rfbtnsvc64.exe
RfBtnSvc Application by Dritek System Inc. (Signed)
| Version: | 1, 6, 11, 5 |
| MD5: | 8d6be406b4d4d3f0e2b33feca0cf70b5 |
| SHA1: | 22d4ac0abf0ddcd01b97871c126d20ad9384107c |
| SHA256: | 229883f520d407a60a4e695c8bbe15164227518db52e10e794b0d0be35f13c08 |
Overview
rfbtnsvc64.exe runs as a service under the name RfButtonDriverService (RfButtonDriverService) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Dritek System Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | rfbtnsvc64.exe |
| Publisher: | Dritek System INC. |
| Product name: | RfBtnSvc Application |
| Typical file path: | C:\windows\rfbtnsvc64.exe |
| Original name: | RfBtnSvc.exe |
| File version: | 1, 6, 11, 5 |
| Size: | 95.86 KB (98,160 bytes) |
| Build date: | 11/5/2012 7:56 AM |
| Certificate |
| Issued to: | Dritek System Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, September 30, 2009 |
| Expiration date: | Monday, October 15, 2012 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- RfButtonDriverService
- 'RfButtonDriverService' (Dritek RF Button Command Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00019593% | |
| Kernel CPU: | 0.00008921% | |
| User CPU: | 0.00010673% | |
| Kernel CPU time: | 53,836 ms/min | |
| CPU cycles: | 182,553/sec | |
| Memory |
| Private memory: | 1.77 MB | |
| Private (maximum): | 3.13 MB | |
| Private (minimum): | 3 MB | |
| Non-paged memory: | 1.77 MB | |
| Virtual memory: | 39.28 MB | |
| Virtual memory (peak): | 43.31 MB | |
| Working set: | 3.09 MB | |
| Working set (peak): | 5.34 MB | |
| Page faults: | 10,182/min | |
| I/O |
| I/O other transfer: | 167 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 114 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | C:\windows\rfbtnsvc64.exe |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | RfButtonDriverService |
| Display name: | RfButtonDriverService |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (by Microsoft) |
Threads
Averages
| RfBtnSvc64.exe (main module) |
| Total CPU: | 0.00640773% | |
| Kernel CPU: | 0.00556781% | |
| User CPU: | 0.00083992% | |
| CPU cycles: | 74,840/sec | |
| Memory: | 108 KB | |
| sechost.dll |
| Total CPU: | 0.00049995% | |
| Kernel CPU: | 0.00022331% | |
| User CPU: | 0.00027664% | |
| CPU cycles: | 28,079/sec | |
| Memory: | 288 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
75.00% |
|
| Windows 8.1 Single Language |
8.33% |
|
| Windows 8.1 |
8.33% |
|
| Windows 8 Single Language |
8.33% |
|
Distribution by country
United States installs about 47.92% of RfBtnSvc Application.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|