Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Child process
tor.exe
| MD5: | 0411910dc4d4db20011b0e07c1d19808 |
| SHA1: | 63f85f0476accac10377f7ac8a84bc8dfc91993f |
Overview
tor.exe runs as a service under the name Tor Win32 Service (tor) within the local user context. It is installed with a couple of know programs including Polipo 1.0.4.1 published by Juliusz Chroboczek and Saver2 published by ZZJ.
Details
| File name: | tor.exe |
| Typical file path: | C:\Program Files\vidalia bundle\tor\tor.exe |
| Size: | 3.44 MB (3,610,126 bytes) |
| Build date: | 1/18/2014 11:37 AM |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Polipo is a lightweight forwarding and caching web proxy server. Polipo is HTTP 1.1-compliant, supports IPv4, IPv6, traffic filtering and privacy-enhancement. To minimize latency, Polipo both pipelines multiple resource requests and multiplexes multiple transactions onto the same TCP/IP connection. Polipo can be configured to use on-disk cache and serve cached content when offline, perform various forms of content filtering and serve as...
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'tor' (Tor Win32 Service)
- tor
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00001281% | |
| Kernel CPU: | 0.00000320% | |
| User CPU: | 0.00000961% | |
| Kernel CPU time: | 3,803,125 ms/min | |
| Memory |
| Private memory: | 19.84 MB | |
| Private (maximum): | 31.84 MB | |
| Private (minimum): | 30.27 MB | |
| Non-paged memory: | 19.84 MB | |
| Virtual memory: | 114.17 MB | |
| Virtual memory (peak): | 132.83 MB | |
| Working set: | 31.7 MB | |
| Working set (peak): | 36.01 MB | |
| Resource allocations |
| Threads: | 1 | |
| Handles: | 143 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 9 | |
| GUI USER count: | 1 | |
| GUI USER peak: | 2 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\vidalia relay bundle\tor\tor.exe" -f C:\users\user\appdata\local\tor\torrc datadirectory C:/users/stefan/appdata/local/tor controlport 9051 __owningcontrollerprocess 8964 hashedcontrolpassword 16:d467a231f98306da603cac5b80e7925f90a38871c0ae18d9650e3b5c6d |
| Owner: | User |
| Windows Service |
| Service name: | tor |
| Display name: | Tor Win32 Service |
| Description: | “Provides an anonymous Internet communication system” |
| Type: | Win32OwnProcess |
| Parent process: | vidalia.exe (Vidalia by vidalia-project.net) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
42.86% |
|
| Windows 7 Home Premium |
28.57% |
|
| Windows 8.1 Pro |
7.14% |
|
| Microsoft Windows XP |
7.14% |
|
| Windows 7 Professional |
7.14% |
|
| Windows Server 2012 Standard Evaluation |
7.14% |
|
Distribution by country
Ireland installs about 14.29% of tor.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
28.57% |
|
| Lenovo |
28.57% |
|
| Acer |
14.29% |
|
| Hewlett-Packard |
14.29% |
|
| American Megatrends |
14.29% |
|
