Versions

6.1	75.00%
6.1	12.50%
6.1	12.50%

There are 3 versions of vistasrv.exe in the wild, the latest version being 6.1. It is started as a Windows Service called 'Stardock WindowBlinds' with the name 'WindowBlinds' and described as “Stardock WindowBlinds Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 259.95 KB. The file is a digitally signed and issued to Stardock Corporation by The USERTRUST Network. The programs Stardock MyColors, MyColors and WindowBlinds 7 have been observed as installing specific variations of vistasrv.exe. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0000% including both foreground and background operations, the average private memory consumption is about 1.22 MB with the maximum memory reaching around 3.45 MB. Addionally, typically read and write I/O disk operations is about 2 Bytes per minute for reads and 0 Bytes per minute for writes.