Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

14.1.0.0 6.25%
14.0.0.91 6.25%
13.4.0.25 6.25%
13.3.0.55 18.75%
13.1.200.22 6.25%
13.0.0.6685 6.25%
13.0.0.6684 6.25%
12.1.44.1 6.25%
12.1.0.30 12.50%
12.0.0.6410 18.75%
11.2.0.31560 6.25%

Relationships


PE structurePE file structure

Show functions
Import table
acrdlg.dll
Acrdlg_DisplayReconnectDialog
advapi32.dll
CryptHashData, CryptAcquireContextA, CryptGenRandom, CryptReleaseContext, RegOpenKeyW, RegQueryValueExW, RegOpenKeyA, GetUserNameA, RegOpenKeyExA, RegQueryValueExA, RegEnumValueW, RegQueryInfoKeyW, RegCreateKeyExW, RegSetValueExW, RegDeleteKeyW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, RegOpenKeyExW, CryptCreateHash, CryptGetHashParam, CryptDestroyHash, RegCreateKeyA, RegDeleteKeyA, RegCloseKey, RegEnumValueA, RegSetValueExA, RegDeleteValueA, AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsA, UnregisterTraceGuids, RegEnumKeyExW, RegOpenCurrentUser, RegisterTraceGuidsW
ccmsdk.dll
CCMGetSessionForRSApplicationPid
confmgr.dll
ConfigurationManager_SetStringW, ConfigurationManager_FreeSerializeData, ConfigurationManager_Serialize, ConfigurationManager_Deserialize, ConfigurationManager_destroy, ConfigurationManager_GetString, ConfigurationManager_GetBool, ConfigurationManager_GetInt, ConfigurationManager_GetStringW, ConfigurationManager_SetString, ConfigurationManager_SetConfigurationDirectory, ConfigurationManager_SetTrustEvidence, ConfigurationManager_new, ConfigurationManager_ServerSectionName, ConfigurationManager_ServerSectionNameW, ConfigurationManager_AuthoriseConnection
crypt32.dll
CryptRegisterOIDInfo, CryptStringToBinaryW, CertFreeCertificateChain, CertGetNameStringW, CertGetCertificateChain, CertGetCertificateContextProperty, CertCreateCertificateContext, CryptVerifyDetachedMessageSignature
cryptui.dll
CryptUIDlgViewContext
ctxlogging.dll
ICAClientError_getThreadErrorMessage, ICAClientError_display, ICAClientError_destroy
ctxmui.dll
CTXMUI_InitCommonControlsLanguage, CTXMUI_ParseCommandLineA, CTXMUI_MessageBoxA, CTXMUI_FormatMessageW, CTXMUI_LoadResourceLibraryA, CTXMUI_FormatMessageA, CTXMUI_MessageBoxW, CTXMUI_LoadResourceLibraryW
gdi32.dll
CreateCompatibleDC, SetTextColor, GetStockObject, GetDeviceCaps, GetObjectW, CreateSolidBrush, CreateDIBSection, CreateCompatibleBitmap, StretchBlt, DeleteDC, GetDIBits, GetObjectA, DeleteObject, CreatePen, BitBlt, CreateFontIndirectW, SelectObject
icafile.dll
ICAFile_FreeSerializeData, ICAFile_Deserialize, ICAFile_destroy, ICAFile_SetServerSectionNameA, ICAFile_load, ICAFile_Serialize
kernel32.dll
IsProcessorFeaturePresent, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, FindResourceExA, FindResourceA, GetModuleHandleW, GlobalHandle, GlobalFree, CreateFileW, lstrcatW, GetVersionExW, VirtualLock, VirtualAlloc, IsBadReadPtr, VirtualFree, InterlockedIncrement, GetSystemDirectoryW, OpenSemaphoreA, CreateDirectoryW, CopyFileW, SetErrorMode, GetTimeZoneInformation, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, GetThreadLocale, GetLocaleInfoA, GetACP, FindResourceExW, OpenProcess, CreatePipe, ReadFile, lstrcmpW, GetProcessHeap, HeapSetInformation, GetCurrentProcessId, CreateEventW, CreateMutexA, CreateThread, ReleaseMutex, GetModuleFileNameW, LoadLibraryW, GetPrivateProfileStringW, FlushInstructionCache, GlobalDeleteAtom, GlobalGetAtomNameA, GetTempPathA, GetTempFileNameA, OpenEventA, CreateProcessA, lstrcatA, lstrcmpA, CopyFileA, GetModuleFileNameA, GetVersionExA, CreateDirectoryA, GetWindowsDirectoryA, WritePrivateProfileStringA, OutputDebugStringA, FreeLibrary, CreateFileA, SetFilePointer, InitializeCriticalSection, CreateEventA, GetCurrentProcess, DuplicateHandle, GetTickCount, DeleteFileA, ResetEvent, GlobalAddAtomA, GetStringTypeExW, GetStringTypeExA, GetEnvironmentVariableW, GetEnvironmentVariableA, LocalAlloc, Sleep, lstrlenA, lstrcmpiA, CompareStringW, CompareStringA, lstrlenW, lstrcpyW, CloseHandle, WaitForSingleObject, TerminateThread, LocalFree