Additional versions

11.0.0.0	11.11%
10.2.0.0	22.22%
8.4.0.0	11.11%
6.1.0.0	11.11%
2.2.0.0	11.11%
1.0.0.0	33.33%

service_kms.exe runs as a service under the name Service KMSELDI with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by ByELDI Certificate. Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).

CPU
Total CPU:	0.00258844%	0.028634%
Kernel CPU:	0.00134413%	0.013761%
User CPU:	0.00124432%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
CPU cycles:	183,334/sec	17,470,203/sec
Memory
Private memory:	15.55 MB	21.59 MB
Private (maximum):	16.63 MB
Private (minimum):	56 KB
Non-paged memory:	15.55 MB	21.59 MB
Virtual memory:	489.21 MB	140.96 MB
Virtual memory (peak):	494.75 MB	169.69 MB
Working set:	184 KB	18.61 MB
Working set (peak):	19.74 MB	37.95 MB
Page faults:	7,277/min	2,039/min
I/O
I/O read transfer:	6.27 KB/sec	1.02 MB/min
I/O read operations:	2/sec	343/min
I/O write transfer:	3.96 KB/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	292 Bytes/sec	448.09 KB/min
I/O other operations:	8/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	182	600

clr.dll
Total CPU:	0.00310378%	0.272967%
Kernel CPU:	0.00082768%	0.107585%
User CPU:	0.00227611%	0.165382%
CPU cycles:	57,800/sec	5,741,424/sec
Memory:	9.37 MB	1.16 MB
Service_KMS.exe (main module)
Total CPU:	0.00144451%
Kernel CPU:	0.00144451%
User CPU:	0.00000000%
CPU cycles:	25,034/sec
Memory:	64 KB