Should I block it?

No, this file is 100% safe to run.

PE file structure

Show functions

Import table

advapi32.dll

GetLengthSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegSetKeySecurity, FreeSid, RegSetValueExA, RegCloseKey, RegDeleteKeyA, RegCreateKeyExA, RegisterServiceCtrlHandlerExA, SetServiceStatus, StartServiceCtrlDispatcherA, ControlService, StartServiceA, DeleteService, CreateServiceA, QueryServiceStatus, OpenServiceA, CloseServiceHandle, OpenSCManagerA, RegQueryValueExA, RegOpenKeyExA, RegEnumValueA, RegEnumKeyA, RegEnumKeyExA, AllocateAndInitializeSid

kernel32.dll

GetSystemTime, DeleteFileA, CreateFileA, GetWindowsDirectoryA, TerminateProcess, GetCurrentProcess, WideCharToMultiByte, MoveFileExA, OutputDebugStringA, WriteFile, SetEndOfFile, SetFilePointer, HeapFree, HeapAlloc, GetProcessHeap, GetSystemDirectoryA, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, LocalFree, LocalAlloc, WaitForSingleObject, Sleep, WaitForMultipleObjects, GetTickCount, ResetEvent, SetEvent, CreateThread, CloseHandle, CancelIo, CreateEventA, lstrcpynA, GetSystemInfo, GetVersionExA, GetFullPathNameA, GetFileAttributesA, LoadLibraryA, GetProcAddress, FreeLibrary, GetLastError, lstrcpyA, SetConsoleCtrlHandler, lstrlenA

msvcp60.dll

DllMain

msvcrt.dll

DllMain

setupapi.dll

SetupDiGetINFClassA, SetupDiCreateDeviceInfoList, SetupDiCreateDeviceInfoA, SetupDiSetDeviceRegistryPropertyA, SetupDiSetClassInstallParamsA, SetupDiCallClassInstaller, SetupDiGetDeviceRegistryPropertyA, SetupDiGetDeviceInstallParamsA, SetupDiClassGuidsFromNameExA, SetupDiGetClassDevsExA, SetupDiOpenDeviceInfoA, SetupDiGetDeviceInfoListDetailA, SetupDiEnumDeviceInfo, CM_Get_Device_ID_ExA, SetupDiDestroyDeviceInfoList, SetupDiCreateDeviceInfoListExA

shell32.dll

SHGetSpecialFolderLocation, SHGetPathFromIDListA

user32.dll

UnregisterDeviceNotification, RegisterDeviceNotificationA, CharNextA

version.dll

GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

ws2_32.dll

WSASend, WSAGetOverlappedResult, WSARecv, WSAIoctl, WSAEnumNetworkEvents, WSASocketA, WSAEventSelect

sesssvr.exe

Remove sesssvr.exe

Version:	0, 0, 2, 58
MD5:	b8add7078d06554eb06ac23153ac993d
SHA1:	aea197dab66dba9b1a6f1b8a8bdc63598190efe6

Overview

sesssvr.exe runs as a service under the name SSLVPN Session Service (sesssvr) with extensive SYSTEM privileges (full administrator access). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

Details

File name:	sesssvr.exe
Description:	Client Service
Typical file path:	C:\Program Files\o2micro\succendo\sesssvr.exe
File version:	0, 0, 2, 58
Product version:	3, 6, 0, 0
Size:	67 KB (68,608 bytes)
Build date:	5/25/2010 10:10 AM
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'sesssvr' (SSLVPN Session Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00032002%	0.028634%
Kernel CPU:	0.00027557%	0.013761%
User CPU:	0.00004445%	0.014873%
Kernel CPU time:	94 ms/min	100,923,805ms/min
Context switches:	3/sec	284/sec
Memory
Private memory:	12.54 MB	21.59 MB
Private (maximum):	8.62 MB
Private (minimum):	616 KB
Non-paged memory:	12.54 MB	21.59 MB
Virtual memory:	51.69 MB	140.96 MB
Virtual memory (peak):	51.69 MB	169.69 MB
Working set:	740 KB	18.61 MB
Working set (peak):	8.62 MB	37.95 MB
Page faults:	2,863/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	32 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	9	12
Handles:	106	600
GUI GDI count:	16	103
GUI USER count:	7	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\o2micro\succendo\sesssvr.exe"
Owner:	SYSTEM
Windows Service
Service name:	sesssvr
Display name:	SSLVPN Session Service
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Microsoft Windows Operating System by Microsoft)

Threads

Averages

nc.dll
Total CPU:	0.00018469%	0.272967%
Kernel CPU:	0.00018469%	0.107585%
User CPU:	0.00000000%	0.165382%
Memory:	240 KB	1.16 MB
sesssvr.exe (main module)
Total CPU:	0.00018469%
Kernel CPU:	0.00018469%
User CPU:	0.00000000%
Memory:	80 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	100.00%

Remove Adware and Spyware Programs, FREE Download!