home

CyberarmsIdsService.exe

Cyberarms Intrusion Detection

Cyberarms Limited

It runs as a separate (within the context of its own process) windows Service named “Cyberarms Intrusion Detection Service”.
Publisher:
Cyberarms Limited  (signed and verified)

Product:
Cyberarms Intrusion Detection

Version:
2.1.5

MD5:
79de36697211962f830d332a258af352

SHA-1:
965cb702e02491220cae6e65dfaecc9d0392d055

SHA-256:
fb95901d0535063c05a9efaacf4ffa5b888b109a2fe0fcab86df7f65b6130c09

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 4:31:02 AM UTC  (today)

File size:
56.8 KB (58,152 bytes)

Product version:
2.1.5

Copyright:
Copyright © Cyberarms 2012-2014

Trademarks:
Cyberarms Intrusion Detection

Original file name:
CyberarmsIdsService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\cyberarms\cyberarms intrusion detection\cyberarmsidsservice.exe

Digital Signature
Signed by:
Cyberarms Limited

Authority:
DigiCert Inc

Valid from:
1/13/2014 3:00:00 AM

Valid to:
3/19/2015 3:00:00 PM

Subject:
CN=Cyberarms Limited, O=Cyberarms Limited, L=Wipperfuerth, S=NRW, C=DE

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
02BA4CAA52CCB0281FC7CD23324A5C5C

File PE Metadata
Compilation timestamp:
5/20/2014 11:16:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:fJQAnJIWy7sGFwUy4bFg6CvW55klRsl0CtVnXaVogwUMPM:fJFJLOCU5nFSQtVXaVogcPM

Entry address:
0xB9EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 48, 00, 00, 80, 10, 00, 00, 00, 60, 00, 00, 80, 18, 00, 00, 00, 78, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 02, 00, 00, 00, 90, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 7F, 00, 00, A8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0019

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
38.5 KB (39,424 bytes)

Service
Display name:
Cyberarms Intrusion Detection Service

Service name:
Cyberarms Intrusion Detection

Description:
Intrusion Detection and Defense System for Windows Servers.

Type:
Win32OwnProcess


Scan CyberarmsIdsService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.