rfbtnsvc64.exe
RfBtnSvc Application by Dritek System Inc. (Signed)
| Version:    | 1, 0, 0, 1 | 
| MD5:    | cf59781fcb68f859eb6c835ed285211d | 
| SHA1:    | 78ceb09425399914626175cd445c058d20dc65ad | 
| SHA256:    | e979014c07bf45f4f27e4433ed6b8fa618e4416cb01075fbf52cb2536ec63984 | 
Overview
rfbtnsvc64.exe runs as a service under the name RfButtonDriverService (RfButtonDriverService) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Dritek System Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | rfbtnsvc64.exe | 
| Publisher: | Dritek System INC. | 
| Product name: | RfBtnSvc Application | 
| Typical file path: | C:\windows\rfbtnsvc64.exe | 
| Original name: | RfBtnSvc.exe | 
| File version: | 1, 0, 0, 1 | 
| Size: | 91.11 KB (93,296 bytes) | 
| Certificate | 
| Issued to: | Dritek System Inc. | 
| Authority (CA): | VeriSign | 
| Effective date: | Wednesday, September 30, 2009 | 
| Expiration date: | Monday, October 15, 2012 | 
| Digital DNA | 
| File packed: | No | 
| Code language: | Microsoft Visual C# / Basic .NET | 
| .NET CLR: | Yes | 
| .NET NGENed: | No | 
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- RfButtonDriverService
 
- 'RfButtonDriverService'  (Dritek RF Button Command Service)
 
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| CPU | 
| Total CPU: | 0.00044188% |  | 
| Kernel CPU: | 0.00034150% |  | 
| User CPU: | 0.00010038% |  | 
| Kernel CPU time: | 17,923 ms/min |  | 
| CPU cycles: | 23,458/sec |  | 
| Memory | 
| Private memory: | 1.5 MB |  | 
| Private (maximum): | 4.14 MB |  | 
| Private (minimum): | 3.33 MB |  | 
| Non-paged memory: | 1.5 MB |  | 
| Virtual memory: | 36.75 MB |  | 
| Virtual memory (peak): | 40.85 MB |  | 
| Working set: | 3.68 MB |  | 
| Working set (peak): | 5.19 MB |  | 
| Page faults: | 4,646/min |  | 
| I/O | 
| I/O other transfer: | 71 Bytes/sec |  | 
| I/O other operations: | 1/sec |  | 
| Resource allocations | 
| Threads: | 4 |  | 
| Handles: | 104 |  | 
 
Process properties
| Integrety level: | System | 
| Platform: | 64-bit | 
| Command line: | C:\windows\rfbtnsvc64.exe | 
| Owner: | SYSTEM | 
| Windows Service | 
| Service name: | RfButtonDriverService | 
| Display name: | RfButtonDriverService | 
| Type: | Win32OwnProcess | 
| Parent process: | services.exe (by Microsoft) | 
Threads
Averages
 
| RfBtnSvc64.exe (main module) | 
| Total CPU: | 0.00122476% |  | 
| Kernel CPU: | 0.00106122% |  | 
| User CPU: | 0.00016355% |  | 
| CPU cycles: | 20,042/sec |  | 
| Memory: | 104 KB |  | 
| ntdll.dll | 
| Total CPU: | 0.00016030% |  | 
| Kernel CPU: | 0.00005343% |  | 
| User CPU: | 0.00010687% |  | 
| CPU cycles: | 772/sec |  | 
| Memory: | 1.74 MB |  | 
| sechost.dll | 
| Total CPU: | 0.00000307% |  | 
| Kernel CPU: | 0.00000138% |  | 
| User CPU: | 0.00000169% |  | 
| CPU cycles: | 3/sec |  | 
| Memory: | 288 KB |  | 
 
Distribution by Windows OS
| OS version | distribution | 
| Windows 8 | 
75.00% | 
 | 
| Windows 8.1 Single Language | 
8.33% | 
 | 
| Windows 8.1 | 
8.33% | 
 | 
| Windows 8 Single Language | 
8.33% | 
 | 
Distribution by country
United States installs about 47.92% of RfBtnSvc Application.
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Acer | 
100.00% | 
 |