home

NMSAgent.exe

IPHost Network Monitor

ITelSib Ltd.

It runs as a separate (within the context of its own process) windows Service named “IPHost Network Monitor Agent”.
Publisher:
ITelSib Ltd.  (signed and verified)

Product:
IPHost Network Monitor

Description:
IPHost Network Monitor Agent

Version:
3,5,7298,1

MD5:
c9601bbaff5b55d18f70cf802dfe0293

SHA-1:
e465d71af6a29c53e702977eacd526a535a5c0a2

SHA-256:
c3bba6e459cc0a5363f0c36c319d6bf28d916492cb00ba3fcfd1565ddc64654d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:10:12 AM UTC  (today)

File size:
749.2 KB (767,160 bytes)

Product version:
3,5,7298,1

Copyright:
Copyright (C) 2008-2014 ITelSib Ltd.

Original file name:
NMSAgent.exe

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Common path:
C:\Program Files\iphost network monitor agent\nmsagent.exe

Digital Signature
Signed by:
ITelSib Ltd.

Authority:
COMODO CA Limited

Valid from:
2/7/2012 7:00:00 AM

Valid to:
2/7/2015 6:59:59 AM

Subject:
CN=ITelSib Ltd., O=ITelSib Ltd., STREET=Kutateladze str. 4a office A104, L=Novosibirsk, S=Novosibirsk region, PostalCode=630128, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0082965E19AA0C24A704CA812929390AD9

File PE Metadata
Compilation timestamp:
2/20/2014 3:14:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
12288:Bbdjkb3GaHbAk8XleDseUarlh+NSBaAlFEKzg5hLeAumRxgIlHnyqFo+bgsxdyI6:tdjoclleoqVC4OhiAu2lHyInfxYB

Entry address:
0x1FB789

Entry point:
E8, 3B, FF, FF, FF, 05, 68, 1A, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, D9, 35, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 0B, 42, E2, 3D, A5, E8, 32, 1B, 63, FC, A7, 0B, 58, C4, 30, 70, A4, 18, C3, 15, C4, C8, 0A, 48, 1D, 43, EA, C8, CE, 6F, EA, A3, A6, 2A, B0, 64, 04, 41, C4, 18, 0C, D1, 6F, 2C, 40, 9E, D4, 50, C4, EF, 28, 3D, B0, 46, 24, 98, 2C, 10, 77, DE, E8, 6A, 8C, D7, 0D, 6E, 33, 21, B4, F0, CD, 8D, 41, 00, 2B, BC, 30, C0, 73, FD, FA, 0D, 77, 3A, FD, 8D, 87, 1F, F0, 95, 6D, 9D...
 
[+]

Code size:
620 KB (634,880 bytes)

Service
Display name:
IPHost Network Monitor Agent

Description:
Checks availability and performance of local network resources (supports SNMP, WMI, HTTP(S), PING, IMAP...) on request from IPHost Network Monitor main monitoring service.

Type:
Win32OwnProcess


Scan NMSAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.