Parent process

Child process

Related files

greetingz_grz_amf_bab[1].exe executes as a process with the local user's privileges typically within the context of its parent greetingz_grz_amf_bab[1].tmp. The file is digitally signed by Bit Cocktail Ltd. which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 7 Ultimate N (6.1.7601.65536). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).

CPU
Total CPU:	0.07297499%	0.028634%
Kernel CPU:	0.02432500%	0.013761%
User CPU:	0.04864999%	0.014873%
Kernel CPU time:	20 ms/min	100,923,805ms/min
Context switches:	1/sec	284/sec
Memory
Private memory:	1.65 MB	21.59 MB
Private (maximum):	3.67 MB
Private (minimum):	3.67 MB
Non-paged memory:	1.65 MB	21.59 MB
Virtual memory:	53.02 MB	140.96 MB
Virtual memory (peak):	57.7 MB	169.69 MB
Working set:	3.67 MB	18.61 MB
Working set (peak):	4.42 MB	37.95 MB
Resource allocations
Threads:	1	12
Handles:	41	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	4	49
GUI USER peak:	4	71