I’ve noticed something unusual recently…
Glasswire is reporting 822.7 K of data transferred (I think to) my Buffalo NAS, with traffic type “Tor Onion routing.”
This is unexpected, and I want to know more about this tool, and what this might mean.
The responsible application is “Device Association Framework Host”
“Device Association Framework Provider Host is an official Microsoft core process that runs under the LOCAL SERVICE account. The process serves as a framework for connecting and pairing both wired and wireless devices with Windows. A separate Device Association Framework Provider Host process will show up in Task Manager for each such connected device.”
I can believe that this application should send traffic to other hosts on the network, but I wouldn’t expect it to be using TOR.
I don’t (knowingly) have TOR installed on my desktop.
There is additional traffic from this application, but it’s in smaller amounts, with type ‘other.’
I appreciate your insight.