Parent process

Related files

smessaging.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Malwarebytes Secure Backup published by Malwarebytes Corporation. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Malwarebytes Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.00039242%	0.028634%
Kernel CPU:	0.00024477%	0.013761%
User CPU:	0.00014765%	0.014873%
Kernel CPU time:	437 ms/min	100,923,805ms/min
CPU cycles:	268,113/sec	17,470,203/sec
Memory
Private memory:	34.59 MB	21.59 MB
Private (maximum):	36.51 MB
Private (minimum):	30.02 MB
Non-paged memory:	34.59 MB	21.59 MB
Virtual memory:	239.43 MB	140.96 MB
Virtual memory (peak):	243.43 MB	169.69 MB
Working set:	33.3 MB	18.61 MB
Working set (peak):	36.51 MB	37.95 MB
Page faults:	13,472/min	2,039/min
I/O
I/O read transfer:	336 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	85 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	123 Bytes/sec	448.09 KB/min
I/O other operations:	7/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	494	600
GUI GDI count:	31	103
GUI GDI peak:	31	142
GUI USER count:	23	49
GUI USER peak:	25	71

ntdll.dll
Total CPU:	0.00175113%	0.272967%
Kernel CPU:	0.00001752%	0.107585%
User CPU:	0.00173361%	0.165382%
CPU cycles:	57,084/sec	5,741,424/sec
Memory:	1.23 MB	1.16 MB
SMessaging.exe (main module)
Total CPU:	0.00136612%
Kernel CPU:	0.00052543%
User CPU:	0.00084069%
CPU cycles:	30,818/sec
Memory:	80 KB
mscorwks.dll
Total CPU:	0.00003503%
Kernel CPU:	0.00000000%
User CPU:	0.00003503%
CPU cycles:	191/sec
Memory:	5.68 MB