epservice.exe
DataMask by AOL by SentryBay Corporation (Signed)
| Version: | 5.6.0.8012 |
| MD5: | a6d7986c51e8a7cb6b7d0246341efe09 |
| SHA1: | a09623077f6e7f8d6c6e9d9d52032c656f493c58 |
| SHA256: | 865608220b3cfda7661de5c95d66134fb0dd62e951c2f42df9135a29c8d8219d |
Overview
epservice.exe runs as a service under the name DataMask by AOL (EntryProtect) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including DataMask by AOL published by AOL Inc. and DataMask by AOL published by AOL Inc.. The file is digitally signed by SentryBay Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Home Premium (6.0.6002.131072).
Details
| File name: | epservice.exe |
| Publisher: | AOL |
| Product name: | DataMask by AOL |
| Typical file path: | C:\Program Files\aol\datamask by aol\epservice.exe |
| File version: | 5.6.0.8012 |
| Size: | 44.88 KB (45,960 bytes) |
| Build date: | 11/14/2012 1:56 AM |
| Certificate |
| Issued to: | SentryBay Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Friday, May 18, 2012 |
| Expiration date: | Tuesday, May 21, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“DataMask by AOL is a simple and secure software that disguises your personal data from cyber crooks and threatening websites by hiding your keystrokes (anti-keylogging) and diverting you away from sites designed to steal and use your personal information (anti-phishing).”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'EntryProtect' (DataMask by AOL)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00003087% | |
| Kernel CPU: | 0.00002106% | |
| User CPU: | 0.00000981% | |
| Kernel CPU time: | 234 ms/min | |
| Memory |
| Private memory: | 5.2 MB | |
| Private (maximum): | 8.58 MB | |
| Private (minimum): | 5.25 MB | |
| Non-paged memory: | 5.2 MB | |
| Virtual memory: | 60.52 MB | |
| Virtual memory (peak): | 64.99 MB | |
| Working set: | 5.32 MB | |
| Working set (peak): | 8.67 MB | |
| Page faults: | 2,965/min | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 112 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\aol\datamask by aol\epservice.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | EntryProtect |
| Display name: | DataMask by AOL |
| Description: | “DataMask by AOL provides advanced Identity Theft protection by creating a fully secure browsing environment.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| wow64.dll |
| Total CPU: | 0.00008423% | |
| Kernel CPU: | 0.00006739% | |
| User CPU: | 0.00001685% | |
| CPU cycles: | 1,969/sec | |
| Memory: | 276 KB | |
| epservice.exe (main module) |
| Total CPU: | 0.00001965% | |
| Kernel CPU: | 0.00000842% | |
| User CPU: | 0.00001123% | |
| CPU cycles: | 424/sec | |
| Memory: | 52 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows Vista Home Premium |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
100.00% |
|
