home

EPPService.exe

Endpoint Protector

CoSoSys SRL

It runs as a separate (within the context of its own process) windows Service named “Endpoint Protector”.
Publisher:
CoSoSys  (signed by CoSoSys SRL)

Product:
Endpoint Protector

Version:
4.2.5.9

MD5:
94144141eaf854d11a6ed2419fb36dc3

SHA-1:
b64f58a7b212906795e782b5928a06de9df499e0

SHA-256:
7b8280fd5692b8bb6beb503ad7131f6f5def9f93ea8d47b60f610470a27432ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 9:36:58 PM UTC  (today)

File size:
16.7 KB (17,064 bytes)

Product version:
4.2.5.9

Copyright:
© 2006-2013 CoSoSys All rights reserved.

Original file name:
EPPService.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cososys\endpoint protector\eppservice.exe

Digital Signature
Signed by:
CoSoSys SRL

Authority:
GlobalSign nv-sa

Valid from:
3/5/2013 2:16:09 PM

Valid to:
5/2/2016 7:05:32 PM

Subject:
E=info@cososys.com, CN=CoSoSys SRL, OU=Code Siging, O=CoSoSys SRL, L=Cluj-Napoca, S=Cluj, C=RO

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112117AB901EFA71553532E0E4DB6EDABB52

File PE Metadata
Compilation timestamp:
10/23/2013 7:12:23 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
192:0OFViPB8L5zgP0CY2SinRIpqPQnOGup7RrXeN0onVTgBxe1HCjWe+PjPRAgl0iVs:Z7XL5MhYEVyOVrXeuon2KtPLRD5Vhl4

Entry address:
0x14BC

Entry point:
48, 83, EC, 28, E8, 8F, 04, 00, 00, 48, 83, C4, 28, E9, 86, FD, FF, FF, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 7D, 1C, 00, 00, FF, 15, 87, 0B, 00, 00, 4C, 8B, 1D, 68, 1D, 00, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 2B, 05, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, 28, 1C, 00, 00, 48, 89, 44, 24...
 
[+]

Entropy:
6.0886

Code size:
3.5 KB (3,584 bytes)

Service
Display name:
Endpoint Protector

Description:
Offers permanent protection against endpoint security threats posed by portable storage devices. It secures many ports (like USB, card readers, etc.) on the PC that would be otherwise vulnerable to da

Type:
Win32OwnProcess


Scan EPPService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.