Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16507 (winblue_gdr.140108-1858) 18.75%
6.3.9600.16507 (winblue_gdr.140108-1858) 3.13%
6.3.9600.16384 (winblue_rtm.130821-1623) 56.25%
6.3.9600.16384 (winblue_rtm.130821-1623) 3.13%
6.3.9600.16384 (winblue_rtm.130821-1623) 15.63%
6.3.9600.16384 (winblue_rtm.130821-1623) 3.13%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
api-ms-win-core-com-l1-1-1.dll
CoRevokeClassObject, CoCreateFreeThreadedMarshaler, PropVariantClear, CoCreateInstance, CoCreateGuid, CoRegisterClassObject, CoInitializeSecurity, StringFromGUID2, CoGetMalloc, CoTaskMemFree, CoUninitialize, CoResumeClassObjects, CoTaskMemRealloc, CoTaskMemAlloc, CoInitializeEx, RoGetAgileReference
api-ms-win-core-datetime-l1-1-1.dll
GetDateFormatW, GetTimeFormatEx, GetDateFormatEx
api-ms-win-core-debug-l1-1-1.dll
DebugBreak, OutputDebugStringA
api-ms-win-core-errorhandling-l1-1-1.dll
UnhandledExceptionFilter, RaiseException, SetUnhandledExceptionFilter, SetLastError, SetErrorMode, GetLastError
api-ms-win-core-file-l1-2-1.dll
SetFileAttributesW, FindFirstFileExW, SetFilePointerEx, CreateFileW, GetLogicalDrives, GetDriveTypeW, GetFileSizeEx, FindClose, FindNextFileW, SetFileTime, FindFirstFileW, GetVolumeInformationW, GetDiskFreeSpaceExW, GetFileAttributesW, DeleteFileW, GetVolumePathNameW, SetFileInformationByHandle, ReadFile, GetFullPathNameW, WriteFile, CompareFileTime
api-ms-win-core-file-l2-1-1.dll
GetFileInformationByHandleEx
api-ms-win-core-handle-l1-1-0.dll
CloseHandle, DuplicateHandle
api-ms-win-core-heap-l1-2-0.dll
GetProcessHeap, HeapReAlloc, HeapAlloc, HeapFree
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-2-0.dll
FindResourceExW, SizeofResource, GetModuleFileNameW, FreeLibrary, GetProcAddress, GetModuleHandleW, GetModuleHandleA, LoadResource, FindStringOrdinal, LoadLibraryExW
api-ms-win-core-localization-l1-2-1.dll
GetLocaleInfoW, FormatMessageW
api-ms-win-core-path-l1-1-0.dll
PathCchStripPrefix, PathCchCanonicalizeEx, PathCchCombine, PathCchRemoveBackslash, PathCchAppend, PathCchSkipRoot
api-ms-win-core-processenvironment-l1-2-0.dll
GetCommandLineW, ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-2.dll
GetStartupInfoW, OpenProcessToken, GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess, TerminateProcess, OpenProcess, CreateProcessW
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegCloseKey, RegEnumValueW, RegNotifyChangeKeyValue, RegQueryInfoKeyW, RegEnumKeyExW, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegOpenKeyExA, RegDeleteValueW, RegGetValueW, RegCreateKeyExW
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte, MultiByteToWideChar, GetStringTypeW
api-ms-win-core-synch-l1-2-0.dll
InitializeCriticalSection, DeleteCriticalSection, SetEvent, CreateEventW, Sleep, OpenEventW, LeaveCriticalSection, ReleaseSRWLockShared, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, AcquireSRWLockShared, InitializeCriticalSectionEx, EnterCriticalSection, ReleaseMutex, WaitForSingleObject, OpenMutexW, CreateMutexW, ResetEvent, InitializeSRWLock
api-ms-win-core-sysinfo-l1-2-1.dll
GetTickCount, GetProductInfo, GetVersionExW, GetComputerNameExW, GetTickCount64, GetSystemTime, GetSystemTimeAsFileTime
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToTzSpecificLocalTime
api-ms-win-core-util-l1-1-0.dll
DecodePointer, EncodePointer
api-ms-win-core-version-l1-1-0.dll
VerQueryValueW
api-ms-win-core-winrt-error-l1-1-1.dll
RoOriginateErrorW, RoOriginateError, RoReportFailedDelegate, RoGetMatchingRestrictedErrorInfo, RoTransformError, IsErrorPropagationEnabled
