essvr.exe
By GIGABYTE UNITED INC. (Signed)
| MD5: | 04f0e5ff135eafd934f1b1bf7eac7c6e |
| SHA1: | ad9ef80addc31c089bc1d28672e2872e5e8c1d36 |
| SHA256: | 95ee3ceba08cd57c6f201103206fb9feb505c209640061a1d8c95f9abd34fd22 |
Overview
essvr.exe runs as a service under the name ES lite Service for program management. (ES lite Service) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program EasySaver B8.0729.1 published by GIGABYTE. The file is digitally signed by GIGABYTE UNITED INC. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | essvr.exe |
| Typical file path: | C:\Program Files\gigabyte\easysaver\essvr.exe |
| Size: | 78.51 KB (80,392 bytes) |
| Certificate |
| Issued to: | GIGABYTE UNITED INC. |
| Authority (CA): | VeriSign |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“GIGABYTE is proud to be at the forefront of developing new technologies which help reduce the impact everyday computing has on the environment. As such, GIGABYTE has become a member of the Climate Savers Computing Initiative. Started by Google and Intel in 2007, the Climate Savers Computing Initiative is a nonprofit group of eco-conscious consumers, businesses and conservation organizations whose goal is to promote development, deployme...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'ES lite Service' (ES lite Service for program management.)
- ES lite Service
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.05136631% | |
| Kernel CPU: | 0.03701864% | |
| User CPU: | 0.01434767% | |
| Kernel CPU time: | 68,116 ms/min | |
| Context switches: | 21/sec | |
| Memory |
| Private memory: | 1.4 MB | |
| Private (maximum): | 2.99 MB | |
| Private (minimum): | 2.38 MB | |
| Non-paged memory: | 1.4 MB | |
| Virtual memory: | 31.99 MB | |
| Virtual memory (peak): | 32.61 MB | |
| Working set: | 2.42 MB | |
| Working set (peak): | 3.01 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 99151 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 1 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\gigabyte\easysaver\essvr.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | ES lite Service |
| Display name: | ES lite Service for program management. |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ADVAPI32.dll |
| Total CPU: | 0.42222227% | |
| Kernel CPU: | 0.40488911% | |
| User CPU: | 0.01733317% | |
| Context switches: | 10/sec | |
| Memory: | 668 KB | |
| sechost.dll |
| Total CPU: | 0.10585720% | |
| Kernel CPU: | 0.08764769% | |
| User CPU: | 0.01820951% | |
| CPU cycles: | 9,737,383/sec | |
| Context switches: | 14/sec | |
| Memory: | 100 KB | |
| ESSVR.EXE (main module) |
| Total CPU: | 0.00820960% | |
| Kernel CPU: | 0.00448336% | |
| User CPU: | 0.00372623% | |
| CPU cycles: | 201,468/sec | |
| Context switches: | 2/sec | |
| Memory: | 76 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
57.14% |
|
| Windows 7 Ultimate |
42.86% |
|
Distribution by country
Egypt installs about 57.14% of essvr.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
50.00% |
|
| GIGABYTE |
50.00% |
|
