Versions

11.8.0.0	2.86%
11.8.0.0	2.86%
11.0.0.4	14.29%
11.0.0.2	2.86%
10.0.0.3	8.57%
10.0.0.3	2.86%
10.0.0.3	2.86%
10.0.0.1	8.57%
10, 0, 0, 1	34.29%
10.0.0.1	2.86%
10.0.0.1	14.29%
10, 0, 0, 1	2.86%

There are 12 versions of etdservice.exe in the wild, the latest version being 11.8.0.0. It is started as a Windows Service called 'ETDService' with the name 'ETDService'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 86.81 KB. The file is a digitally signed and issued to ELAN Microelectronics Corporation by VeriSign. The programs ETDWare PS/2-X64 11.6.16.203_WHQL, ETDWare PS/2-X64 11.6.2.1_WHQL and ETDWare PS/2-X64 11.6.10.001_WHQL have been observed as installing specific variations of etdservice.exe. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 879.65 KB with the maximum memory reaching around 2.81 MB and typical read I/O operations are around 0 Bytes per minute.