, GetModuleHandleA, GetProcAddress, GetCurrentThreadId, WriteFile, SetEvent, EnterCriticalSection, LeaveCriticalSection, lstrcmpiW, GetVersion, GetLastError, WideCharToMultiByte, MultiByteToWideChar, InterlockedExchange, FindResourceW, LoadResource, LockResource, SizeofResource, WaitForMultipleObjects, GetExitCodeThread, ResumeThread, SuspendThread, InterlockedDecrement, GetOEMCP, IsDBCSLeadByteEx, GetDiskFreeSpaceA, RaiseException, DebugBreak, GetPrivateProfileIntA, CreateFileMappingA, FindFirstFileA, GlobalAlloc, MulDiv, FindClose, CreateSemaphoreA, MapViewOfFile, GetSystemDirectoryA, DeleteCriticalSection, SetLastError, SetNamedPipeHandleState, ReleaseSemaphore, UnmapViewOfFile, GlobalLock, OutputDebugStringW, GlobalUnlock, TryEnterCriticalSection, FileTimeToDosDateTime, ProcessIdToSessionId, GetComputerNameA, GetFileTime, GetProcessTimes, QueryPerformanceFrequency, GetLocalTime, GetShortPathNameA, LoadLibraryA, GetPrivateProfileStringA, GetFullPathNameA, DllMain
mfc80.dll
DllMain
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
StringFromCLSID, CoCreateInstance, CoInitialize, StringFromGUID2, OleLockRunning, CoTaskMemFree, CLSIDFromProgID, CLSIDFromString, CreateStreamOnHGlobal, CoTaskMemAlloc, OleUninitialize, CoRevokeClassObject, CoInitializeEx, CoRegisterClassObject, CoUninitialize, CoGetClassObject, OleInitialize
progressnotificationcommon.dll
ManageStatusIndicDlg
psapi.dll
GetModuleBaseNameW
rsmanager.dll
RSManagerQueryUnload, RSManagerLoad, RSManagerUnload, RSManagerInstance
shell32.dll
ExtractIconA, SHGetSpecialFolderLocation, SHGetMalloc, SHGetFolderPathW, SHGetPathFromIDListA, SHGetFolderPathA, ShellExecuteA, SHGetFileInfoW, CommandLineToArgvW, SHGetSpecialFolderPathW
shlwapi.dll
SHDeleteKeyW, PathIsURLW, UrlGetPartW, StrStrIW
statuin.dll
StatUILoadString, StatUIDestroy, StatUIEnableCancel, StatUIUpdateStatus
urlmon.dll
CoInternetCreateSecurityManager
user32.dll
SetForegroundWindow, wsprintfA, GetWindowRect, ClientToScreen, CharLowerA, CharLowerW, CharUpperA, CharUpperW, SendMessageA, ReleaseDC, GetDC, PostMessageA, RegisterWindowMessageA, FindWindowA, EnableWindow, LoadStringA, GetDesktopWindow, LoadIconA, DestroyIcon, SetDlgItemTextW, CharNextA, SetTimer, RegisterClassA, GetClassInfoA, RemovePropA, MapVirtualKeyA, IsWindow, GetWindowLongA, GetClassNameA, UnregisterClassA, SetPropW, GetCapture, PtInRect, SetCursor, GetPropW, RemovePropW, MonitorFromWindow, GetMonitorInfoW, wsprintfW, DialogBoxIndirectParamW, RegisterWindowMessageW, GetWindowTextLengthW, CreateAcceleratorTableW, RegisterClassExW, LoadCursorW, GetClassInfoExW, DestroyAcceleratorTable, BeginPaint, EndPaint, CallWindowProcW, FillRect, ReleaseCapture, GetClassNameW, IsChild, CharNextW, DestroyWindow, MapDialogRect, SetWindowContextHelpId, CreateWindowExW, DefWindowProcW, EndDialog, GetDlgItem, GetDlgCtrlID, GetTopWindow, SendDlgItemMessageW, GetClientRect, MoveWindow, SetWindowTextW, ScreenToClient, SendMessageW, GetWindowLongW, SetWindowLongW, MessageBoxW, CreateIconIndirect, GetIconInfo, SetWindowPos, GetFocus, SetCapture, RedrawWindow, InvalidateRgn, InvalidateRect, GetForegroundWindow, EnumThreadWindows, LoadStringW, GetWindowThreadProcessId, IsWindowVisible, GetWindowTextW, SetWindowLongA, GetPropA, UpdateWindow, SetPropA, GetSystemMetrics, IntersectRect, SetRect, MessageBoxA, BringWindowToTop, ShowWindow, IsIconic, GetLastActivePopup, InflateRect, OffsetRect, DeleteMenu, GetMenuItemCount, GetMenuItemID, GetSystemMenu, GetKeyState, GetParent, GetSysColor, LoadBitmapA, SetFocus, GetNextDlgTabItem, GetWindow, SendMessageTimeoutA, FindWindowW, RegisterClassExA, CreateWindowExA, GetMessageA, DispatchMessageA, DefWindowProcA, RegisterClassW, PostMessageW, FreeDDElParam, UnpackDDElParam, PackDDElParam, SendMessageTimeoutW, PostQuitMessage, DispatchMessageW, TranslateMessage, GetMessageW
version.dll
GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeA
winhttp.dll
WinHttpCrackUrl
winmm.dll
waveOutGetNumDevs

