Versions

9.0.0.351	9.09%
1.1.11087.01	72.73%
1.0.1	18.18%

There are 3 versions of tschelp.exe in the wild, the latest version being 9.0.0.351. tschelp.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 63.57 KB. The file is a digitally signed and issued to TechSmith Corporation by VeriSign. The programs Morae Observer, Morae Manager and SnagIt 9 have been observed as installing specific variations of tschelp.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 2.1 MB with the maximum memory reaching around 6.85 MB. Addionally, typically read and write I/O disk operations is about 1.04 KB per minute for reads and 179 Bytes per minute for writes.