Parent process

Related files

idwbg_600.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program IDrive Version - 6.0 published by Pro Softnet Corp. The file is digitally signed by Pro Softnet Corp which was issued by the Thawte certificate authority (CA). This particular version is usually found on Windows 7 Professional (6.1.7601.65536).

CPU
Total CPU:	0.00008475%	0.028634%
Kernel CPU:	0.00001965%	0.013761%
User CPU:	0.00006510%	0.014873%
Kernel CPU time:	393,310 ms/min	100,923,805ms/min
Memory
Private memory:	8.18 MB	21.59 MB
Private (maximum):	18.45 MB
Private (minimum):	15.96 MB
Non-paged memory:	8.18 MB	21.59 MB
Virtual memory:	123.29 MB	140.96 MB
Virtual memory (peak):	136.1 MB	169.69 MB
Working set:	18.23 MB	18.61 MB
Working set (peak):	18.64 MB	37.95 MB
Page faults:	90,342,945/min	2,039/min
Resource allocations
Threads:	7	12
Handles:	354	600
GUI GDI count:	34	103
GUI GDI peak:	37	142
GUI USER count:	22	49
GUI USER peak:	24	71

idwbg_600.exe (main module)
Total CPU:	0.13153632%	0.272967%
Kernel CPU:	0.10429329%	0.107585%
User CPU:	0.02724303%	0.165382%
CPU cycles:	6,832,979/sec	5,741,424/sec
Memory:	36 KB	1.16 MB
ntdll.dll
Total CPU:	0.00005838%
Kernel CPU:	0.00005421%
User CPU:	0.00000417%
CPU cycles:	2,777/sec
Memory:	1.66 MB