Parent process

Related files

verifyhost.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent LogonUI.exe (Windows Logon User Interface Host by Microsoft). The file is digitally signed by Lenovo (Beijing) Limited which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.00081124%	0.028634%
Kernel CPU:	0.00071086%	0.013761%
User CPU:	0.00010039%	0.014873%
Kernel CPU time:	2,118,431 ms/min	100,923,805ms/min
Memory
Private memory:	49.07 MB	21.59 MB
Private (maximum):	20.55 MB
Private (minimum):	8.74 MB
Non-paged memory:	49.07 MB	21.59 MB
Virtual memory:	171.79 MB	140.96 MB
Virtual memory (peak):	177.84 MB	169.69 MB
Working set:	13.96 MB	18.61 MB
Working set (peak):	53.43 MB	37.95 MB
Resource allocations
Threads:	15	12
Handles:	314	600
GUI GDI count:	61	103
GUI GDI peak:	69	142
GUI USER count:	48	49
GUI USER peak:	50	71

qcap.dll
Total CPU:	12.94215694%	0.272967%
Kernel CPU:	1.04548531%	0.107585%
User CPU:	11.89667162%	0.165382%
CPU cycles:	275,749,749/sec	5,741,424/sec
Memory:	200 KB	1.16 MB
ksproxy.ax
Total CPU:	0.30821826%
Kernel CPU:	0.23253785%
User CPU:	0.07568041%
CPU cycles:	5,654,778/sec
Memory:	204 KB
wdmaud.drv
Total CPU:	0.23582011%
Kernel CPU:	0.08328901%
User CPU:	0.15253110%
CPU cycles:	5,176,800/sec
Memory:	192 KB
mainop.dll
Total CPU:	0.00755773%
Kernel CPU:	0.00043260%
User CPU:	0.00712514%
CPU cycles:	160,381/sec
Memory:	2.27 MB
VerifyHost.exe (main module)
Total CPU:	0.00374023%
Kernel CPU:	0.00290059%
User CPU:	0.00083964%
CPU cycles:	25,416,845/sec
Memory:	3.68 MB
ntdll.dll
Total CPU:	0.00002565%
Kernel CPU:	0.00002565%
User CPU:	0.00000000%
CPU cycles:	142/sec
Memory:	1.23 MB