Parent process

Related files

bshelpcs.exe runs as a service under the name BsHelpCS with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Ralink Bluetooth Stack64 published by Ralink and Ralink Bluetooth Stack64 published by Ralink. The file is digitally signed by Ralink Technology Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.00001741%	0.028634%
Kernel CPU:	0.00000871%	0.013761%
User CPU:	0.00000871%	0.014873%
Kernel CPU time:	47 ms/min	100,923,805ms/min
Context switches:	5/sec	284/sec
Memory
Private memory:	1.76 MB	21.59 MB
Private (maximum):	2.79 MB
Private (minimum):	1.48 MB
Non-paged memory:	1.76 MB	21.59 MB
Virtual memory:	46.97 MB	140.96 MB
Virtual memory (peak):	50.97 MB	169.69 MB
Working set:	1.98 MB	18.61 MB
Working set (peak):	5.52 MB	37.95 MB
Page faults:	2,278/min	2,039/min
Resource allocations
Threads:	4	12
Handles:	89	600

sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:	0.00001181%	0.272967%
Kernel CPU:	0.00000590%	0.107585%
User CPU:	0.00000590%	0.165382%
CPU cycles:	161/sec	5,741,424/sec
Memory:	124 KB	1.16 MB
BsHelpCS.exe (main module)
Total CPU:	0.00000590%
Kernel CPU:	0.00000590%
User CPU:	0.00000000%
CPU cycles:	152/sec
Memory:	144 KB