nphost.exe

Net Protector AntiVirus

Biz Secure Labs Pvt. Ltd.

It runs as a windows Service named “NPHost Service”.
Publisher:
Biz Secure Labs Pvt Ltd  (signed by Biz Secure Labs Pvt. Ltd.)

Product:
Net Protector AntiVirus

Description:
NPHost Service

Version:
2015, 7, 27, 1

MD5:
42436f8a34a9bc10ce2125eb457d9a44

SHA-1:
426ca3e3c644f0e90b8998def277dceaf1257d02

SHA-256:
36b9563189dd484b18d486d5a1844665abf53d04bc159d981879d113b771b196

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:04:42 AM UTC  (today)

File size:
187.6 KB (192,143 bytes)

Product version:
2015, 0, 0, 0

Copyright:
Copyright (C) 2014

Original file name:
nphost.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\net protector 2017\nphost.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
12/3/2013 11:19:26 PM

Valid to:
3/1/2017 6:03:38 PM

Subject:
E=support@indiaantivirus.com, CN=Biz Secure Labs Pvt. Ltd., O=Biz Secure Labs Pvt. Ltd., L=Pune, S=Maharashfra, C=IN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121671B9C9C88B96999D212247766A5D404

File PE Metadata
Compilation timestamp:
7/7/2016 10:17:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

Entry address:
0x62FF

Entry point:
E9, FB, 54, 00, 00, E9, A4, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, C8, A1, 41, 00, 89, 0D, C4, A1, 41, 00, 89, 15, C0, A1, 41, 00, 89, 1D, BC, A1, 41, 00, 89, 35, B8, A1, 41, 00, 89, 3D, B4, A1, 41, 00, 66, 8C, 15, E0, A1, 41, 00, 66, 8C, 0D, D4, A1, 41, 00, 66, 8C, 1D, B0, A1, 41, 00, 66, 8C, 05, AC, A1, 41, 00, 66, 8C, 25, A8, A1, 41, 00, 66, 8C, 2D, A4, A1, 41, 00, 9C, 8F, 05, D8, A1, 41, 00, 8B, 45, 00, A3, CC, A1, 41, 00, 8B, 45, 04, A3, D0, A1, 41, 00, 8D, 45, 08, A3, DC, A1, 41...
 
[+]

Entropy:
7.2734

Packer / compiler:
Xtreme-Protector v1.05

Code size:
76 KB (77,824 bytes)

Service
Display name:
NPHost Service

Service name:
nphost

Type:
Win32OwnProcess, InteractiveProcess


Scan nphost.exe - Powered by Reason Core Security