home

EPPService.exe

Endpoint Protector

CoSoSys SRL

It runs as a separate (within the context of its own process) windows Service named “Endpoint Protector”.
Publisher:
CoSoSys  (signed by CoSoSys SRL)

Product:
Endpoint Protector

Version:
4.1.4.4

MD5:
ca16dde23e1a79971ba621776fc4d654

SHA-1:
b485a4d29ae2bf2911ee2c215e49e062bd14d39d

SHA-256:
46b50503d4f99820f57abacafa58e341d739b166033fbfe0526ae718fc195e03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 10:42:25 PM UTC  (today)

File size:
60.5 KB (62,000 bytes)

Product version:
4.1.4.4

Copyright:
© 2006-2012 CoSoSys All rights reserved.

Original file name:
EPPService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cososys ltd\endpoint protector\eppservice.exe

Digital Signature
Signed by:
CoSoSys SRL

Authority:
GlobalSign nv-sa

Valid from:
2/23/2011 12:49:07 PM

Valid to:
4/2/2013 4:05:33 PM

Subject:
E=info@cososys.com, CN=CoSoSys SRL, OU=Code Siging, O=CoSoSys SRL, L=Cluj-Napoca, S=Cluj, C=RO

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012E5288B564

File PE Metadata
Compilation timestamp:
11/13/2012 11:22:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
768:a5WpAmsbzZkeY9a8yb13HLIXCEjjzgnHdkx/w/h/yF9yMuNeTRzA/b4IILqL:a5W5sBkE93HLNeYHux/Ie/fRzgAC

Entry address:
0x26BF

Entry point:
E8, A8, 2A, 00, 00, E9, A5, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41...
 
[+]

Code size:
35 KB (35,840 bytes)

Service
Display name:
Endpoint Protector

Description:
Offers permanent protection against endpoint security threats posed by portable storage devices. It secures many ports (like USB, card readers, etc.) on the PC that would be otherwise vulnerable to da

Type:
Win32OwnProcess


Scan EPPService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.