api-ms-win-core-winrt-l1-1-0.dll
RoRegisterActivationFactories, RoRevokeActivationFactories, RoGetActivationFactory
api-ms-win-core-winrt-string-l1-1-0.dll
WindowsStringHasEmbeddedNull, WindowsIsStringEmpty, WindowsCreateString, WindowsGetStringRawBuffer, WindowsDeleteString, WindowsCreateStringReference
api-ms-win-eventing-controller-l1-1-0.dll
StartTraceW, ControlTraceW, EnableTraceEx2
api-ms-win-eventing-provider-l1-1-0.dll
EventWrite, EventUnregister, EventRegister
api-ms-win-security-base-l1-2-0.dll
GetTokenInformation, CheckTokenMembership, CreateWellKnownSid
api-ms-win-security-lsalookup-l1-1-1.dll
ReleaseIdentityProviderEnumContext, GetDefaultIdentityProvider, EnumerateIdentityProviders, GetIdentityProviderInfoByGUID
api-ms-win-shcore-obsolete-l1-1-0.dll
CommandLineToArgvW
api-ms-win-shcore-registry-l1-1-1.dll
SHDeleteValueW, SHSetValueW
api-ms-win-shcore-stream-l1-1-0.dll
SHCreateStreamOnFileW, SHCreateStreamOnFileEx
dwmapi.dll
DwmIsCompositionEnabled, DwmSetWindowAttribute
kernel32.dll
CopyFileW, WerUnregisterFile, WerRegisterFile, GetLocalTime, CompareStringOrdinal, lstrcmpiW, LCIDToLocaleName, LoadLibraryW, WaitForMultipleObjects, RaiseFailFastException, LocalFree, CompareFileTime, RegisterWaitForSingleObject, UnregisterWaitEx
msvcrt.dll
DllMain
ntdll.dll
RtlInitUnicodeString, RtlNtStatusToDosError, NtCreateFile
ole32.dll
CoAllowSetForegroundWindow, CoGetObject, CoInitialize, CreateBindCtx
propsys.dll
PropVariantToStringVectorAlloc, PSGetPropertyKeyFromName, PropVariantToBuffer, PropVariantToStringAlloc, VariantToBuffer, PSCreateMemoryPropertyStore, PSPropertyBag_WriteGUID, PropVariantToGUID
rpcrt4.dll
RpcStringFreeW, UuidToStringW
shell32.dll
SHAppBarMessage, SHGetPathFromIDListW, SHBrowseForFolderW, SHCreateItemFromParsingName, SHChangeNotify, SHCreateShellItemArrayFromShellItem, SHCreateDirectoryExW, SHGetSpecialFolderPathW, SHFileOperationW, SHGetKnownFolderPath, ShellExecuteW, Shell_NotifyIconW, SHGetFolderPathW, SHGetFolderPathAndSubDirW, SHParseDisplayName, SHChangeNotifySuspendResume, SHGetKnownFolderIDList, SHBindToObject, SHGetKnownFolderItem, SHCreateItemWithParent, SHBindToFolderIDListParent
shlwapi.dll
PathIsNetworkPathW, PathRemoveFileSpecW, PathIsDirectoryW, StrStrIW, PathFindFileNameW, UrlEscapeW, AssocCreate, PathFileExistsW, SHRegSetUSValueW, SHRegCloseUSKey, SHRegCreateUSKeyW, SHRegGetBoolUSValueW, SHRegGetUSValueW, SHStrDupA, StrRetToStrW
sspicli.dll
GetUserNameExW
user32.dll
SystemParametersInfoW, GetProcessDefaultLayout, UnhookWindowsHookEx, SetWindowsHookExW, GetIconInfo, GetWindowRect, TrackPopupMenu, GetSubMenu, GetDoubleClickTime, KillTimer, SetTimer, SetMenuDefaultItem, EnableMenuItem, GetMenuStringW, GetMenuItemCount, RemoveMenu, DeleteMenu, AppendMenuW, ModifyMenuW, EndDialog, SetForegroundWindow, FindWindowW, GetLastActivePopup, SendMessageW, MsgWaitForMultipleObjects, PeekMessageW, PostThreadMessageW, GetWindowThreadProcessId, DefWindowProcW, GetWindowLongW, PostQuitMessage, SetWindowLongW, CreateWindowExW, RegisterClassExW, UnregisterClassW, GetClassInfoExW, DispatchMessageW, TranslateMessage, GetMessageW, DestroyWindow, PostMessageW, IsWindow, FindWindowExW, SetFocus, AllowSetForegroundWindow, MessageBoxW, AdjustWindowRectEx, NotifyWinEvent, SetWindowPos, CharNextW, ShowWindow, UnregisterClassA, CreatePopupMenu, DestroyMenu, LoadMenuW, LoadIconW, LoadStringW, GetCursorPos, RegisterWindowMessageW, GetMenuDefaultItem
userenv.dll
GetProfileType
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW

