HrfsCore.exe
Trend Micro SafeSync by Trend Micro (Signed)
| Version: | 5.1.0.1522 |
| MD5: | aa83fe2df2678c61dcd0fe0c1ce2f01e |
| SHA1: | 2dc83939bf15a2db7873026aceab115872f3a614 |
What is HrfsCore.exe?
Online Storage Sync Service is part of Trend Micro Anti-Malware Solution Platform which provides antivirus and and antimalware detection and removal.
Overview
hrfscore.exe runs as a service under the name OnlineStorageService with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Trend Micro SafeSync published by Trend Micro Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Trend Micro which was issued by the VeriSign certificate authority (CA).
Details
| File name: | hrfscore.exe |
| Publisher: | Trend Micro Inc. |
| Product name: | Trend Micro SafeSync |
| Description: | Online Storage Sync Service |
| Typical file path: | C:\Program Files\trend micro safesync\hrfscore.exe |
| File version: | 5.1.0.1522 |
| Size: | 7.61 MB (7,974,688 bytes) |
| Build date: | 12/20/2013 9:27 AM |
| Certificate |
| Issued to: | Trend Micro |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, January 30, 2011 |
| Expiration date: | Thursday, February 16, 2012 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following program will install this file
“Trend Micro™ SafeSync™ works where you want it to, backing up and syncing files between your computers and mobile devices. You can stream music and video to your smartphone, share photos with friends on your tablet, or just play it safe and keep secure backups of your most important memories on all your devices. Online and offline, 24x7 access from your computer, smartphone, or SafeSync.com. Drop files into the SafeSync Folder to get th...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
[TCP] 150.70.226.236:443
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00017706% | |
| Kernel CPU: | 0.00017706% | |
| Kernel CPU time: | 56,145 ms/min | |
| Memory |
| Private memory: | 18.44 MB | |
| Private (maximum): | 16.02 MB | |
| Private (minimum): | 15.9 MB | |
| Non-paged memory: | 18.44 MB | |
| Virtual memory: | 110.34 MB | |
| Virtual memory (peak): | 114.48 MB | |
| Working set: | 16.03 MB | |
| Working set (peak): | 33.3 MB | |
| Resource allocations |
| Threads: | 19 | |
| Handles: | 308 | |
Process properties
Threads
Averages
| hrfscore.exe (main module) |
| Total CPU: | 0.02683270% | |
| Kernel CPU: | 0.02012436% | |
| User CPU: | 0.00670835% | |
| CPU cycles: | 724,213/sec | |
| Context switches: | 1/sec | |
| Memory: | 7.66 MB | |
| sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft) |
| Total CPU: | 0.02372067% | |
| Kernel CPU: | 0.00596843% | |
| User CPU: | 0.01775224% | |
| CPU cycles: | 1,066,790/sec | |
| Context switches: | 2/sec | |
| Memory: | 124 KB | |
| ntdll.dll |
| Total CPU: | 0.01031309% | |
| Kernel CPU: | 0.00393908% | |
| User CPU: | 0.00637402% | |
| CPU cycles: | 216,868/sec | |
| Context switches: | 2/sec | |
| Memory: | 1.66 MB | |
| mswsock.dll |
| Total CPU: | 0.00015320% | |
| Kernel CPU: | 0.00015320% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,211/sec | |
| Memory: | 340 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by country
United States installs about 50.00% of Trend Micro SafeSync.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Alienware |
25.00% |
|
| Hewlett-Packard |
25.00% |
|
