Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	14.29%
6.3.9600.16384 (winblue_rtm.130821-1623)	14.29%
6.2.9200.16384 (win8_rtm.120725-1247)	42.86%
6.2.9200.16384 (win8_rtm.120725-1247)	28.57%

Parent process

Child process

Related files

This is a Windows system installed file with Windows File Protection (WFP) enabled.

atbroker.exe executes as a process with the local user's privileges typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is installed on Windows 8 and is compiled as a 32 bit program.

CPU
Total CPU:	0.00114443%	0.028634%
Kernel CPU:	0.00026848%	0.013761%
User CPU:	0.00087595%	0.014873%
Kernel CPU time:	78,001 ms/min	100,923,805ms/min
Memory
Private memory:	1.12 MB	21.59 MB
Private (maximum):	4.41 MB
Private (minimum):	1.36 MB
Non-paged memory:	1.12 MB	21.59 MB
Virtual memory:	59.98 MB	140.96 MB
Virtual memory (peak):	62.35 MB	169.69 MB
Working set:	1.68 MB	18.61 MB
Working set (peak):	4.9 MB	37.95 MB
Resource allocations
Threads:	2	12
Handles:	80	600
GUI GDI count:	6	103
GUI GDI peak:	6	142
GUI USER count:	1	49
GUI USER peak:	2	71