Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.6.4.1902 50.00%
1.6.4.1902 50.00%
(Note, CA publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
AddAccessAllowedAce, GetUserNameW, InitializeAcl, GetLengthSid, AllocateAndInitializeSid, GetCurrentHwProfileW, RegCloseKey, RegQueryValueExW, FreeSid, SetSecurityDescriptorDacl, LookupAccountNameW, ConvertSidToStringSidW, RegEnumValueW, RegEnumKeyExW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, InitializeSecurityDescriptor, RegRestoreKeyW, RegSaveKeyW, RegUnLoadKeyW, RegLoadKeyW, RegCreateKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegOpenKeyExW
arclib.dll
ArcTk2_OpenArchive, ArcTk2_SetGlobalTempFileDirectory, ArcTk2_SetToolkitLimits, ArcTk2_Init, ArcTk2_ExtractToStream, ArcTk2_SetTypeEnabled, ArcTk2_GetNextFile, ArcTk2_CloseArchive, ArcTk2_Close, GetArcList, ArcTk2_OpenArchiveStream, ArcTk2_SetAllTypesEnabled, ArcTk2_ExtractToTempFile, ArcTk2_GetDepth, ArcVersion, GetArcFileType
crux_1_0.dll
CruxFileReadLine, CruxStrDup, CruxStrFree, CruxStrFormat, CruxFileSetAttributes, CruxInitialize, CruxTerminate, CruxStrStr, CruxFileGetAttributes, CruxStrCmp, CruxProcGetFirst, CruxProcGetFirstModule, CruxProcPPid2Native, CruxProcGetNextModule, CruxProcGetModuleClose, CruxProcGetNext, CruxProcGetClose, CruxProcGetModuleName, CruxProcGetExecutableName, CruxFileRemoveDir, CruxFileGetPos, CruxFileSetSize, CruxFileGetSize, CruxFileGetTime, CruxTimeCmp, CruxFileCreateDir, CruxStrChr, CruxUtf16ToUtf8, CruxThreadSelf, CruxThreadEqual, CruxStrRChr, CruxFileClose, CruxFileCreate, CruxFileFlush, CruxFileSeek, CruxFileFindFirst, CruxFileFindGetFullName, CruxFileExistsDir, CruxFileGetSizeByName, CruxFileFindNext, CruxFileFindClose, CruxGetLastError, CruxFileGetTimeByName, CruxFileExistsFile, CruxFileDelete, CruxFileRead, CruxFileWrite, CruxStrLen, CruxFileSetTimeByName
flipster.dll
InitFlipster, SetScanCallback, SetScanParams, Scan, GetData, Action, CleanBuffer
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
InterlockedExchange, GetACP, LoadLibraryExW, RaiseException, InterlockedCompareExchange, GetProcAddress, CreateFileW, DeviceIoControl, FormatMessageW, FreeLibrary, lstrlenA, MultiByteToWideChar, GetFileAttributesW, ExpandEnvironmentStringsW, GetLogicalDriveStringsW, GetDriveTypeW, GetPrivateProfileStringW, OutputDebugStringA, FindResourceW, GetLocaleInfoA, LoadResource, LockResource, SearchPathW, UnmapViewOfFile, CreateFileMappingW, MapViewOfFile, GetFileType, SetErrorMode, WritePrivateProfileStringW, IsDebuggerPresent, OutputDebugStringW, DebugBreak, DeleteFileW, GetProcessHeap, HeapFree, GetCurrentProcessId, OpenProcess, TerminateProcess, MoveFileExW, TryEnterCriticalSection, GetTempPathW, GetTickCount, WaitForMultipleObjects, GetOverlappedResult, CancelIo, DisconnectNamedPipe, GetThreadLocale, FileTimeToSystemTime, CreateEventW, ResetEvent, SetEvent, QueryPerformanceCounter, GetModuleFileNameW, QueryPerformanceFrequency, SetEndOfFile, SetFilePointerEx, WriteFile, ReadFile, GetFileSizeEx, GetTempFileNameW, GetCurrentThreadId, GetCurrentProcess, GetProcessAffinityMask, GetCurrentThread, SetThreadAffinityMask, Sleep, GetVersionExW, WideCharToMultiByte, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, GetComputerNameW, GetWindowsDirectoryW, GetVolumeInformationW, CreateMutexW, CloseHandle, InterlockedDecrement, ReleaseMutex, WaitForSingleObject, GetLastError, InterlockedIncrement, LocalAlloc, LocalFree, GetVersionExA, GetSystemTime, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetSystemTimeAsFileTime, SizeofResource, LoadLibraryW
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoCreateGuid, OleRun, CoInitializeEx, CoInitializeSecurity, CoCreateInstance, CoSetProxyBlanket, CoUninitialize
rpcrt4.dll
UuidToStringW, RpcStringFreeW
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathSearchAndQualifyW, SHSetValueW, SHDeleteValueW, SHDeleteKeyW
user32.dll
wsprintfW, MsgWaitForMultipleObjects, PeekMessageW, TranslateMessage, DispatchMessageW, UnregisterClassA
wininet.dll
InternetQueryDataAvailable, InternetWriteFile, HttpOpenRequestW, HttpAddRequestHeadersW, InternetCrackUrlW, InternetConnectW, HttpEndRequestW, InternetOpenW, InternetReadFile, InternetCloseHandle, InternetSetOptionW, HttpSendRequestExW, HttpSendRequestW, HttpQueryInfoW
Export table
_SetAMSTraceOptions@8
CreateMalwareSDK
CreateMalwareSDK2
CreateMalwareSDK3
InitializeMalwareSDK
UninitializeMalwareSDK
UseAMService

malwareapi.dll

Anti-Malware SDK by CA (Signed)

Remove malwareapi.dll
Version:   1.6.4.1902
MD5:   21231e6925da4e18575f56d2e2ce3ee2
SHA1:   efdbb6a16d8623a01904ea0fa50a6919c707af0d
SHA256:   bdc78e69c80a05b37e2091b05bed9fcd96c8e37de3518e3a7982a15d9cc22aac

Overview

malwareapi.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by CA which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:malwareapi.dll
Publisher:CA
Product name:Anti-Malware SDK
Description:CA Anti-Malware SDK interface library.
Typical file path:C:\Program Files\total defense\internet security suite\anti-virus\malwareapi.dll
File version:1.6.4.1902
Size:1.14 MB (1,193,288 bytes)
Certificate
Issued to:CA
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 50.00%
Windows 7 Ultimate 50.00%

Distribution by countryDistribution by country

United States installs about 100.00% of Anti-Malware SDK.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Sony 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE