Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

9.0.2 build-1031769 4.00%
9.0.1 build-894247 36.00%
9.0.0 build-812388 24.00%
8.0.0 build-471780 4.00%
8.0.0 build-471780 4.00%
7.1.4 build-385536 4.00%
7.0.1 build-227600 4.00%
7.0.0 build-203739 12.00%
4.5.2 build-8848 4.00%
10.0.0 build-1295980 4.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenServiceW, ReportEventW, RegSetValueExW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegOpenKeyExW, RegQueryValueExW, StartServiceCtrlDispatcherA, RegCloseKey, RegisterServiceCtrlHandlerA, RegisterEventSourceA, DeregisterEventSource, SetServiceStatus, CloseServiceHandle, OpenSCManagerW
dnsapi.dll
DnsFree, DnsQuery_A
iphlpapi.dll
CancelIPChangeNotify, NotifyAddrChange, GetAdaptersAddresses, GetAdaptersInfo
kernel32.dll
LoadLibraryA, InitializeCriticalSectionAndSpinCount, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, GetLocaleInfoA, WideCharToMultiByte, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW, GetTimeZoneInformation, CompareStringA, CompareStringW, TerminateThread, WaitForSingleObject, CreateThread, ReadFile, CloseHandle, DeviceIoControl, CreateEventA, ResetEvent, WaitForMultipleObjects, SetEvent, InitializeCriticalSection, CreatePipe, RaiseException, PeekNamedPipe, GetFileInformationByHandle, GetProcessHeap, LeaveCriticalSection, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, HeapFree, VirtualFree, HeapCreate, InterlockedDecrement, GetLastError, GetCurrentThreadId, SetEndOfFile, FileTimeToLocalFileTime, FileTimeToSystemTime, SetLastError, InterlockedIncrement, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, DeleteCriticalSection, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameW, GetModuleFileNameA, GetStdHandle, WriteFile, ExitProcess, GetProcAddress, Sleep, GetModuleHandleW, IsDebuggerPresent, GetCurrentProcess, UnhandledExceptionFilter, TerminateProcess, GetCurrentDirectoryA, EnterCriticalSection, SetUnhandledExceptionFilter, SetEnvironmentVariableA, GetModuleHandleA, SetFilePointer, GetConsoleCP, GetConsoleMode, FlushFileBuffers, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, GetFullPathNameW, FindFirstFileW, GetDriveTypeW, CreateFileW, DeleteFileW, CreateDirectoryW, GetFileAttributesW, LocalFree, FormatMessageW, OutputDebugStringW, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, GetFileAttributesA, GetVersionExA, FindClose, VirtualQuery, GetDriveTypeA, InterlockedCompareExchange, GetStartupInfoW
shfolder.dll
SHGetFolderPathW
user32.dll
CreateWindowExW, DispatchMessageA, GetMessageA, PostMessageA, MsgWaitForMultipleObjects, PeekMessageA, DestroyWindow, PostThreadMessageA
ws2_32.dll
WSAIoctl, WSACreateEvent

vmnat.exe

VMware Workstation by VMware (Signed)

Remove vmnat.exe
Version:   9.0.0 build-812388
MD5:   f1d29d9c5db9c144769f5cd7212be555
SHA1:   26180f7f8c703bc590fdbecb429b0030d228bf76
SHA256:   7fb533f79df5af8650d15e19c2b84e75ba2384af82770dfdaa062a66dc277fd2

What is vmnat.exe?

VMware NAT Service is part of VMware Workstation, a hypervisor that enables users to set up multiple virtual machines (VMs) and use them simultaneously along with the actual machine. Each virtual machine can execute its own operating system, such as Windows. VMware Workstation allows one physical machine to run multiple operating systems simultaneously.

About vmnat.exe (from VMware)

VMware Workstation provides a seamless way to access all of the virtual machines you need, regardless of where they are running. Remotely connect to virtual machines running on VMware vSphere, ESXi or

DetailsDetails

File name:vmnat.exe
Publisher:VMware, Inc.
Product name:VMware Workstation
Description:VMware NAT Service
Typical file path:C:\windows\syswow64\vmnat.exe
File version:9.0.0 build-812388
Size:425.65 KB (435,864 bytes)
Certificate
Issued to:VMware
Authority (CA):VeriSign
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
VMware, Inc.
4% remove
VMware Workstation is a hypervisor that runs on x64 computers; it enables users to set up multiple virtual machines (VMs) and use them simultaneously along with the actual machine. Each virtual machine can execute its own operating system, such as Microsoft Windows, Linux or BSD variants. As such, VMware Workstation allows one physical machine to run multiple operating systems simultaneously. VMware Workstation supports bridging existin...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'VMware NAT Service'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00083086%
0.028634%
Kernel CPU:0.00049071%
0.013761%
User CPU:0.00034015%
0.014873%
Kernel CPU time:121 ms/min
100,923,805ms/min
CPU cycles:18,923/sec
17,470,203/sec
Context switches:1/sec
284/sec
Memory
Private memory:1.27 MB
21.59 MB
Private (maximum):3.69 MB
Private (minimum):2.46 MB
Non-paged memory:1.27 MB
21.59 MB
Virtual memory:34.57 MB
140.96 MB
Virtual memory (peak):36.25 MB
169.69 MB
Working set:2.45 MB
18.61 MB
Working set (peak):3.71 MB
37.95 MB
Page faults:1,063/min
2,039/min
I/O
I/O read transfer:223 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:166 Bytes/sec
448.09 KB/min
I/O other operations:8/sec
1,671/min
Resource allocations
Threads:6
12
Handles:76
600
GUI GDI count:4
103
GUI USER count:4
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command lines:
  • C:\Windows\System32\vmnat.exe
  • C:\windows\syswow64\vmnat.exe
Owner:SYSTEM
Windows Service
Service name:VMware NAT Service
Description:“Network address translation for virtual networks.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 29.17%
Windows 7 Ultimate 16.67%
Windows 8 Pro 12.50%
Windows 7 Professional 12.50%
Windows 7 Home Basic 8.33%
Microsoft Windows XP 8.33%
Windows Vista Home Premium 4.17%
Windows 8 Pro with Media Center 4.17%
Windows 8 Enterprise 4.17%

Distribution by countryDistribution by country

United States installs about 25.00% of VMware Workstation.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 62.50%
Toshiba 12.50%
Acer 12.50%
Hewlett-Packard 6.25%
GIGABYTE 6.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE