Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.2.00.03152 6.76%
2.2.00.03152 6.76%
2.1.00.11260 39.19%
2.0.04.06010 22.97%
2.0.03.03240 1.35%
2.0.02.13211 4.05%
2.0.00.10240 18.92%

Relationships

Parent processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenCurrentUser, RegDeleteValueW, RegSetValueExW, AdjustTokenPrivileges, LookupPrivilegeValueW, ImpersonateSelf, OpenThreadToken, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, DuplicateTokenEx, CreateProcessAsUserW, RegEnumKeyExW, RegEnumValueW
gdi32.dll
DeleteObject, CreateFontIndirectW, GetDeviceCaps, GetObjectW, SetTextColor, SetBkMode, GetStockObject, CreateDIBSection, CreateCompatibleDC, DeleteDC
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
WaitForSingleObject, CloseHandle, ReleaseMutex, GetTickCount, GetCurrentThread, GetLastError, CreateToolhelp32Snapshot, GetCurrentProcessId, IsDebuggerPresent, UnhandledExceptionFilter, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, InterlockedExchange, GetSystemDirectoryW, GetComputerNameW, ReleaseSemaphore, CreateSemaphoreW, LocalFree, LocalAlloc, MapViewOfFile, OpenFileMappingW, OpenEventW, GetProcessHeap, HeapFree, Process32FirstW, OpenProcess, GetPrivateProfileStringW, WTSGetActiveConsoleSessionId, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, CreateMutexW, FreeLibrary, LoadLibraryW, SetErrorMode, GetCurrentProcess, SetProcessWorkingSetSize, MulDiv, DeleteFileW, UnmapViewOfFile, GlobalAlloc, GlobalUnlock, GlobalLock, Process32NextW, LocalFileTimeToFileTime, SystemTimeToFileTime, FormatMessageW, GetSystemTimeAsFileTime, GetVolumeInformationW, GetDiskFreeSpaceW, CreateFileA, GetVersion, GetDiskFreeSpaceExW, OutputDebugStringW, GetVersionExW, SetFileAttributesW, GetFileAttributesW, FindNextFileW, FindClose, FindFirstFileW, CreateProcessW, GetModuleHandleW, GetExitCodeThread, GetCurrentThreadId, SetEvent, PulseEvent, ResetEvent, CreateEventW, LeaveCriticalSection, GetTempPathW, WideCharToMultiByte, MultiByteToWideChar, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, GetFileSize, SetEndOfFile, SetFileTime, SetFilePointer, WriteFile, ReadFile, GetLongPathNameW, lstrcmpW, lstrlenW, lstrcpynW, GetDriveTypeW, GetVolumeNameForVolumeMountPointW, DeviceIoControl, QueryDosDeviceW, GetLogicalDrives, CreateFileW, GetExitCodeProcess, OpenMutexW, Sleep, GetProcAddress, TerminateProcess, DeleteCriticalSection, EnterCriticalSection, FlushViewOfFile, InitializeCriticalSection
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, StringFromGUID2, PropVariantClear, CLSIDFromString, CoUninitialize, CoTaskMemFree, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CreateBindCtx, CoInitialize, CoInitializeEx
setupapi.dll
SetupDiCreateDeviceInfoList, CM_Get_DevNode_Registry_PropertyW, CM_Get_Device_Interface_ListW, SetupDiOpenDeviceInterfaceW, CM_Get_Sibling, CM_Get_Device_ID_ListW, CM_Get_Device_ID_List_SizeW, CM_Get_Device_IDW, CM_Get_Child, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList, CM_Get_Parent, SetupDiGetDeviceRegistryPropertyW, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, CM_Get_Device_Interface_List_SizeW
shell32.dll
Shell_NotifyIconW, SHGetFolderLocation, SHGetPathFromIDListW, SHGetFolderPathW, SHGetDesktopFolder, SHGetMalloc, ShellExecuteW, SHGetSpecialFolderPathW, SHFileOperationW
shlwapi.dll
PathIsNetworkPathW, SHDeleteKeyW, PathIsDirectoryW, StrRetToStrW, PathStripToRootW
user32.dll
DispatchMessageW, TranslateMessage, GetMessageW, LoadStringW, SetFocus, PostMessageW, IsWindowEnabled, IsWindow, SendDlgItemMessageW, MessageBoxW, InsertMenuItemW, LoadImageW, GetSystemMetrics, LoadIconW, LoadCursorW, RegisterClassExW, CreateWindowExW, DefWindowProcW, GetCursorPos, GetMenuItemCount, SetMenuDefaultItem, TrackPopupMenu, DestroyMenu, KillTimer, SetTimer, EnableWindow, CharLowerW, GetActiveWindow, FindWindowW, RegisterDeviceNotificationW, UnregisterDeviceNotification, IsClipboardFormatAvailable, OpenClipboard, GetClipboardData, CloseClipboard, EmptyClipboard, SetClipboardData, GetDC, DestroyWindow, SendMessageW, SetWindowTextW, SetWindowPos, GetWindowLongW, SetWindowLongW, SetForegroundWindow, GetDesktopWindow, FillRect, GetClientRect, EndDialog, MoveWindow, ScreenToClient, GetWindowRect, GetDlgItem, DialogBoxParamW, SetDlgItemTextW, GetDlgItemTextW, GetKeyState, GetWindowThreadProcessId, GetLastActivePopup, PostQuitMessage, RegisterWindowMessageW, UnregisterClassW, GetSubMenu, ShowWindow, LoadMenuW
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW

PMBVolumeWatcher.exe

PMB by Sony Corporation (Signed)

Remove PMBVolumeWatcher.exe
Version:   2.1.00.11260
MD5:   48b9248ced8a5de4eb0917cb676cb8d5
SHA1:   646cf51ac1c42583eaa31561f9225f1856cf6068
SHA256:   e39af20ae2d8b768c9e6cd060beb7e24f71b1398472274ba7178ab9adf8a3248

Overview

pmbvolumewatcher.exe executes as a process with the local user's privileges typically within the context of its parent asctray.exe (Advanced SystemCare 5 Tray by IObit Information Technology). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It configures an autoplay handler withing explorer.exe named SonyPMBImportPicturesOnArrival that will launch the program automatically. It is installed with a couple of know programs including PMB published by Sony Corporation and PMB published by Sony Corporation.

DetailsDetails

File name:pmbvolumewatcher.exe
Publisher:Sony Corporation
Product name:PMB
Description:Media Check Tool
Typical file path:C:\Program Files\sony\pmb\pmbvolumewatcher.exe
File version:2.1.00.11260
Product version:5.5.00.11260
Size:632.84 KB (648,032 bytes)
Certificate
Issued to:Sony Corporation
Authority (CA):VeriSign
Effective date:Tuesday, October 5, 2010
Expiration date:Saturday, November 5, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Sony Corporation
7% remove
Have you ever wanted to find vacation photos or sports videos saved on VAIO, and felt frustrated when you couldn’t find them quickly? With PMB (Picture Motion Browser), you can automatically organise pictures and movies into folders or according to the date that they were shot, simply by importing them into your VAIO. For example, you can see the record of a child’s growth by viewing pictures in chronological order, quickly and easily. ...

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'PMBVolumeWatcher' → C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'SonyPMBImportPicturesOnArrival'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00053748%
0.028634%
Kernel CPU:0.00023081%
0.013761%
User CPU:0.00030668%
0.014873%
Kernel CPU time:1,560,351 ms/min
100,923,805ms/min
CPU cycles:11,230/sec
17,470,203/sec
Memory
Private memory:6.14 MB
21.59 MB
Private (maximum):7.26 MB
Private (minimum):1.32 MB
Non-paged memory:6.14 MB
21.59 MB
Virtual memory:85.5 MB
140.96 MB
Virtual memory (peak):91.48 MB
169.69 MB
Working set:2.35 MB
18.61 MB
Working set (peak):11.51 MB
37.95 MB
Page faults:16,795/min
2,039/min
I/O
I/O read transfer:517 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:9 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:185
600
GUI GDI count:16
103
GUI GDI peak:18
142
GUI USER count:9
49
GUI USER peak:10
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command line:"C:\Program Files\sony\pmb\pmbvolumewatcher.exe"
Owner:User
Parent processes:

ResourcesThreads

Averages
 
PMBVolumeWatcher.exe (main module)
Total CPU:0.00189334%
0.272967%
Kernel CPU:0.00076076%
0.107585%
User CPU:0.00113258%
0.165382%
CPU cycles:42,443/sec
5,741,424/sec
Memory:644 KB
1.16 MB
MSVCR90.dll
Total CPU:0.00016496%
Kernel CPU:0.00011856%
User CPU:0.00004639%
CPU cycles:4,394/sec
Memory:652 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 63.51%
Windows 7 Home Basic 14.86%
Windows 8 Pro 6.76%
Windows 7 Ultimate 5.41%
Windows 7 Professional 5.41%
Windows Vista Ultimate 4.05%

Distribution by countryDistribution by country

United States installs about 33.78% of PMB.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Sony 88.46%
Intel 7.69%
Dell 1.92%
Lenovo 1.92%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE