home

cssguard.exe

Endpoint Protector Basic

CoSoSys SRL

It runs as a separate (within the context of its own process) windows Service named “cssguard”.
Publisher:
CoSoSys  (signed by CoSoSys SRL)

Product:
Endpoint Protector Basic

Description:
Helper Service

Version:
4.0.6.8

MD5:
e0caef2f2602a0e77c7a53c3b0bd1135

SHA-1:
0000dd72d183c48230c97a4998805b67d174c1bf

SHA-256:
a50bdcf83564456531d7f560d263ec85976b2487eddd6a86f9ced595d68d95a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 8:48:58 AM UTC  (today)

File size:
126.5 KB (129,528 bytes)

Product version:
4.0.6.8

Copyright:
© 2006-2013 CoSoSys All rights reserved.

Original file name:
guard.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cososys ltd\endpoint protector basic\cssguard.exe

Digital Signature
Signed by:
CoSoSys SRL

Authority:
GlobalSign nv-sa

Valid from:
2/23/2011 5:19:07 PM

Valid to:
4/2/2013 8:35:33 PM

Subject:
E=info@cososys.com, CN=CoSoSys SRL, OU=Code Siging, O=CoSoSys SRL, L=Cluj-Napoca, S=Cluj, C=RO

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012E5288B564

File PE Metadata
Compilation timestamp:
3/11/2013 3:29:41 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

Entry address:
0x70E0

Entry point:
48, 83, EC, 28, E8, EF, 58, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 10, 57, 48, 83, EC, 60, 48, 8B, FA, 48, 8B, D9, 48, 8D, 4C, 24, 20, 48, 8D, 15, A0, F4, 00, 00, 41, B8, 40, 00, 00, 00, E8, 05, 0D, 00, 00, 48, 8D, 54, 24, 70, 48, 8B, CF, 48, 89, 5C, 24, 48, 48, 89, 7C, 24, 50, E8, 8E, B5, 00, 00, 4C, 8B, D8, 48, 89, 44, 24, 70, 48, 89, 44, 24, 58, 48, 85, FF, 74, 1E, F6, 07, 08, B9, 00, 40, 99, 01, 74, 06, 89, 4C, 24, 40, EB, 0E, 8B, 44, 24, 40, 4D, 85, DB, 0F, 44, C1, 89, 44...
 
[+]

Entropy:
6.1761

Code size:
80.5 KB (82,432 bytes)

Service
Display name:
cssguard

Description:
Endpoint Protector Basic helper service

Type:
Win32OwnProcess


Scan cssguard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.