Parent process

Related files

idwservice_600.exe runs as a service under the name IDriveService with extensive SYSTEM privileges (full administrator access). This is typically installed with the program IDrive Version - 6.0 published by Pro Softnet Corp. The file is digitally signed by Pro Softnet Corp which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 7 Professional (6.1.7601.65536).

CPU
Total CPU:	0.00005834%	0.028634%
Kernel CPU:	0.00000795%	0.013761%
User CPU:	0.00005038%	0.014873%
Kernel CPU time:	121,119 ms/min	100,923,805ms/min
CPU cycles:	3,398,498/sec	17,470,203/sec
Memory
Private memory:	13.89 MB	21.59 MB
Private (maximum):	24.91 MB
Private (minimum):	18.47 MB
Non-paged memory:	13.89 MB	21.59 MB
Virtual memory:	110.3 MB	140.96 MB
Virtual memory (peak):	126.47 MB	169.69 MB
Working set:	22.3 MB	18.61 MB
Working set (peak):	35.5 MB	37.95 MB
Page faults:	16,435,510/min	2,039/min
I/O
I/O read transfer:	6.08 MB/sec	1.02 MB/min
I/O read operations:	95/sec	343/min
I/O write transfer:	2.44 KB/sec	274.99 KB/min
I/O write operations:	24/sec	227/min
I/O other transfer:	47.98 KB/sec	448.09 KB/min
I/O other operations:	994/sec	1,671/min
Resource allocations
Threads:	18	12
Handles:	430	600

wow64.dll (Win32 Emulation on NT64 by Microsoft)
Total CPU:	0.01538325%	0.272967%
Kernel CPU:	0.01496005%	0.107585%
User CPU:	0.00042320%	0.165382%
CPU cycles:	1,014,391/sec	5,741,424/sec
Memory:	252 KB	1.16 MB
idwservice_600.exe (main module)
Total CPU:	0.00023210%
Kernel CPU:	0.00018392%
User CPU:	0.00004818%
CPU cycles:	135,608/sec
Memory:	192 KB
ntdll.dll
Total CPU:	0.00005420%
Kernel CPU:	0.00004169%
User CPU:	0.00001251%
CPU cycles:	2,711/sec
Memory:	1.66 MB