» NMSService.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

NMSService.exe

IPHost Network Monitor

ITelSib Ltd.

It runs as a separate (within the context of its own process) windows Service named “IPHost Network Monitor”. This is installed with IPHost Network Monitor.

File name:

NMSService.exe

Publisher:

ITelSib Ltd. (signed and verified)

Product:

IPHost Network Monitor

Description:

IPHost Network Monitor Service

Version:

4,0,8741,1

MD5:

0f6744986b770f160c653421a8007b7e

SHA-1:

14bf5b67bbe23c5621e0ccdae30f62b9061a5109

SHA-256:

bacd622c17bb766fdfb644b61e575fbb6d320b70e5c109a5099d96f264f347b1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:14:45 PM UTC (a few moments ago)

File size:

1.7 MB (1,827,512 bytes)

Product version:

4,0,8741,1

Original file name:

NMSService.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

ITelSib Ltd.

Authority:

COMODO CA Limited

Valid from:

2/7/2012 2:00:00 AM

Valid to:

2/7/2015 1:59:59 AM

Subject:

CN=ITelSib Ltd., O=ITelSib Ltd., STREET=Kutateladze str. 4a office A104, L=Novosibirsk, S=Novosibirsk region, PostalCode=630128, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0082965E19AA0C24A704CA812929390AD9

File PE Metadata

Compilation timestamp:

1/29/2015 6:01:15 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

11.0

CTPH (ssdeep):

24576:JYofBb+8p7yOAW4jRgP3iUqR71WfTcDSdsEqvGIm/mDPS0y5p3JCRlHyInfFG:ndp7yOOghAWfTcGdsEwhmTa68G

Entry address:

0x461BA0

Entry point:

E8, 3B, FF, FF, FF, 05, DE, 62, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 63, 0D, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, FB, 8A, 0E, B6, 86, BF, 8F, 21, 62, FD, 71, C3, FD, 30, 24, E3, 39, 21, 5B, AA, 5A, 29, AA, 02, 5C, 53, BE, 5D, D0, 61, E2, 1E, 49, AC, BB, 9C, 8C, 99, 97, DC, F5, 17, C6, 6D, 99, 0E, AA, D6, E0, 8F, 3F, 84, C0, F8, D9, 1A, 32, AB, 63, 4E, EF, 91, E5, 96, 4B, 70, 47, DE, 19, 31, E1, 4C, EE, FC, 67, 7A, 8D, 73, 21, 5E, 82, 95, 30, B5, B9, F3, 71, 24, 50, E9, 05, 65... 
[+]

Entropy:

7.2024

Code size:

1.9 MB (1,958,912 bytes)

Service

Display name:

IPHost Network Monitor

Description:

Monitors availability and performance of local network resources and external resources: servers, disk space, services, databases. Sends notifications and regular reports.

Type:

Win32OwnProcess

The file NMSService.exe has been discovered within the following program.

IPHost Network Monitor by ITelSib

www.iphostmonitor.com

About 6% of users remove it

Scan NMSService.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.