File details
File name: dns.exe
Name: Domain Name System (DNS) Server
Description: Microsoft® Windows® Operating System
Version: 6.2.9200.16384 (win8_rtm.120725-1247)
Product version: 6.2.9200.16384
Size: 1.46 MB
Original file name: dns.exe.mui
Windows file protection:
Yes
Resource utilization
 | CPU utilization averages |
Total CPU: 0.0009513325%
Privileged CPU:
0.0006082126%
User CPU:
0.00034311992064%
Privileged CPU time: 608.4 ms
Privileged CPU time /min: 0 ms
CPU cycle count:
336,967,412CPU cycle count /min: 3,120,880
| Memory utilization averages |
Committed memory:
121.02 MBPeak committed memory: 122.55 MB
Paged memory:
84.59 MBPeak paged memory: 85.4 MB
Paged system memory:
1.22 MBNon-paged system memory: 7.24 MB
Working set memory:
83.43 MBPeak working set memory: 83.47 MB
Min working set memory: 83.26 MB
Private memory:
84.59 MBPage faults:
22,047Page faults /min: 15
| Process I/O averages |
Total read operations:
167Read operations /min: 1
Total read transfer: 18.92 KB
Read transfer /min: 13 Bytes
Total write operations:
170Write operations /min: 1
Total write transfer: 26.09 KB
Write transfer /min: 18 Bytes
Total other operations:
26,273Other operations /min: 18
Total other transfer: 132.54 KB
Other Transfer /min: 91 Bytes
Resources
Handle count average: 10,180
Thread count average: 11
Thread resource averages
sechost.dll
Total CPU: 0.000639506113%
Privileged CPU: 0.000483529012%
User CPU: 0.000155977101%
CPU Cycle count /sec: 13,114
Module memory size: 288 KB
Total CPU: 0.000148181268%
Privileged CPU: 0.000062392240%
User CPU: 0.000085789027%
CPU Cycle count /sec: 14,705
Module memory size: 1.68 MB
Process details
Runs as (owner): System
Integrety level: System Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Command C:\Windows\system32\dns.exe
Service details
Name: DNS Server
Service name: DNS
Service type:
Win32OwnProcessDescription: “Enables DNS clients to resolve DNS names by answering DNS queries and dynamic DNS update requests. If this service is stopped, DNS updates will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.”
Network connectivity
UDP: LISTENING on port 51160
TCP: localhost on port 53
Image hashes
MD5: 41ddbffc7a5a5a849c5898193f8952e2
SHA-1: fa4734a59f65027b80fdeaa74c9e460e22828527
PE image details
CLR assembly: Yes
CLR NGENed: No
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No