home

NMSService.exe

IPHost Network Monitor

ITelSib Ltd.

It runs as a separate (within the context of its own process) windows Service named “IPHost Network Monitor”.
Publisher:
ITelSib Ltd.  (signed and verified)

Product:
IPHost Network Monitor

Description:
IPHost Network Monitor Service

Version:
3,5,8152,1

MD5:
f555f1bbc99af03ea2780608f320994e

SHA-1:
99714906cd39dff8003b763e68b9c3bf75b65403

SHA-256:
ce582bda63fe366853b903fa6e272c868961577ca2da80043106d04d1f2c2786

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:29:40 PM UTC  (today)

File size:
1.8 MB (1,859,256 bytes)

Product version:
3,5,8152,1

Copyright:
Copyright (C) 2008-2014 ITelSib Ltd.

Original file name:
NMSService.exe

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Common path:
C:\Program Files\iphost network monitor\nmsservice.exe

Digital Signature
Signed by:
ITelSib Ltd.

Authority:
COMODO CA Limited

Valid from:
2/7/2012 5:30:00 AM

Valid to:
2/7/2015 5:29:59 AM

Subject:
CN=ITelSib Ltd., O=ITelSib Ltd., STREET=Kutateladze str. 4a office A104, L=Novosibirsk, S=Novosibirsk region, PostalCode=630128, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0082965E19AA0C24A704CA812929390AD9

File PE Metadata
Compilation timestamp:
9/9/2014 7:56:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:KYT6RLh2ZMZ/fhEcgmD4/+JlBNlnzFGKHhffGLtkEyInfpXtJmRV5gTby:KYT6Rd28/uHmD0wTzFb3GIk9Tby

Entry address:
0x4250E2

Entry point:
E8, 3B, FF, FF, FF, 05, 71, 40, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, AA, 65, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 82, B3, F8, 94, 62, 47, 59, FF, 98, 40, 9C, EE, 6B, 93, 17, 62, C2, 22, 3D, 3A, 68, 0B, E8, 90, C6, E2, F4, 48, D1, 0D, 86, E8, EC, BA, 55, DC, 2B, 32, 4F, 3E, 2A, ED, B1, 7E, 64, 54, 8E, FD, 24, 92, A4, D2, 2D, CB, 80, D0, 46, 99, AE, 09, 17, B4, AB, 0D, 2A, 96, 04, 20, 17, C2, D0, 8B, 99, EF, 3C, 9E, BE, 36, 7C, 95, DD, DA, 4E, A0, 90, F2, CB, 7F, AD, 09, 56, 2F...
 
[+]

Entropy:
7.0513

Code size:
1.8 MB (1,847,296 bytes)

Service
Display name:
IPHost Network Monitor

Description:
Monitors availability and performance of local network resources and external resources: servers, disk space, services, databases. Sends notifications and regular reports.

Type:
Win32OwnProcess


Scan NMSService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.