Versions

6.2.9200.16384 (win8_rtm.120725-1247)	1.03%
6.1.7600.16385 (win7_rtm.090713-1255)	30.73%
6.1.7600.16385 (win7_rtm.090713-1255)	55.35%
6.0.6000.16386 (vista_rtm.061101-2205)	8.35%
6.0.6000.16386 (vista_rtm.061101-2205)	0.06%
6.0.6000.16386 (vista_rtm.061101-2205)	0.54%
6.0.6000.16386 (vista_rtm.061101-2205)	1.88%
5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)	0.24%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)	1.51%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)	0.24%
5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)	0.06%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

services.exe has 11 known versions, the most recent one is 6.2.9200.16384 (win8_rtm.120725-1247). It is started as a Windows Service called 'Registo de eventos' with the name 'Eventlog' and described as “Activa mensagens do registo de eventos emitidas por programas baseados no Windows e componentes a apresentar no 'Visualizador de eventos'. Este serviço não pode ser parado.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 239.14 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0034% including both foreground and background operations, the average private memory consumption is about 6.72 MB with the maximum memory reaching around 10.4 MB. Addionally, typically read and write I/O disk operations is about 8.39 KB per minute for reads and 23.29 KB per minute for writes.

Service Control Manager (SCM) is a special system process which starts, stops and interacts with Windows service processes. The SCM executable, Services.exe, runs as a Windows console program, and is launched by the Wininit process early during the system startup.