HrfsCore.exe
Trend Micro SafeSync by Trend Micro (Signed)
| Version: | 5.1.0.1358 |
| MD5: | 93672387ac60c4b3c9d1b1536f31af9d |
| SHA1: | a3aed1c98a2ce54bfa97e541cc210a47f676b010 |
| SHA256: | 7374be256d0d85886a7fa335d8903cc06562c0a1a1521d9d569b647160bcfbae |
What is HrfsCore.exe?
Online Storage Sync Service is part of Trend Micro Anti-Malware Solution Platform which provides antivirus and and antimalware detection and removal.
Overview
hrfscore.exe runs as a service under the name OnlineStorageService with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Trend Micro SafeSync published by Trend Micro Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Trend Micro which was issued by the VeriSign certificate authority (CA).
Details
| File name: | hrfscore.exe |
| Publisher: | Trend Micro Inc. |
| Product name: | Trend Micro SafeSync |
| Description: | Online Storage Sync Service |
| Typical file path: | C:\Program Files\trend micro safesync\hrfscore.exe |
| File version: | 5.1.0.1358 |
| Size: | 7.6 MB (7,968,056 bytes) |
| Certificate |
| Issued to: | Trend Micro |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, January 30, 2011 |
| Expiration date: | Thursday, February 16, 2012 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following program will install this file
“Trend Micro™ SafeSync™ works where you want it to, backing up and syncing files between your computers and mobile devices. You can stream music and video to your smartphone, share photos with friends on your tablet, or just play it safe and keep secure backups of your most important memories on all your devices. Online and offline, 24x7 access from your computer, smartphone, or SafeSync.com. Drop files into the SafeSync Folder to get th...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
[TCP] 150.70.178.196:443
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00000593% | |
| Kernel CPU: | 0.00000455% | |
| User CPU: | 0.00000139% | |
| Kernel CPU time: | 83,211 ms/min | |
| Context switches: | 4/sec | |
| Memory |
| Private memory: | 8.98 MB | |
| Private (maximum): | 11.38 MB | |
| Private (minimum): | 760 KB | |
| Non-paged memory: | 8.98 MB | |
| Virtual memory: | 91.5 MB | |
| Virtual memory (peak): | 96.5 MB | |
| Working set: | 8.95 MB | |
| Working set (peak): | 18.15 MB | |
| Resource allocations |
| Threads: | 15 | |
| Handles: | 273 | |
Process properties
Threads
Averages
| sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft) |
| Total CPU: | 0.00152389% | |
| Kernel CPU: | 0.00024858% | |
| User CPU: | 0.00127531% | |
| CPU cycles: | 76,876/sec | |
| Memory: | 124 KB | |
| hrfscore.exe (main module) |
| Total CPU: | 0.00138561% | |
| Kernel CPU: | 0.00088917% | |
| User CPU: | 0.00049644% | |
| CPU cycles: | 37,491/sec | |
| Memory: | 7.65 MB | |
| ntdll.dll |
| Total CPU: | 0.00001081% | |
| Kernel CPU: | 0.00000946% | |
| User CPU: | 0.00000135% | |
| CPU cycles: | 10,191/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by country
United States installs about 50.00% of Trend Micro SafeSync.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Alienware |
25.00% |
|
| Hewlett-Packard |
25.00% |
|
