» NHOSTSVC.EXE
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

NHOSTSVC.EXE

Netop

Netop Business Solutions A/S

It runs as a separate (within the context of its own process) windows Service named “NetOp Helper ver. 11.10 (2012300)”. This is installed with Netop Remote Control Host.

File name:

NHOSTSVC.EXE

Publisher:

Netop Business Solutions A/S (signed and verified)

Product:

Netop

Description:

Netop Helper Service for Windows NT

Version:

11.10 (2012300)

MD5:

c8346ad938b92d0776ff2a42cb8ff194

SHA-1:

52e7b7ec7a36599c2cfca2aef46b867779901f22

SHA-256:

a3555d31d594bdd07b9771484f63e9644ccbaca46a099f94dfa703df23ea8d0f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/7/2024 9:41:04 PM UTC (today)

File size:

1.8 MB (1,861,696 bytes)

Product version:

11.10 (2012300)

Trademarks:

Netop® and the red kite are registered trademarks of Netop Business Solutions A/S. Windows (TM) is a trademark of Microsoft Corporation.

Original file name:

NHOSTSVC.EXE

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\netop\netop remote control\host\nhostsvc.exe

Digital Signature

Signed by:

Netop Business Solutions A/S

Authority:

VeriSign, Inc.

Valid from:

3/23/2010 8:00:00 AM

Valid to:

3/23/2013 7:59:59 AM

Subject:

CN=Netop Business Solutions A/S, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Netop Business Solutions A/S, L=Birkerod, S=Denmark, C=DK

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

62058D1B4CEFC5A3D0C056EE9133FA19

File PE Metadata

Compilation timestamp:

10/26/2012 10:14:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:AcAPaOHGEAZjRpRhW/Xl3djihilSohdYQ2P6Pyenln0ePU41T8UDZZbz4h1xd:0aYZujRpbW/XNlM2V6Yl7bz4h1xd

Entry address:

0x661F0

Entry point:

E8, 2B, 5E, 04, 00, 85, C0, 75, 01, C3, FF, 25, FC, B2, 4C, 00, 8B, 44, 24, 04, 68, A8, 3E, 44, 00, 52, 50, 51, 8B, 0D, F0, DC, 4C, 00, 51, E8, 9D, 53, 04, 00, C2, 04, 00, 90, 90, 90, 90, 90, 83, EC, 50, 53, 55, 56, 8B, 74, 24, 60, 8B, CE, B8, AB, AA, AA, 2A, 81, E9, D8, 4F, 4C, 00, 57, F7, E9, 8B, 0D, 9C, DC, 4C, 00, 8B, C2, C1, E8, 1F, 03, D0, C7, 44, 24, 14, D8, 4F, 4C, 00, 8B, DA, 8B, 15, F0, DC, 4C, 00, 89, 5C, 24, 18, 8B, 44, 11, 0C, 8D, 2C, 11, 85, C0, 89, 6C, 24, 10, 74, 29, 8B, 45, 08, 3B, D8, 72... 
[+]

Entropy:

5.3171

Code size:

808 KB (827,392 bytes)

Service

Display name:

NetOp Helper ver. 11.10 (2012300)

Service name:

NetOp Host for NT Service

Description:

The Netop Helper Service provides essential functions needed by some Netop programs. Click Stop to stop most Netop programs for all users. Click Restart to reload any Netop programs configured to l

Type:

Win32OwnProcess

The file NHOSTSVC.EXE has been discovered within the following program.

Netop Remote Control Host by Netop Business Solutions A/S

www.trackit.com

About 5% of users remove it

Scan NHOSTSVC.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.