Should I block it?

No, this file is 100% safe to run.

Additional versions

2001.12.9330.0 (winmain_win8rc.120518-1423)	0.08%
2001.12.9330.0 (winmain_win8rc.120518-1423)	0.08%
2001.12.9180.0 (winmain_win8beta.120217-1520)	0.04%
2001.12.9032.0 (winmain_win8m3.110823-1455)	0.08%
2001.12.8530.16385 (win7_rtm.090713-1255)	20.77%
2001.12.8530.16385 (win7_rtm.090713-1255)	36.77%
2001.12.8530.16385 (win7_rtm.090713-1255)	0.04%
2001.12.6930.16386 (vista_rtm.061101-2205)	5.58%
2001.12.6930.16386 (vista_rtm.061101-2205)	1.22%
2001.12.6930.16386 (vista_rtm.061101-2205)	0.37%
2001.12.4720.4340 (srv03_sp2_gdr.080723-1210)	0.04%
2001.12.4720.4340 (srv03_sp2_gdr.080723-1210)	0.04%
2001.12.4720.3959 (srv03_sp2_rtm.070216-1710)	0.04%
2001.12.4414.700	10.22%
2001.12.4414.700	0.33%
2001.12.4414.700	0.29%
2001.12.4414.700	0.41%
2001.12.4414.700	0.12%
2001.12.4414.700	0.45%
2001.12.4414.700	0.04%
2001.12.4414.700	0.08%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
View more
2001.12.4414.700	0.04%
2001.12.4414.700	0.33%
2001.12.4414.700	0.04%
2001.12.4414.700	0.12%
2001.12.4414.700	0.04%
2001.12.4414.700	0.16%
2001.12.4414.700	0.24%
2001.12.4414.700	0.04%
2001.12.4414.700	0.24%
2001.12.4414.700	0.08%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.08%
2001.12.4414.700	0.04%
2001.12.4414.700	0.08%
2001.12.4414.700	0.04%
2001.12.4414.700	0.08%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.700	0.04%
2001.12.4414.258	2.12%
2001.12.4414.258	0.04%
2001.12.4414.258	0.08%
13 other versions

PE file structure

Show functions

Import table

advapi32.dll

RegSetValueExW, RegQueryValueExW, OpenProcessToken, GetTokenInformation, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegCloseKey, RegOpenKeyExA, RegQueryValueExA, RegOpenKeyExW

api-ms-win-core-com-l1-1-0.dll

CoInitializeEx, CoUninitialize, CoCreateInstance, StringFromGUID2, CoGetObjectContext

api-ms-win-core-debug-l1-1-1.dll

IsDebuggerPresent, DebugBreak, OutputDebugStringW

api-ms-win-core-delayload-l1-1-1.dll

DelayLoadFailureHook, ResolveDelayLoadedAPI

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter

api-ms-win-core-file-l1-2-0.dll

DeleteFileW, SetFileAttributesW, FindNextFileW, GetFullPathNameW, FindFirstFileW, CreateFileW, CreateDirectoryW, FindClose

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalAlloc, LocalFree

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedCompareExchange, InterlockedExchange

api-ms-win-core-libraryloader-l1-1-1.dll

FreeLibrary, LoadStringW, GetModuleFileNameW, LockResource, GetModuleHandleA, FindResourceExW, GetProcAddress, GetModuleHandleW, LoadLibraryExW, LoadResource

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW

api-ms-win-core-processenvironment-l1-2-0.dll

GetCommandLineW, ExpandEnvironmentStringsW

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentThread, TlsFree, TlsGetValue, CreateProcessW, TlsAlloc, GetStartupInfoW, TerminateProcess, GetCurrentProcess, GetExitCodeProcess, GetCurrentThreadId, OpenProcessToken, GetThreadContext, GetCurrentProcessId

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW

api-ms-win-core-registry-l1-1-0.dll

RegSetValueExW, RegQueryValueExA, RegQueryValueExW, RegOpenKeyExA, RegOpenKeyExW, RegCloseKey

api-ms-win-core-synch-l1-2-0.dll

LeaveCriticalSection, CreateEventA, InitializeCriticalSectionAndSpinCount, ResetEvent, WaitForSingleObjectEx, SetEvent, DeleteCriticalSection, EnterCriticalSection, WaitForSingleObject, Sleep

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetLocalTime, GetSystemWindowsDirectoryA, GetSystemTimeAsFileTime

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW

api-ms-win-security-base-l1-2-0.dll

GetTokenInformation

kernel32.dll

GetCommandLineW, UnregisterWait, TlsFree, TlsAlloc, TlsGetValue, LocalAlloc, LocalFree, IsDebuggerPresent, GetCurrentThread, GetThreadContext, DebugBreak, ExpandEnvironmentStringsW, CreateDirectoryW, CreateProcessW, GetExitCodeProcess, FindFirstFileW, FindNextFileW, SetFileAttributesW, DeleteFileW, FindClose, GetModuleHandleW, FindResourceW, LoadResource, LockResource, FormatMessageW, GetModuleFileNameW, LoadLibraryExW, DeleteCriticalSection, WaitForSingleObject, LeaveCriticalSection, EnterCriticalSection, InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, CreateEventA, CloseHandle, WaitForSingleObjectEx, SetEvent, ResetEvent, FreeLibrary, CreateFileW, GetProcAddress, LoadLibraryA, GetFullPathNameW, GetLastError, QueryFullProcessImageNameW, GetLocalTime, QueueUserWorkItem, OutputDebugStringW, GetSystemWindowsDirectoryA, InitializeCriticalSectionAndSpinCount, UnregisterWaitEx

msvcrt.dll

DllMain

ntdll.dll

RtlCaptureContext, RtlReportException

ole32.dll

CoGetObjectContext, StringFromGUID2, CoInitializeEx, CoCreateInstance, CoUninitialize

user32.dll

EndDialog, SetDlgItemTextW, CloseWindowStation, CloseDesktop, GetProcessWindowStation, GetThreadDesktop, OpenWindowStationW, DialogBoxParamW, OpenDesktopW, SetThreadDesktop, GetDesktopWindow, GetWindowRect, GetClientRect, MapWindowPoints, SetWindowPos, LoadStringW, SetProcessWindowStation

version.dll

VerQueryValueW

msdtc.exe

Microsoft Distributed Transaction Coordinator Service by Microsoft

Remove msdtc.exe

Version:	2001.12.10530.16384 (winblue_rtm.130821-1623)
MD5:	18919845004a5a05d69cf5eae19d0e68
SHA1:	4af2dd828e3adc469dbe1a3513d5dddb142ff396

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is msdtc.exe?

The Distributed Transaction Coordinator (MSDTC) service is a component of modern versions of Microsoft Windows that is responsible for coordinating transactions that span multiple resource managers, such as databases, message queues, and file systems.

Overview

msdtc.exe runs as a service under the name Coordenador de transações distribuídas (MSDTC) within the local user context. .

Details

File name:	msdtc.exe
Publisher:	Microsoft Corporation
Product name:	Microsoft Distributed Transaction Coordinator Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\msdtc.exe
Original name:	MSDTC.EXE.MUI
File version:	2001.12.10530.16384 (winblue_rtm.130821-1623)
Product version:	6.3.9600.16384
Size:	133 KB (136,192 bytes)
Build date:	8/22/2013 7:39 AM
Digital DNA
PE subsystem:	Windows GUI
Entropy:	6.060933
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'MSDTC' (Coordenador de transações distribuídas)
MSDTC
'MSDTC' (Distributed Transaction Coordinator)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	32.50%
Windows 8.1	17.50%
Windows 7 Ultimate	14.00%
Windows 8.1 Pro	7.50%
Windows 8.1 Single Language	7.00%
Windows 7 Professional	6.00%
Windows 8	3.50%
Windows 8 Pro	3.00%
Windows 8 Single Language	2.50%
Windows 8.1 Pro with Media Center	2.00%
Windows 7 Home Basic	1.50%
Windows 8 Enterprise N	1.00%
Windows 8.1 N	0.50%
Windows Seven Black Edition	0.50%
Windows 8.1 Enterprise Evaluation	0.50%
Windows 8 Enterprise	0.50%

Distribution by country

United States installs about 45.23% of Microsoft Distributed Transaction Coordinator Service.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	18.82%
ASUS	18.04%
Hewlett-Packard	16.86%
Acer	14.51%
Toshiba	10.98%
Lenovo	9.41%
Sony	3.92%
Intel	2.35%
Samsung	1.57%
GIGABYTE	1.57%
Alienware	1.18%
Medion	0.78%

Remove Adware and Spyware Programs, FREE Download!