Should I block it?

No, this file is 100% safe to run.

Additional versions

3.1.212.0	48.39%
3.1.206.0	16.13%
3.1.76.0	35.48%

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

admin_class_lib.dll

PSDHide

advapi32.dll

RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, SetSecurityDescriptorDacl, StartServiceW, QueryServiceStatusEx, InitializeSecurityDescriptor, RegFlushKey

kernel32.dll

InterlockedExchange, GetVersionExA, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetProcessHeap, HeapSize, HeapReAlloc, CloseHandle, Sleep, lstrlenW, lstrcpyW, LoadLibraryW, GetLastError, GetProcAddress, FreeLibrary, ResumeThread, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, CreateEventW, ResetEvent, WaitForSingleObject, CreateThread, SetThreadPriority, RaiseException, DeleteCriticalSection, GetCurrentThreadId, CreateMutexW, ReleaseMutex, ExitProcess, FindFirstFileW, RemoveDirectoryW, DeleteFileW, FindNextFileW, FindClose, GetPrivateProfileStringW, MoveFileW, GetPriorityClass, InterlockedCompareExchange, CreateProcessW, GetUserDefaultUILanguage, RegisterApplicationRestart, GetModuleHandleW, FindResourceW, SizeofResource, LockResource, LoadResource, FindResourceExW, VirtualQuery, HeapFree, HeapAlloc, HeapDestroy, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoW, GetCurrentProcess

msvcp80.dll

DllMain

msvcr80.dll

DllMain

mwlop.dll

HTOP_GetStatus, IsExpire, IsReminder

mwlrecordui.dll

RecordUIclicks, UploadandDownload

psdutil.dll

HTPSD_DiskCheckLockable, HTPSD_QueryDriveMediaIn

shell32.dll

Shell_NotifyIconW, ShellExecuteW, SHFileOperationW, SHGetSpecialFolderPathW

shlwapi.dll

PathAppendW, PathFileExistsW

sysenv.dll

HT_QueryCCPSDStatus, HT_GetTempFolderPathW, HT_CheckOtherAPsRunning, HT_IsGuestsGroup, GetWinFamily, HT_ReadINIFileW, HT_UpdateCCPSDStatus, HT_WriteINIFileW

user32.dll

SetWindowLongW, TrackPopupMenuEx, SetForegroundWindow, GetSubMenu, LoadMenuW, DestroyMenu, ModifyMenuW, GetWindowLongW, LoadIconW, TranslateMessage, ShowWindow, CreateWindowExW, RegisterClassExW, LoadCursorW, DefWindowProcW, DispatchMessageW, GetMessageW, SetTimer, RegisterWindowMessageW, PostMessageW, PostQuitMessage, UnregisterClassA, FindWindowW, PostThreadMessageW, KillTimer, GetCursorPos, wsprintfW

wtsapi32.dll

WTSUnRegisterSessionNotification, WTSRegisterSessionNotification

mwldaemon.exe

MyWinLocker by EGIS TECHNOLOGY INC. (Signed)

Remove mwldaemon.exe

Version:	3.1.212.0
MD5:	0d6972a795995f07b6d78ca7724744fb
SHA1:	43d9fcc3857bc598883484d9063ccaa3eb50c2b2
SHA256:	aa5e21f2957cca7fbb0a2d006054e43be4992bdebaac26a217c741ff36276b1b

What is mwldaemon.exe?

MyWinLocker is a file and folder encryption application that protects files and folders by either encrypting them or moving them to a safe, an invisible virtual disk which is password protected. MyWinLocker uses AES encryption to secure protected files. The application adds a menu to the right click menu, so you can right-click any file and select to encrypt it or move it to the safe.

About mwldaemon.exe (from EGIS TECHNOLOGY INC.)

“MyWinLocker lets you take control of your privacy. Hidden files will never get any attention. Using the new Yo-Safe to store your important or sensitive data is just so easy. The advanced encryption t”

Details

File name:	mwldaemon.exe
Publisher:	Egis Technology Inc.
Product name:	MyWinLocker
Typical file path:	C:\Program Files\egistec mywinlocker\x86\mwldaemon.exe
Original name:	mwlDaemo.exe
File version:	3.1.212.0
Size:	341.36 KB (349,552 bytes)
Certificate
Issued to:	EGIS TECHNOLOGY INC.
Authority (CA):	VeriSign
Effective date:	Thursday, December 31, 2009
Expiration date:	Sunday, January 2, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'mwlDaemon' → C:\Program Files\EgisTec MyWinLocker\x86\mwlDaemon.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00207006%	0.028634%
Kernel CPU:	0.00160087%	0.013761%
User CPU:	0.00046918%	0.014873%
Kernel CPU time:	575,661 ms/min	100,923,805ms/min
CPU cycles:	361,272/sec	17,470,203/sec
Context switches:	2/sec	284/sec
Memory
Private memory:	5.02 MB	21.59 MB
Private (maximum):	12.43 MB
Private (minimum):	1.57 MB
Non-paged memory:	5.02 MB	21.59 MB
Virtual memory:	99.3 MB	140.96 MB
Virtual memory (peak):	104.96 MB	169.69 MB
Working set:	4.16 MB	18.61 MB
Working set (peak):	14.61 MB	37.95 MB
Page faults:	84,807/min	2,039/min
I/O
I/O read transfer:	5.69 KB/sec	1.02 MB/min
I/O read operations:	4/sec	343/min
I/O write transfer:	68.73 KB/sec	274.99 KB/min
I/O write operations:	9/sec	227/min
I/O other transfer:	12.69 KB/sec	448.09 KB/min
I/O other operations:	98/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	214	600
GUI GDI count:	21	103
GUI GDI peak:	28	142
GUI USER count:	16	49
GUI USER peak:	21	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\egistec mywinlocker\x86\mwldaemon.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	87.10%
Windows 7 Starter	9.68%
Windows 7 Ultimate	3.23%

Distribution by country

United States installs about 38.71% of MyWinLocker.

Distribution by PC manufacturer

PC Manufacturer	distribution
Acer	100.00%

Remove Adware and Spyware Programs, FREE Download!