» NHOSTSVC.EXE
Overview
Analysis
File Details
Behaviors (1)

NHOSTSVC.EXE

Netop

Netop Business Solutions A/S

It runs as a separate (within the context of its own process) windows Service named “NetOp Helper ver. 9.50 (2010084)”.

File name:

NHOSTSVC.EXE

Publisher:

Netop Business Solutions A/S (signed and verified)

Product:

Netop

Description:

Netop Helper Service for Windows NT

Version:

9.50 (2010084)

MD5:

773752669cd021575f2368703a711d06

SHA-1:

f9f9a945ad88a4080e050dbef9b26587b0fc0147

SHA-256:

a3d428a78f2e70e34ed2a861c07d53f3eaabc88f72e24532270f43bd874d26f1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 5:11:55 PM UTC (today)

File size:

1.7 MB (1,734,680 bytes)

Product version:

9.50 (2010084)

Trademarks:

Netop® and the red kite are registered trademarks of Netop Business Solutions A/S. Windows (TM) is a trademark of Microsoft Corporation.

Original file name:

NHOSTSVC.EXE

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\netop\netop remote control\host\nhostsvc.exe

Digital Signature

Signed by:

Netop Business Solutions A/S

Authority:

VeriSign, Inc.

Valid from:

3/23/2010 7:00:00 AM

Valid to:

3/23/2013 6:59:59 AM

Subject:

CN=Netop Business Solutions A/S, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Netop Business Solutions A/S, L=Birkerod, S=Denmark, C=DK

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

62058D1B4CEFC5A3D0C056EE9133FA19

File PE Metadata

Compilation timestamp:

3/26/2010 1:12:27 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:yTOzi+VzFBioGpr5k5o4I63TuVBYz4h1zL:BWciOhGh1zL

Entry address:

0x52B70

Entry point:

E8, BB, 2D, 04, 00, 85, C0, 75, 01, C3, FF, 25, 44, E3, 49, 00, 8B, 44, 24, 04, 68, D0, 18, 44, 00, 52, 50, 51, 8B, 0D, 28, 4C, 4A, 00, 51, E8, 31, 23, 04, 00, C2, 04, 00, 90, 90, 90, 90, 90, 83, EC, 50, 53, 55, 56, 8B, 74, 24, 60, 8B, CE, B8, AB, AA, AA, 2A, 81, E9, 38, A4, 49, 00, 57, F7, E9, 8B, 0D, D4, 4B, 4A, 00, 8B, C2, C1, E8, 1F, 03, D0, C7, 44, 24, 14, 38, A4, 49, 00, 8B, DA, 8B, 15, 28, 4C, 4A, 00, 89, 5C, 24, 18, 8B, 44, 11, 0C, 8D, 2C, 11, 85, C0, 89, 6C, 24, 10, 74, 29, 8B, 45, 08, 3B, D8, 72... 
[+]

Entropy:

5.1873

Code size:

628 KB (643,072 bytes)

Service

Display name:

NetOp Helper ver. 9.50 (2010084)

Service name:

NetOp Host for NT Service

Description:

The Netop Helper Service provides essential functions needed by some Netop programs. Click Stop to stop most Netop programs for all users. Click Restart to reload any Netop programs configured to l

Type:

Win32OwnProcess

Scan NHOSTSVC.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.