Parent process

Related files

keyscramblerlogon.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent LogonUI.exe (Windows Logon User Interface Host by Microsoft). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by QFX Software Corporation which was issued by the GlobalSign nv-sa certificate authority (CA). This particular version is usually found on Windows 8 Pro (6.2.9200.0).

CPU
Total CPU:	0.00092904%	0.028634%
Kernel CPU:	0.00083174%	0.013761%
User CPU:	0.00009730%	0.014873%
Kernel CPU time:	266 ms/min	100,923,805ms/min
Memory
Private memory:	5.82 MB	21.59 MB
Private (maximum):	6.82 MB
Private (minimum):	6.8 MB
Non-paged memory:	5.82 MB	21.59 MB
Virtual memory:	64.14 MB	140.96 MB
Virtual memory (peak):	65.27 MB	169.69 MB
Working set:	6.82 MB	18.61 MB
Working set (peak):	6.84 MB	37.95 MB
Resource allocations
Threads:	5	12
Handles:	123	600
GUI GDI count:	16	103
GUI GDI peak:	19	142
GUI USER count:	9	49
GUI USER peak:	17	71

KeyScramblerLogon.exe (main module)
Total CPU:	0.00350800%	0.272967%
Kernel CPU:	0.00311822%	0.107585%
User CPU:	0.00038978%	0.165382%
CPU cycles:	119,267/sec	5,741,424/sec
Memory:	724 KB	1.16 MB
keyscramblerie.dll (KeyScrambler by QFX Software)
Total CPU:	0.00019490%
Kernel CPU:	0.00019490%
User CPU:	0.00000000%
CPU cycles:	3,187/sec
Memory:	1.28 MB