Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.1.7600.16385 (win7_rtm.090713-1255) 32.64%
6.1.7600.16385 (win7_rtm.090713-1255) 51.83%
6.1.7600.16385 (win7_rtm.090713-1255) 0.07%
6.0.6000.16386 (vista_rtm.061101-2205) 2.80%
6.0.6000.16386 (vista_rtm.061101-2205) 0.86%
6.0.6000.16386 (vista_rtm.061101-2205) 11.79%

Relationships

Parent processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
FreeSid, CheckTokenMembership, AllocateAndInitializeSid, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, RegCreateKeyExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetSecurityDescriptorDacl, SetEntriesInAclW, InitializeSecurityDescriptor, GetSecurityDescriptorDacl, RegDeleteKeyValueW, CreateWellKnownSid, DuplicateToken, GetTokenInformation, OpenProcessToken, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, ConvertStringSecurityDescriptorToSecurityDescriptorW, CloseTrace, StartTraceW, EnableTrace, ControlTraceW
kernel32.dll
GetLastError, GlobalLock, GlobalFree, GlobalReAlloc, GlobalUnlock, GlobalSize, GlobalAlloc, HeapFree, GetProcessHeap, HeapAlloc, SetLastError, InterlockedIncrement, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, Sleep, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, CloseHandle, WriteFile, GetFileSize, CreateFileW, ReleaseMutex, FormatMessageW, GetCurrentThreadId, lstrlenW, GetTimeFormatW, GetDateFormatW, WaitForSingleObject, ExpandEnvironmentStringsW, LoadLibraryW, OutputDebugStringA, IsDebuggerPresent, SetFilePointer, GetLocalTime, WideCharToMultiByte, LocalFree, SetErrorMode, DeleteFileW, GetDiskFreeSpaceExW, GetTempFileNameW, GetVolumeInformationW, DeviceIoControl, GetDriveTypeW, GetConsoleOutputCP, WriteConsoleW, GetConsoleMode, GetFileType, GetStdHandle, VerifyVersionInfoW, VerSetConditionMask, GetCurrentProcess, ReleaseSemaphore, SetEvent, SetThreadUILanguage, CreateSemaphoreW, WaitForMultipleObjects, SetConsoleCtrlHandler, ResetEvent, CreateEventW, GetVolumePathNamesForVolumeNameW, GetVolumeNameForVolumeMountPointW, DuplicateHandle, OpenProcess, FreeLibrary, HeapSetInformation, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, InterlockedExchange, LoadLibraryExW, GetVolumePathNameW, MoveFileExW, FindFirstFileW, FindNextFileW, FindClose, CreateDirectoryW, GetFileAttributesW, InitializeCriticalSection, CreateThread, InterlockedPopEntrySList, InitializeSListHead, RtlCaptureStackBackTrace, InterlockedPushEntrySList, GetModuleHandleW
msvcrt.dll
DllMain
ntdll.dll
NtWaitForSingleObject, NtFsControlFile, NtQueryVolumeInformationFile, RtlAllocateHeap, RtlFreeHeap, EtwTraceMessage, RtlNtStatusToDosError, RtlGetLastNtStatus, RtlSetThreadErrorMode
ole32.dll
CoCreateInstanceEx, CoInitializeEx, CoRegisterClassObject, ReleaseStgMedium, CoCreateGuid, CoTaskMemFree, CoTaskMemAlloc, StringFromCLSID, CoUninitialize, CoCreateInstance, CoDisconnectObject
sxshared.dll
SxTracerGetThreadContextRetail, SxTracerDebuggerBreak, SxTracerShouldTrackFailure
user32.dll
LoadStringW
virtdisk.dll
GetStorageDependencyInformation

defrag.exe

Windows Disk Defragmenter by Microsoft

Remove defrag.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   8fd0ec6eb52f9efe15b7a605c827932c
SHA1:   8dbf4ecae1bbad74c91fa37603353ecfdc47425e
SHA256:   62e449589e1f082e8de3fa4d775871e1c66a272e3bd1fe5cc33eeeb40351cd13
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is defrag.exe?

Disk Defragmenter is a utility in Microsoft Windows designed to increase access speed by rearranging files stored on a disk to occupy contiguous storage locations, a technique called defragmentation. Defragmenting a disk minimizes head travel, which reduces the time it takes to read files from and write files to the disk. Beginning with Windows XP, Disk Defragmenter also reduces system startup times.

About defrag.exe (from Microsoft)

Disk Defragmenter consolidates fragmented files and folders on your computer's hard disk, so that each occupies a single, contiguous space on the volume As a result, your system can gain access to y

DetailsDetails

File name:defrag.exe
Publisher:Microsoft Corp.
Product name:Windows Disk Defragmenter
Description:Disk Defragmenter Module
Typical file path:C:\Windows\System32\defrag.exe
Original name:Defrag.EXE.MUI
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:179 KB (183,296 bytes)
Digital DNA
PE subsystem:Windows Console
Entropy:7.282741
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'ManualDefrag' runs in the path '\Microsoft\Windows\Defrag\ManualDefrag'
  • The task 'ScheduledDefrag' runs weekly in the path '\Microsoft\Windows\Defrag\ScheduledDefrag'
  • Entry path '\Defragmentation'
  • Entry path '\Microsoft\Windows\Defrag\ManualDefrag'
  • Entry path '\Microsoft\Windows\Defrag\ScheduledDefrag'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00162338%
0.028634%
Kernel CPU:0.00135334%
0.013761%
User CPU:0.00027004%
0.014873%
Kernel CPU time:21 ms/min
100,923,805ms/min
CPU cycles:839,564/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:1.83 MB
21.59 MB
Private (maximum):4.84 MB
Private (minimum):2.1 MB
Non-paged memory:1.83 MB
21.59 MB
Virtual memory:26.09 MB
140.96 MB
Virtual memory (peak):27.03 MB
169.69 MB
Working set:2.21 MB
18.61 MB
Working set (peak):4.89 MB
37.95 MB
Page faults:1,574/min
2,039/min
I/O
I/O read transfer:856 Bytes/sec
1.02 MB/min
I/O read operations:2/sec
343/min
I/O other transfer:1.95 KB/sec
448.09 KB/min
I/O other operations:43/sec
1,671/min
Resource allocations
Threads:5
12
Handles:84
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • C:\Windows\System32\defrag.exe -c
  • "C:\Windows\System32\defrag.exe" -p 4d4 -s 00000000000005ec -b C:
  • "C:\Windows\System32\defrag.exe" -p 184 -s 00000000000003f0 -b C:
Owner:SYSTEM
Parent processes:

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 50.50%
Windows 7 Ultimate 26.50%
Windows 7 Professional 10.50%
Windows Vista Home Premium 7.50%
Windows 7 Home Basic 2.50%
Windows Vista Home Basic 1.00%
Windows Seven Black Edition 0.50%
Windows 7 Starter 0.50%
Windows 7 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 42.71% of Windows Disk Defragmenter.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 23.66%
ASUS 19.85%
Hewlett-Packard 19.08%
Acer 11.07%
Toshiba 9.16%
Lenovo 4.58%
Sony 3.05%
GIGABYTE 2.67%
Intel 2.29%
Samsung 1.91%
Alienware 0.76%
Gateway 0.76%
NEC 0.76%
Sahara 0.38%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE