Additional versions

5.0.13.14	50.00%
5.0.9.8	50.00%

service.exe runs as a service under the name CyberGhost 5 Client Service (CGVPNCliService) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including CyberGhost 5 published by CyberGhost S.R.L. and CyberGhost VPN published by CyberGhost S.R.L.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by CyberGhost S.R.L. which was issued by the COMODO CA Limited certificate authority (CA).

CPU
Total CPU:	0.00003023%	0.028634%
Kernel CPU:	0.00001071%	0.013761%
User CPU:	0.00001952%	0.014873%
Kernel CPU time:	40,359 ms/min	100,923,805ms/min
CPU cycles:	819,665/sec	17,470,203/sec
Memory
Private memory:	38.99 MB	21.59 MB
Private (maximum):	33.79 MB
Private (minimum):	33.5 MB
Non-paged memory:	38.99 MB	21.59 MB
Virtual memory:	572.92 MB	140.96 MB
Virtual memory (peak):	587.54 MB	169.69 MB
Working set:	33.69 MB	18.61 MB
Working set (peak):	34.88 MB	37.95 MB
Page faults:	27,377/min	2,039/min
I/O
I/O read transfer:	1.42 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	100 Bytes/sec	448.09 KB/min
I/O other operations:	4/sec	1,671/min
Resource allocations
Threads:	7	12
Handles:	382	600

KeyCrypt64(1).dll (AntiLogger Free by Zemana Ltd)
Total CPU:	0.02728700%	0.272967%
Kernel CPU:	0.00996229%	0.107585%
User CPU:	0.01732471%	0.165382%
CPU cycles:	808,994/sec	5,741,424/sec
Memory:	104 KB	1.16 MB
Service.exe (main module)
Total CPU:	0.00005075%
Kernel CPU:	0.00003513%
User CPU:	0.00001561%
CPU cycles:	1,613/sec
Memory:	80 KB
mscorwks.dll
Total CPU:	0.00000781%
Kernel CPU:	0.00000000%
User CPU:	0.00000781%
CPU cycles:	72/sec
Memory:	9.63 MB