skydrive.exe

SkyDrive Sync Engine Host by Microsoft

Remove skydrive.exe
Version:   6.3.9600.16507 (winblue_gdr.140108-1858)
MD5:   5a9895295c7c6174c73496bd06b2e288
SHA1:   fa24319769b8c143de35363203565f65fc18e667
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

skydrive.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). and is compiled as a 64 bit program.

DetailsDetails

File name:skydrive.exe
Publisher:Microsoft Corporation
Product name:SkyDrive Sync Engine Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\skydrive.exe
Original name:SkyDrive.exe.mui
File version:6.3.9600.16507 (winblue_gdr.140108-1858)
Product version:6.3.9600.16507
Size:850.5 KB (870,912 bytes)
Build date:1/9/2014 10:18 AM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details
Network connections
  • [TCP] 134.170.109.176:443

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00033066%
    0.028634%
    Kernel CPU:0.00010367%
    0.013761%
    User CPU:0.00022699%
    0.014873%
    Kernel CPU time:85,227 ms/min
    100,923,805ms/min
    CPU cycles:691,503/sec
    17,470,203/sec
    Context switches:4/sec
    284/sec
    Memory
    Private memory:162.92 MB
    21.59 MB
    Private (maximum):47.02 MB
    Private (minimum):9.94 MB
    Non-paged memory:162.92 MB
    21.59 MB
    Virtual memory:309.4 MB
    140.96 MB
    Virtual memory (peak):314.75 MB
    169.69 MB
    Working set:11.14 MB
    18.61 MB
    Working set (peak):51.62 MB
    37.95 MB
    Page faults:350,028/min
    2,039/min
    I/O
    I/O read transfer:5.1 KB/sec
    1.02 MB/min
    I/O read operations:2/sec
    343/min
    I/O write transfer:6.69 KB/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:15.45 KB/sec
    448.09 KB/min
    I/O other operations:99/sec
    1,671/min
    Resource allocations
    Threads:21
    12
    Handles:591
    600
    GUI GDI count:20
    103
    GUI GDI peak:21
    142
    GUI USER count:18
    49
    GUI USER peak:23
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:64-bit
    Command line:C:\Windows\System32\skydrive.exe -embedding
    Owner:User
    Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.00407143%
    0.272967%
    Kernel CPU:0.00226202%
    0.107585%
    User CPU:0.00180942%
    0.165382%
    CPU cycles:48,977/sec
    5,741,424/sec
    Memory:1.66 MB
    1.16 MB
    msvcrt.dll
    Total CPU:0.00080999%
    Kernel CPU:0.00023267%
    User CPU:0.00057732%
    CPU cycles:63,131/sec
    Memory:668 KB
    skydrive.exe (main module)
    Total CPU:0.00064563%
    Kernel CPU:0.00054898%
    User CPU:0.00009665%
    CPU cycles:14,706/sec
    Memory:876 KB
    combase.dll
    Total CPU:0.00010486%
    Kernel CPU:0.00002761%
    User CPU:0.00007725%
    CPU cycles:1,660/sec
    Memory:1.84 MB
    winbici.dll
    Total CPU:0.00005691%
    Kernel CPU:0.00004668%
    User CPU:0.00001023%
    CPU cycles:1,258/sec
    Memory:132 KB
    wlidprov.dll
    Total CPU:0.00002415%
    Kernel CPU:0.00002275%
    User CPU:0.00000140%
    CPU cycles:123/sec
    Memory:420 KB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 8.1 56.25%
    Windows 8.1 Pro 28.13%
    Windows 8.1 Pro with Media Center 6.25%
    Windows 8.1 N 3.13%
    Windows 8.1 Enterprise 3.13%
    Windows 8.1 Single Language 3.13%

    Distribution by countryDistribution by country

    United States installs about 37.50% of SkyDrive Sync Engine Host.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 27.91%
    Hewlett-Packard 18.60%
    Lenovo 13.95%
    Acer 9.30%
    Dell 9.30%
    Sony 9.30%
    Medion 4.65%
    Alienware 2.33%
    Samsung 2.33%
    GIGABYTE 2.33%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE