Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	6.09%
6.2.9200.16384 (win8_rtm.120725-1247)	15.65%
6.2.9200.16384 (win8_rtm.120725-1247)	4.35%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.87%
6.1.7600.16385 (win7_rtm.090713-1255)	24.35%
6.1.7600.16385 (win7_rtm.090713-1255)	31.30%
6.0.6000.16386 (vista_rtm.061101-2205)	10.43%
6.0.6000.16386 (vista_rtm.061101-2205)	0.87%
5.1.2600.5512 (xpsp.080413-2105)	5.22%
5.1.2600.5512 (xpsp.080413-2105)	0.87%

Relationships

Parent processes

Related files

PE file structure

Show functions

Import table

gdi32.dll

GetStockObject, GetClipBox

kernel32.dll

HeapSetInformation, GetModuleHandleW, GetCurrentProcess, TerminateProcess, GetCommandLineA, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange, GetSystemTimeAsFileTime, GetVersionExW, UnhandledExceptionFilter, GetCommandLineW, lstrlenW

msvcrt.dll

DllMain

user32.dll

TranslateMessage, GetMessageW, SetProcessDPIAware, PostQuitMessage, DefWindowProcW, PostMessageW, SetCursor, CreateWindowExW, DispatchMessageW, GetSystemMetrics, IsRectEmpty, ReleaseDC, GetDC, RegisterClassW, LoadCursorW, GetActiveWindow, LoadStringW, GetCursorPos

scrnsave.scr

Blank Screen Saver by Microsoft

Remove scrnsave.scr

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	c93ea66ddc7c9bbc1d8d96505644bb6a
SHA1:	f386c320c0b3c1a134eefc59dbb9d18790e0fc95
SHA256:	b8f61d962c6c746c5c4300f33a273e598cba70f7345af48d08b92ab0d3b97496

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

scrnsave.scr executes as a process with the local user's privileges typically within the context of its parent shell32.dll (by Microsoft). This version is designed to run on Windows 7 and is compiled as a 64 bit program.

Details

File name:	scrnsave.scr
Publisher:	Microsoft Corporation
Product name:	Blank Screen Saver
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\scrnsave.scr
Original name:	scrnsave
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	11 KB (11,264 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.072066
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Screensaver

scrnsave.scr

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00003829%	0.028634%
Kernel CPU:	0.00003829%	0.013761%
Kernel CPU time:	16 ms/min	100,923,805ms/min
CPU cycles:	1,844/sec	17,470,203/sec
Memory
Private memory:	970 KB	21.59 MB
Private (maximum):	2.96 MB
Private (minimum):	2.94 MB
Non-paged memory:	970 KB	21.59 MB
Virtual memory:	39.71 MB	140.96 MB
Virtual memory (peak):	40.54 MB	169.69 MB
Working set:	2.96 MB	18.61 MB
Working set (peak):	2.97 MB	37.95 MB
Page faults:	768/min	2,039/min
I/O
I/O read transfer:	32 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	1	12
Handles:	22	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	2	49
GUI USER peak:	2	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command lines:	C:\Windows\System32\scrnsave.scr /p 66624 C:\Windows\System32\scrnsave.scr
Owner:	User
Parent processes:	shell32.dll (by Microsoft) winlogon.exe (Windows Logon Application by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	26.47%
Windows 7 Ultimate	22.55%
Windows 7 Professional	9.80%
Windows Vista Home Premium	9.80%
Windows 8 Pro	7.84%
Windows 8.1	4.90%
Windows 8 Enterprise	2.94%
Windows 8	2.94%
Windows 8 Pro with Media Center	2.94%
Windows 8.1 Pro	1.96%
Windows Vista Ultimate	1.96%
Windows 7 Starter	1.96%
Windows 8 Single Language	0.98%
Windows Vista Home Basic	0.98%
Microsoft Windows XP	0.98%
Windows 7 Enterprise	0.98%

Distribution by country

United States installs about 46.00% of Blank Screen Saver.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	22.50%
ASUS	22.50%
Dell	12.50%
Acer	12.50%
Toshiba	7.50%
Intel	5.00%
Lenovo	5.00%
GIGABYTE	3.75%
MSI	2.50%
Sony	2.50%
Gateway	2.50%
Alienware	1.25%

Remove Adware and Spyware Programs, FREE Download!