Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.2.00.03152 6.76%
2.2.00.03152 6.76%
2.1.00.11260 39.19%
2.0.04.06010 22.97%
2.0.03.03240 1.35%
2.0.02.13211 4.05%
2.0.00.10240 18.92%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenCurrentUser, RegDeleteValueW, RegSetValueExW, AdjustTokenPrivileges, LookupPrivilegeValueW, ImpersonateSelf, OpenThreadToken, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, DuplicateTokenEx, CreateProcessAsUserW, RegEnumKeyExW, RegEnumValueW
gdi32.dll
DeleteObject, CreateFontIndirectW, GetDeviceCaps, GetObjectW, SetTextColor, SetBkMode, GetStockObject, CreateDIBSection, CreateCompatibleDC, DeleteDC
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
WaitForSingleObject, CloseHandle, ReleaseMutex, GetTickCount, GetCurrentThread, GetLastError, CreateToolhelp32Snapshot, GetCurrentProcessId, IsDebuggerPresent, UnhandledExceptionFilter, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, InterlockedExchange, GetSystemDirectoryW, GetComputerNameW, ReleaseSemaphore, CreateSemaphoreW, LocalFree, LocalAlloc, MapViewOfFile, OpenFileMappingW, OpenEventW, GetProcessHeap, HeapFree, Process32FirstW, OpenProcess, GetPrivateProfileStringW, WTSGetActiveConsoleSessionId, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, CreateMutexW, FreeLibrary, LoadLibraryW, SetErrorMode, GetCurrentProcess, SetProcessWorkingSetSize, MulDiv, DeleteFileW, UnmapViewOfFile, GlobalAlloc, GlobalUnlock, GlobalLock, Process32NextW, LocalFileTimeToFileTime, SystemTimeToFileTime, FormatMessageW, GetSystemTimeAsFileTime, GetVolumeInformationW, GetDiskFreeSpaceW, CreateFileA, GetVersion, GetDiskFreeSpaceExW, OutputDebugStringW, GetVersionExW, SetFileAttributesW, GetFileAttributesW, FindNextFileW, FindClose, FindFirstFileW, CreateProcessW, GetModuleHandleW, GetExitCodeThread, GetCurrentThreadId, SetEvent, PulseEvent, ResetEvent, CreateEventW, LeaveCriticalSection, GetTempPathW, WideCharToMultiByte, MultiByteToWideChar, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, GetFileSize, SetEndOfFile, SetFileTime, SetFilePointer, WriteFile, ReadFile, GetLongPathNameW, lstrcmpW, lstrlenW, lstrcpynW, GetDriveTypeW, GetVolumeNameForVolumeMountPointW, DeviceIoControl, QueryDosDeviceW, GetLogicalDrives, CreateFileW, GetExitCodeProcess, OpenMutexW, Sleep, GetProcAddress, TerminateProcess, DeleteCriticalSection, EnterCriticalSection, FlushViewOfFile, InitializeCriticalSection
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, StringFromGUID2, PropVariantClear, CLSIDFromString, CoUninitialize, CoTaskMemFree, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CreateBindCtx, CoInitialize, CoInitializeEx
setupapi.dll
SetupDiCreateDeviceInfoList, CM_Get_DevNode_Registry_PropertyW, CM_Get_Device_Interface_ListW, SetupDiOpenDeviceInterfaceW, CM_Get_Sibling, CM_Get_Device_ID_ListW, CM_Get_Device_ID_List_SizeW, CM_Get_Device_IDW, CM_Get_Child, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList, CM_Get_Parent, SetupDiGetDeviceRegistryPropertyW, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, CM_Get_Device_Interface_List_SizeW
shell32.dll
Shell_NotifyIconW, SHGetFolderLocation, SHGetPathFromIDListW, SHGetFolderPathW, SHGetDesktopFolder, SHGetMalloc, ShellExecuteW, SHGetSpecialFolderPathW, SHFileOperationW
shlwapi.dll
PathIsNetworkPathW, SHDeleteKeyW, PathIsDirectoryW, StrRetToStrW, PathStripToRootW
user32.dll
DispatchMessageW, TranslateMessage, GetMessageW, LoadStringW, SetFocus, PostMessageW, IsWindowEnabled, IsWindow, SendDlgItemMessageW, MessageBoxW, InsertMenuItemW, LoadImageW, GetSystemMetrics, LoadIconW, LoadCursorW, RegisterClassExW, CreateWindowExW, DefWindowProcW, GetCursorPos, GetMenuItemCount, SetMenuDefaultItem, TrackPopupMenu, DestroyMenu, KillTimer, SetTimer, EnableWindow, CharLowerW, GetActiveWindow, FindWindowW, RegisterDeviceNotificationW, UnregisterDeviceNotification, IsClipboardFormatAvailable, OpenClipboard, GetClipboardData, CloseClipboard, EmptyClipboard, SetClipboardData, GetDC, DestroyWindow, SendMessageW, SetWindowTextW, SetWindowPos, GetWindowLongW, SetWindowLongW, SetForegroundWindow, GetDesktopWindow, FillRect, GetClientRect, EndDialog, MoveWindow, ScreenToClient, GetWindowRect, GetDlgItem, DialogBoxParamW, SetDlgItemTextW, GetDlgItemTextW, GetKeyState, GetWindowThreadProcessId, GetLastActivePopup, PostQuitMessage, RegisterWindowMessageW, UnregisterClassW, GetSubMenu, ShowWindow, LoadMenuW
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW

PMBVolumeWatcher.exe

PMB by Sony Corporation (Signed)

Remove PMBVolumeWatcher.exe
Version:   2.0.02.13211
MD5:   88c7319b0d171537a59520fe4dd8c357
SHA1:   f714013acdc5229c53f027bebb62771eeeec6b81
SHA256:   ede64778648e8da5aa59b69f28c24f2b529d41859c38ee2fb6f5c4c857894e89

Overview

pmbvolumewatcher.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It configures an autoplay handler withing explorer.exe named SonyPMBImportPicturesOnArrival that will launch the program automatically. The file is digitally signed by Sony Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:pmbvolumewatcher.exe
Publisher:Sony Corporation
Product name:PMB
Description:Media Check Tool
Typical file path:C:\Program Files\sony\pmb\pmbvolumewatcher.exe
File version:2.0.02.13211
Product version:5.1.00.13211
Size:583.78 KB (597,792 bytes)
Certificate
Issued to:Sony Corporation
Authority (CA):VeriSign
Effective date:Tuesday, October 5, 2010
Expiration date:Saturday, November 5, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'PMBVolumeWatcher' → C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'SonyPMBImportPicturesOnArrival'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00093609%
0.028634%
Kernel CPU:0.00029323%
0.013761%
User CPU:0.00064286%
0.014873%
Kernel CPU time:780,005 ms/min
100,923,805ms/min
Memory
Private memory:6.23 MB
21.59 MB
Private (maximum):10.6 MB
Private (minimum):10.57 MB
Non-paged memory:6.23 MB
21.59 MB
Virtual memory:80.55 MB
140.96 MB
Virtual memory (peak):86.16 MB
169.69 MB
Working set:10.57 MB
18.61 MB
Working set (peak):11.08 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:138
600
GUI GDI count:10
103
GUI GDI peak:13
142
GUI USER count:7
49
GUI USER peak:9
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command line:"C:\Program Files\sony\pmb\pmbvolumewatcher.exe"
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 63.51%
Windows 7 Home Basic 14.86%
Windows 8 Pro 6.76%
Windows 7 Ultimate 5.41%
Windows 7 Professional 5.41%
Windows Vista Ultimate 4.05%

Distribution by countryDistribution by country

United States installs about 33.78% of PMB.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Sony 88.46%
Intel 7.69%
Dell 1.92%
Lenovo 1.92%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE