Should I block it?
60% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
(Note, Perion Network Ltd. publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW
kernel32.dll
Process32FirstW, Process32NextW, IsWow64Process, GetCurrentProcess, ResetEvent, GetTickCount, LoadLibraryW, GetProcAddress, FreeLibrary, SetLastError, CreateToolhelp32Snapshot, GetModuleHandleW, InterlockedCompareExchange, Sleep, InterlockedExchange, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, DecodePointer, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, CreateEventW, GetCurrentThreadId, SetEvent, CloseHandle, lstrlenA, MultiByteToWideChar, TerminateProcess, EncodePointer, HeapSetInformation
msvcp100.dll
DllMain
msvcr100.dll
DllMain
shell32.dll
ShellExecuteW
user32.dll
PostThreadMessageW, SetTimer, KillTimer, TranslateMessage, PeekMessageW, MsgWaitForMultipleObjectsEx, DispatchMessageW, CharLowerW, GetLastInputInfo
wrtc.exe
By Perion Network Ltd. (Signed)
| MD5: | 235d67fa61c1c37f5a1762c7ed434ddc |
| SHA1: | 20cfeddc436efc8eef2ffe0541d361b5afada3d8 |
| SHA256: | 7ba05a3018f19dd327c8f367e098efab42f1fb4e4cf52dd6d5c6e121dcd90025 |
What is wrtc.exe?
IncrediMail is an advertising-supported email client that offers the ability to add e-mail backgrounds, emoticons, ecards, sounds, animations, and 3D effects from directly within the client. It is compatible with Hotmail, Gmail, Yahoo! and AOL, and supports POP3 and IMAP mail protocols. The program also includes animated notifications, advanced message filtering, an automatic spell-checker, and font style preferences.
About wrtc.exe (from Perion Network Ltd.)
“Upgrade your online experience by searching the Internet from our convenient toolbar. In addition, you can listen to radio stations worldwide, access leading news and weather sites, and enjoy IncrediM”
Details
| File name: | wrtc.exe |
| Typical file path: | C:\Windows\System32\arfc\wrtc.exe |
| Size: | 21.3 KB (21,808 bytes) |
| Build date: | 5/27/2013 4:57 AM |
| Certificate |
| Issued to: | Perion Network Ltd. |
| Authority (CA): | VeriSign |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 10.0 |
| .NET CLR: | No |
More details
Behaviors
Windows firewall allowed program
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\ARFC\wrtc.exe'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00845305% | |
| Kernel CPU: | 0.00680615% | |
| User CPU: | 0.00164690% | |
| Kernel CPU time: | 11,086 ms/min | |
| CPU cycles: | 1,693,508/sec | |
| Memory |
| Private memory: | 1.12 MB | |
| Private (maximum): | 3.51 MB | |
| Private (minimum): | 3.4 MB | |
| Non-paged memory: | 1.12 MB | |
| Virtual memory: | 38.81 MB | |
| Virtual memory (peak): | 38.95 MB | |
| Working set: | 3.41 MB | |
| Working set (peak): | 3.64 MB | |
| Page faults: | 76,677,540/min | |
| I/O |
| I/O read transfer: | 72 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 9 Bytes/sec | |
| I/O other operations: | 2/sec | |
| Resource allocations |
| Threads: | 1 | |
| Handles: | 43 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 2 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
85.71% |
|
| Windows Vista Home Premium |
14.29% |
|
Distribution by country
Thailand installs about 14.29% of wrtc.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
50.00% |
|
| Hewlett-Packard |
50.00% |
|
