Parent process

Related files

evtcheck.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent node.exe (Node.js by Joyent Inc). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.00030563%	0.028634%
Kernel CPU:	0.00013379%	0.013761%
User CPU:	0.00017184%	0.014873%
Kernel CPU time:	109 ms/min	100,923,805ms/min
Memory
Private memory:	29.67 MB	21.59 MB
Private (maximum):	7.2 MB
Private (minimum):	7.07 MB
Non-paged memory:	29.67 MB	21.59 MB
Virtual memory:	520.71 MB	140.96 MB
Virtual memory (peak):	524.71 MB	169.69 MB
Working set:	7.2 MB	18.61 MB
Working set (peak):	21.15 MB	37.95 MB
Resource allocations
Threads:	9	12
Handles:	235	600

evtcheck.exe (main module)
Total CPU:	0.00076470%	0.272967%
Kernel CPU:	0.00053529%	0.107585%
User CPU:	0.00022941%	0.165382%
CPU cycles:	15,427/sec	5,741,424/sec
Memory:	32 KB	1.16 MB
mscorwks.dll
Total CPU:	0.00007647%
Kernel CPU:	0.00000000%
User CPU:	0.00007647%
CPU cycles:	1,408/sec
Memory:	9.61 MB