Should I block it?
No, this file is 100% safe to run.
Relationships
 PE file structure
|
Show functions |
Import table
kernel32.dll
SetEvent, HeapAlloc, GetProcessHeap, HeapFree, GetLastError, GetModuleFileNameW, GetProcAddress, GetModuleHandleW, LoadLibraryW, FreeLibrary, UnmapViewOfFile, ResetEvent, ReleaseMutex, WaitForSingleObject, CreateMutexW, CloseHandle, GetModuleHandleA, CreateEventW, lstrlenW, GetCommandLineW, ExitProcess
user32.dll
MessageBoxW, UnhookWindowsHookEx, SetWindowsHookExW
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
WinMover.exe
WinMover by Andreas Eliasson (EliasAE)
| Version: | 3.2.0.6 |
| MD5: | bf98af55736fb805fc208b89a09e0c4f |
| SHA1: | f9fddaaf67d8439ab3b1d29977f8a65e5874ab81 |
| SHA256: | 64f0983331c6923c935a82f8af4e01d2cc13cb4958d081d5d731fdbd7d10b6fd |
Overview
winmover.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program WinMover 3.2.0.6 published by Andreas Eliasson (EliasAE). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).
Details
| File name: | winmover.exe |
| Publisher: | Andreas Eliasson (EliasAE) |
| Product name: | WinMover |
| Description: | WinMover executable |
| Typical file path: | C:\Program Files\winmover\winmover.exe |
| File version: | 3.2.0.6 |
| Size: | 10 KB (10,240 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
|
Andreas Eliasson (EliasAE) |
|
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'WinMover' → "C:\Program Files\WinMover\WinMover.exe" /q
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00095377% | |
| Kernel CPU: | 0.00051357% | |
| User CPU: | 0.00044020% | |
| Kernel CPU time: | 701,008 ms/min | |
| Memory |
| Private memory: | 480 KB | |
| Private (maximum): | 1.82 MB | |
| Private (minimum): | 88 KB | |
| Non-paged memory: | 480 KB | |
| Virtual memory: | 16.29 MB | |
| Virtual memory (peak): | 31.85 MB | |
| Working set: | 112 KB | |
| Working set (peak): | 1.83 MB | |
| Resource allocations |
| Threads: | 1 | |
| Handles: | 24 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 2 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
100.00% |
|
