Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

2.0.10	2.44%
2.0.6	12.20%
2.0.5	2.44%
2.0.4	31.71%
2.0.3	48.78%
2.0.2	2.44%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

sendoriup.exe (Sendori Upgrade Assistant by Sendori)

Related files

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegCloseKey, AdjustTokenPrivileges, DuplicateTokenEx, RegOpenKeyExA, LookupPrivilegeValueA, SetTokenInformation, RegQueryValueExA, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, OpenProcessToken, CreateProcessAsUserA, OpenSCManagerA, QueryServiceStatusEx, StartServiceA, CloseServiceHandle, OpenServiceA

dynlib.dll

IssueUpdate, LogToFile, Signal, GetRCLOE, GetIP, StopUpdater, GenerateHostname, LogAndSignal, GetTimestamp, SetFresh, _GetProxy, SetActive, SimpleXORDecipher, IsBehindProxy, SendReporting, Host_GetDelString, SetAppStatus, _SetProxy, IsValidIP, LoadReportingLevels

kernel32.dll

LoadLibraryW, RtlUnwind, SetStdHandle, WriteConsoleW, FlushFileBuffers, GetCurrentProcessId, CloseHandle, OutputDebugStringA, CreateToolhelp32Snapshot, WTSGetActiveConsoleSessionId, WaitForMultipleObjects, SetProcessWorkingSetSize, WritePrivateProfileStringA, ProcessIdToSessionId, Process32Next, GetPrivateProfileStringA, lstrcmpiA, GetLastError, CreateEventA, Sleep, GetPrivateProfileIntA, OpenProcess, SetEvent, Process32First, GetCurrentProcess, CreateFileW, HeapReAlloc, GetConsoleMode, GetConsoleCP, SetFilePointer, EncodePointer, DecodePointer, GetCommandLineA, HeapSetInformation, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetModuleHandleW, SetLastError, GetCurrentThreadId, GetProcAddress, WideCharToMultiByte, LCMapStringW, MultiByteToWideChar, HeapAlloc, HeapFree, IsProcessorFeaturePresent, HeapSize, ExitProcess, EnterCriticalSection, LeaveCriticalSection, WriteFile, GetStdHandle, GetModuleFileNameW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, HeapCreate, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetStringTypeW

shell32.dll

SHGetFolderPathA

shlwapi.dll

StrTrimA, PathAddBackslashA, PathAppendA

user32.dll

GetWindowLongA, FindWindowExA

userenv.dll

CreateEnvironmentBlock

wtsapi32.dll

WTSQueryUserToken

SendoriSvc.exe

Sendori Service by Sendori (Signed)

Remove SendoriSvc.exe

Version:	2.0.6
MD5:	dcebadab68650a3ec48fdc102a6d67e8
SHA1:	a7449fe9cccc1d6d2dafb1c6a38374a8cf90a918
SHA256:	89bb92f89750c8142a7c1e3d79cead3b29f7a773b5c6342c492bc9b8d0d0acef

What is SendoriSvc.exe?

This is the Service (Sendoriv1 or Sendori Interceptor) part of Sendori that runs when Windows starts regardless if Senori is active. Sendori.com provides a in the domain space. Rather than parking domain names on a page with search listings the company’s service partners domains with advertisers in specific sectors. Sendori apparently has applied to patent their technology. Advertisers looking for traffic on a given topic can buy direct navigation traffic from Sendori’s domain name clients.

About SendoriSvc.exe (from Sendori)

“Sendori is a cloud-based web service that helps users navigate faster to their favorite websites. It is also a web filtering service that protects users from accessing malicious and phishing sites as ”

Details

File name:	sendorisvc.exe
Publisher:	Sendori, Inc.
Product name:	Sendori Service
Typical file path:	C:\Program Files\sendori\sendorisvc.exe
File version:	2.0.6
Size:	115.85 KB (118,632 bytes)
Certificate
Issued to:	Sendori
Authority (CA):	VeriSign
Expiration date:	Thursday, April 4, 2013
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Sendori

Sendori, Inc.

79% remove

Sendori is a web browser plugin and layered service provider filter that is typically installed through a bundled installation. The plugin is designed to intercept Internet web traffic and provided modified results to various requests. Such results include DNS error redirection to sponsored affiliate advertisers. Sendori provides DNS redirection where advertisers can purchase navigation traffic from Sendori's domain name clients. When a...

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

Application Sendori

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00024173%	0.028634%
Kernel CPU:	0.00006908%	0.013761%
User CPU:	0.00017265%	0.014873%
Kernel CPU time:	27,737 ms/min	100,923,805ms/min
CPU cycles:	318,423/sec	17,470,203/sec
Memory
Private memory:	6.55 MB	21.59 MB
Private (maximum):	7.68 MB
Private (minimum):	2.84 MB
Non-paged memory:	6.55 MB	21.59 MB
Virtual memory:	63.31 MB	140.96 MB
Virtual memory (peak):	71.99 MB	169.69 MB
Working set:	6.45 MB	18.61 MB
Working set (peak):	9.21 MB	37.95 MB
Page faults:	178,757/min	2,039/min
I/O
I/O read transfer:	5.2 KB/sec	1.02 MB/min
I/O read operations:	2/sec	343/min
I/O write transfer:	468 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	467 Bytes/sec	448.09 KB/min
I/O other operations:	44/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	223	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\sendori\sendorisvc.exe"
Owner:	SYSTEM
Windows Service
Display name:	Application Sendori
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads