» NMSService.exe
Overview
Analysis
File Details
Behaviors (1)

NMSService.exe

IPHost Network Monitor

ITelSib Ltd.

It runs as a separate (within the context of its own process) windows Service named “IPHost Network Monitor”.

File name:

NMSService.exe

Publisher:

ITelSib Ltd. (signed and verified)

Product:

IPHost Network Monitor

Description:

IPHost Network Monitor Service

Version:

3,5,7298,1

MD5:

c3b3049af77f430a7eb355b906c431cd

SHA-1:

250d79b7616cec140196adb42e3b29d0f9db925e

SHA-256:

f50efd1463e32acdd5938b17a0d394921986ea4574277fd849361e6addff2a56

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:16:20 AM UTC (today)

File size:

1.8 MB (1,854,648 bytes)

Product version:

3,5,7298,1

Original file name:

NMSService.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\iphost network monitor\nmsservice.exe

Digital Signature

Signed by:

ITelSib Ltd.

Authority:

COMODO CA Limited

Valid from:

2/7/2012 3:00:00 AM

Valid to:

2/7/2015 2:59:59 AM

Subject:

CN=ITelSib Ltd., O=ITelSib Ltd., STREET=Kutateladze str. 4a office A104, L=Novosibirsk, S=Novosibirsk region, PostalCode=630128, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0082965E19AA0C24A704CA812929390AD9

File PE Metadata

Compilation timestamp:

2/19/2014 11:56:21 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

24576:MgZu9aIAhDJA7xXhHzYad7Ta58uzNh1M6tLJbOCKkb3q68HyInfwh6UsSw24nydc:nZEaIAhDJAdXZYaF+htFiCX9hdswdc

Entry address:

0x426F36

Entry point:

E8, 3B, FF, FF, FF, 05, DC, 70, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 5B, 13, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, A8, 0D, 44, C8, 3B, B0, FD, DF, 50, 9D, B2, 25, F3, 3A, D5, AC, 05, 0D, EE, 17, FD, CE, DE, B6, 96, 7A, 09, 89, 1A, 09, 6D, 02, 70, 2C, EE, 52, 54, EB, AE, AB, 29, 67, B2, 06, BD, 81, 7F, 05, 74, BF, 69, EF, 5C, 6D, AE, 88, 29, 3B, F2, 0D, 64, DF, 40, C8, 20, 5A, 99, E3, 18, 5A, 14, 1D, B2, 07, 52, AD, F1, AB, E1, B8, 05, C2, FB, EC, 4A, F5, AA, F6, 9B, EC, 40, 1B... 
[+]

Entropy:

7.0590

Code size:

1.8 MB (1,843,200 bytes)

Service

Display name:

IPHost Network Monitor

Description:

Monitors availability and performance of local network resources and external resources: servers, disk space, services, databases. Sends notifications and regular reports.

Type:

Win32OwnProcess

Scan NMSService.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.