epsecurityservice.exe
Summary
Endpoint Protection Security Service - security service component for endpoint protection products.
epsecurityservice.exe is the 1311th most commonly executed Windows program in EchoTrail's dataset, observed 1,023 times across enterprise environments. It typically runs from C:\Program Files\Managed Antivirus\Managed Antivirus Engine\Managed Antivirus\Managed Antivirus and it is most often launched by services.exe.
Behavior
Top Paths
- C:\Program Files\Managed Antivirus\Managed Antivirus Engine\Managed Antivirus\Managed Antivirus89.48%
- C:\Program Files\Bitdefender\Endpoint Security9.93%
- C:\Program Files\Bitdefender\EndpointSetupInformation\{df868df6-ca36-44b3-6f0b-5f64e6af0eb3}0.49%
- C:\Users\...0.1%
Top Hashes (SHA256)
- 166707bded40dbea08d421236a373b6d88926cc20bc6c5a8c0f54943dc11a64313.82%
- 1de9a092e4b327cb84b71779c6cfbf30320b25e38d71b572c9102186a722012012.83%
- 9894072f1b39a24f6e224910c1994d4cfbc6e8c0bc228961a2d8a6621b0d831612.17%
- 6eee604621e83a37267b5c8665f67af09253b2e6b1dbf8e66ac9dc8d0dcdeaf311.29%
- d848ada964645f1cfaa6dc123c9ac1ddb6447dbf6f5a86ec70c1b4ab6b7289d56.03%
- 666243050b753f8f61663ae88fd1da759292091adcc7bdc457a390507038cb195.92%
- e8598eb4b240053ce198dae4a80b3ceb0f30053cc41772680050dc2357925c9a5.37%
- 4f8efde6b973df2e103dbc137e24b66dca24df9ef5b8549e58ed9efbc15038d54.17%
- a1dbc33ac5a392a961410802959e617acc485755be3f468617490e2615d835ab4.17%
- 5214c1c4eb0edf155d221e86e31e9c4547dc6fbee51c7e925f440503d194d9fb3.84%
Process Ancestry
Top Grandparents
- wininit.exe93.1%
Top Parents
- services.exe80.43%
- installer.exe19.18%
- EPUpdateService.exe0.29%
Top Children
- regsvr32.exe99.96%
- epconsole.exe0.03%
- epprotectedservice.exe<0.01%
- installer.exe<0.01%
- pnputil.exe<0.01%
- rundll32.exe<0.01%
- WerFault.exe<0.01%
- csrss.exe<0.01%
- DismHost.exe<0.01%
- EPUpdateService.exe<0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about epsecurityservice.exe
Rocky answers questions about epsecurityservice.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.