Parent process

Related files

drdiag.exe runs as a service under the name Disaster Recovery Imaging with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.01188290%	0.028634%
Kernel CPU:	0.00632395%	0.013761%
User CPU:	0.00555895%	0.014873%
Kernel CPU time:	125 ms/min	100,923,805ms/min
Memory
Private memory:	12.02 MB	21.59 MB
Private (maximum):	9.12 MB
Private (minimum):	9.04 MB
Non-paged memory:	12.02 MB	21.59 MB
Virtual memory:	61.63 MB	140.96 MB
Virtual memory (peak):	63.7 MB	169.69 MB
Working set:	9.12 MB	18.61 MB
Working set (peak):	10.1 MB	37.95 MB
Page faults:	13,520/min	2,039/min
Resource allocations
Threads:	11	12
Handles:	146	600

drdiag.exe (main module)
Total CPU:	0.02051573%	0.272967%
Kernel CPU:	0.00683858%	0.107585%
User CPU:	0.01367716%	0.165382%
CPU cycles:	421,308/sec	5,741,424/sec
Memory:	4.64 MB	1.16 MB
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:	0.00445030%
Kernel CPU:	0.00445030%
User CPU:	0.00000000%
CPU cycles:	222,456/sec
Memory:	124 KB