Parent process

Related files

swi_service.exe runs as a service under the name Sophos Web Intelligence Service (swi_service) with minimum LOCAL SERVICE privileges (predefined local account used by the service control manager) on the local PC and presents anonymous credentials on the network. This is typically installed with the program Acer ScreenSaver published by Acer Incorporated. The file is digitally signed by Sophos Limited which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Home Premium (6.0.6002.131072).

CPU
Total CPU:	0.00059601%	0.028634%
Kernel CPU:	0.00049988%	0.013761%
User CPU:	0.00009613%	0.014873%
Kernel CPU time:	78 ms/min	100,923,805ms/min
Memory
Private memory:	1.96 MB	21.59 MB
Private (maximum):	6.36 MB
Private (minimum):	6.22 MB
Non-paged memory:	1.96 MB	21.59 MB
Virtual memory:	43.48 MB	140.96 MB
Virtual memory (peak):	45.98 MB	169.69 MB
Working set:	6.33 MB	18.61 MB
Working set (peak):	6.36 MB	37.95 MB
Resource allocations
Threads:	9	12
Handles:	115	600

swi_service.exe (main module)
Total CPU:	0.00024769%	0.272967%
Kernel CPU:	0.00024769%	0.107585%
User CPU:	0.00000000%	0.165382%
CPU cycles:	5,450/sec	5,741,424/sec
Memory:	1.5 MB	1.16 MB
wow64cpu.dll
Total CPU:	0.00019815%
Kernel CPU:	0.00000000%
User CPU:	0.00019815%
CPU cycles:	4,138/sec
Memory:	36 KB