WFCRUN32.exe

Citrix ICA Client by Citrix Systems (Signed)

Remove WFCRUN32.exe
Version:   13.0.0.6685
MD5:   84858abdb6fbb0fff1433d8f24f8346d
SHA1:   d4f82f89cab5290a27b5f98a6fb0b6c2e9b7d46e

Overview

wfcrun32.exe executes as a process with the local user's privileges. The file is digitally signed by Citrix Systems which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:wfcrun32.exe
Publisher:Citrix Systems, Inc.
Product name:Citrix ICA Client
Description:Citrix
Typical file path:C:\Program Files\citrix\ica client\wfcrun32.exe
File version:13.0.0.6685
Product version:13.0.0
Size:841.94 KB (862,144 bytes)
Build date:8/11/2011 9:28 AM
Certificate
Issued to:Citrix Systems
Authority (CA):VeriSign
Effective date:Monday, March 15, 2010
Expiration date:Friday, April 1, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00003315%
0.028634%
Kernel CPU:0.00001952%
0.013761%
User CPU:0.00001364%
0.014873%
Kernel CPU time:156 ms/min
100,923,805ms/min
CPU cycles:393,115/sec
17,470,203/sec
Memory
Private memory:5.09 MB
21.59 MB
Private (maximum):14.45 MB
Private (minimum):10.37 MB
Non-paged memory:5.09 MB
21.59 MB
Virtual memory:117.52 MB
140.96 MB
Virtual memory (peak):121.52 MB
169.69 MB
Working set:14.41 MB
18.61 MB
Working set (peak):14.55 MB
37.95 MB
Page faults:24,266/min
2,039/min
I/O
I/O read transfer:28 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:22 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:8 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:15
12
Handles:236
600
GUI GDI count:26
103
GUI GDI peak:30
142
GUI USER count:34
49
GUI USER peak:35
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command line:"C:\Program Files\citrix\ica client\wfcrun32.exe" -embedding
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 43.75%
Windows 7 Professional 31.25%
Windows 8 6.25%
Windows 7 Enterprise 6.25%
Windows 7 Starter 6.25%
Windows 8 Pro 6.25%

Distribution by countryDistribution by country

United States installs about 75.00% of Citrix ICA Client.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 37.50%
Hewlett-Packard 12.50%
Toshiba 12.50%
Intel 12.50%
ASUS 12.50%
GIGABYTE 6.25%
Acer 6.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE