File details
File name: egdpsvc.exe
Name: Wsys Control
Description: Wsys Control 10.2.1.2652
Version: 10.2.1.2652
Size: 1.63 MB
Original file name: Wsys.exe
Digital certificate
Certificate authority:
GlobalSign nv-sa
Effective date: 1/24/2013
Expiration date: 1/25/2016
Resource utilization
 | CPU utilization averages |
Total CPU: 0.1250389311%
Privileged CPU:
0.0009234194%

User CPU:
0.12411551166744%

Privileged CPU time: 1093.75 ms
Privileged CPU time /min: 1 ms
 | Memory utilization averages |
Committed memory:
87.86 MB
Peak committed memory: 96.69 MB
Paged memory:
8 MB
Peak paged memory: 8.43 MB
Paged system memory:
158.42 KB
Non-paged system memory: 19.48 KB
Working set memory:
14.95 MB
Peak working set memory: 15.17 MB
Min working set memory: 10.52 MB
Private memory:
8 MB
Page faults:
5,367
Page faults /min: 7
Resources
Handle count average: 258
Thread count average: 13
Thread resource averages
Total CPU: 0.024323835946%
Privileged CPU: 0.015089606387%
User CPU: 0.009234229560%
CPU Cycle count /sec: 611,166
Module memory size: 3.49 MB
Process details
Runs as (owner): System
Integrety level: Undefined
Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Command
C:\ProgramData\eSafe\eGdpSvc.exe
Service details
Name: Wsys Service
Service name: WsysSvc
Service type:
Win32OwnProcess
Description: “Wsys update service”
Network connectivity
TCP: 65.255.35.143 on port 49929
Windows Firewall allowed program: Yes
Image hashes
MD5: 97a1b2c9f75ad1e47264779240c90090
SHA-1: f7910db30eed14b2040edee82e119422f8cdd235
PE image details
File packed: Yes
Packed by: Unknown
Import Table
advapi32.dll

kernel32.dll

EnumSystemLocalesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ole32.dll

psapi.dll

sensapi.dll

shell32.dll

shlwapi.dll

user32.dll

userenv.dll

version.dll

winhttp.dll

wininet.dll
