Versions

1.0.0.2522	66.67%
1.0.0.2405	16.67%
1.0.0.1982	16.67%

Warning 30 antivirus scanners has detected malware in various versions of eGdpSvc.exe.

egdpsvc.exe has 3 known versions, the most recent one is 1.0.0.2522. It is started as a Windows Service called 'eSafeSvc' with the name 'eSafeSvc' and described as “System eSafe update service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 550.56 KB. It is an authenticode code-signed executable issued to Banyan Tree Technology Limited by the certification authority GlobalSign nv-sa. The programs eSafe Security Control 1.0.0.2522, Wsys Control 1.0.0.2557 and Wsys Control 10.2.1.2634 have been observed as installing specific variations of egdpsvc.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 4.6 MB with the maximum memory reaching around 7.36 MB.

Based on 40+ industry antivirus scanners, 30 of them detected the following malware.