetLocalTime, lstrlenA, lstrlenW, GetCurrentThreadId, lstrcmpA, GetComputerNameA, GetStartupInfoA, GlobalReAlloc, GlobalSize, GlobalHandle, FormatMessageA, LocalFree, GetTempPathA, GetSystemDirectoryA, FindFirstFileA, FindNextFileA, FindClose, WinExec, GetVersion, TerminateThread, LoadLibraryA, GetProcAddress, FreeLibrary, CloseHandle, ResetEvent, SetEvent, SuspendThread, ResumeThread, MultiByteToWideChar, Sleep, GetFullPathNameA, GetShortPathNameA, GetWindowsDirectoryA, SetCurrentDirectoryA, GetPrivateProfileSectionA, WritePrivateProfileStringA, GetPrivateProfileIntA, GetPrivateProfileStringA, GetUserDefaultLangID, CreateProcessA, CreateFileA, GetFileTime, FileTimeToSystemTime, GetDateFormatA, GetTimeFormatA, GetVersionExA, SizeofResource, GetCurrentDirectoryA, GetFileAttributesA, GetNumberFormatA, lstrcpyA, GetTempFileNameA, LeaveCriticalSection, InitializeCriticalSection, EnterCriticalSection, DeleteCriticalSection, MoveFileA, GetTickCount, CreateDirectoryA, RemoveDirectoryA, GetModuleHandleA, FindResourceA, LoadResource, LockResource, _lopen, _lread, GlobalAlloc, _lclose, GlobalFree, GetDriveTypeA, GetSystemTime, GlobalLock, GlobalUnlock, CreateMutexA, GetLastError, OpenMutexA, WaitForSingleObject, ReleaseMutex, GetModuleFileNameA, DeleteFileA, GetUserDefaultLCID, MulDiv
mfc42.dll
DllMain
msimg32.dll
AlphaBlend
msvcp60.dll
DllMain
msvcrt.dll
DllMain
ole32.dll
CoCreateInstance, CoInitialize
shell32.dll
DragQueryFileA, ShellExecuteA, SHFileOperationA, ExtractIconA, Shell_NotifyIconA, SHGetSpecialFolderPathA, SHAppBarMessage, SHGetFileInfoA
shlwapi.dll
SHDeleteKeyA
user32.dll
SendMessageA, TranslateMessage, DispatchMessageA, GetWindow, SetMenu, DestroyMenu, CopyIcon, CloseWindow, MessageBoxA, UnregisterHotKey, RegisterHotKey, SetWindowRgn, SetRect, FindWindowExA, DrawIconEx, GetWindowRgn, WindowFromPoint, GetMenuItemID, GetDoubleClickTime, GetMenuStringA, TrackPopupMenu, SetMenuDefaultItem, ValidateRect, GetCapture, IsChild, DrawIcon, ShowCursor, AdjustWindowRect, EnableMenuItem, ModifyMenuA, BringWindowToTop, GetDlgItem, GetMessageA, SetParent, DrawFrameControl, SetRectEmpty, WindowFromDC, GetClassInfoA, LoadIconA, GetSystemMenu, AppendMenuA, GetForegroundWindow, IsZoomed, SetForegroundWindow, GetDesktopWindow, MessageBeep, DestroyCursor, FindWindowA, RegisterWindowMessageA, SetWindowLongA, CallWindowProcA, ScrollDC, LoadBitmapA, UpdateWindow, CopyRect, FillRect, DrawFocusRect, GetSubMenu, ClientToScreen, GetWindowLongA, UnionRect, EqualRect, DestroyIcon, GetSystemMetrics, IntersectRect, GetCursorPos, ScreenToClient, InflateRect, SetActiveWindow, GetSysColor, GetDC, ReleaseDC, LoadImageA, ReleaseCapture, GetClientRect, SetCursor, GetMessagePos, SetWindowContextHelpId, GetWindowContextHelpId, AdjustWindowRectEx, GetNextDlgTabItem, SetWindowPos, DeferWindowPos, ShowWindow, EndDeferWindowPos, BeginDeferWindowPos, GetTopWindow, CreatePopupMenu, LockWindowUpdate, GetDCEx, MapWindowPoints, IsRectEmpty, DeleteMenu, GetMenuItemCount, GetMenuState, InsertMenuA, GetActiveWindow, GetClassLongA, GetMenu, WaitMessage, GetPropA, SetPropA, SetFocus, DrawMenuBar, CallNextHookEx, GetMenuDefaultItem, UnhookWindowsHookEx, SetWindowsHookExA, wsprintfA, SetMenuItemInfoA, GetMenuItemInfoA, IsMenu, DrawEdge, LoadAcceleratorsA, TranslateAcceleratorA, DestroyWindow, SetCapture, LoadCursorA, SystemParametersInfoA, OffsetRect, IsIconic, LoadMenuA, IsWindowVisible, PtInRect, GetDlgCtrlID, GetKeyState, InvalidateRect, IsWindow, GetFocus, EnableWindow, GetWindowRect, RedrawWindow, KillTimer, GetParent, PostMessageA, SetTimer, PeekMessageA
version.dll
GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeA

Webshots.scr

The Webshots Desktop by American Greetings (Signed)

Remove Webshots.scr
Version:   3, 1, 1, 7317
MD5:   d087438a8916937b1d55de17e7e08177
SHA1:   1e322550b2bc13878f13deda6384a3c4b917c9da
SHA256:   61dfce38919adc3a44baf107462fcd64947b010b8fa480bbe61659e2db911899

Overview

Webshots.scr executes as a process with the local user's privileges typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). The file is digitally signed by American Greetings which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:Webshots.scr
Publisher:Webshots.com
Product name:The Webshots Desktop
Description:Webshots Photo Manager
Typical file path:C:\Program Files\Webshots\3.1.5.7619\Webshots.scr
Original name:Webshots2.SCR
File version:3, 1, 1, 7317
Size:3.19 MB (3,343,688 bytes)
Certificate
Issued to:American Greetings
Authority (CA):VeriSign
Effective date:Monday, May 11, 2009
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Screensaver
  • Webshots.scr

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00313378%
0.028634%
Kernel CPU:0.00156040%
0.013761%
User CPU:0.00157339%
0.014873%
Kernel CPU time:1,214,389,785 ms/min
100,923,805ms/min
CPU cycles:6,152,473/sec
17,470,203/sec
Context switches:4/sec
284/sec
Memory
Private memory:6.87 MB
21.59 MB
Private (maximum):17.18 MB
Private (minimum):10.57 MB
Non-paged memory:6.87 MB
21.59 MB
Virtual memory:90.79 MB
140.96 MB
Virtual memory (peak):134.87 MB
169.69 MB
Working set:11.67 MB
18.61 MB
Working set (peak):55.79 MB
37.95 MB
Page faults:1,312,575/min
2,039/min
I/O
I/O read transfer:220.67 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:105.63 KB/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:47.16 KB/sec
448.09 KB/min
I/O other operations:1,780/sec
1,671/min
Resource allocations
Threads:1
12
Handles:94
600
GUI GDI count:28
103
GUI USER count:16
49

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command lines:
  • C:\progra~1\webshots\webshots.scr /s
  • C:\progra~1\webshots\webshots.scr /t
Owner:User
Parent process:winlogon.exe (Windows Logon Application by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 60.00%
Microsoft Windows XP 20.00%
Windows Vista Business 20.00%

Distribution by countryDistribution by country

United States installs about 60.00% of The Webshots Desktop.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE