home

ntserv.exe

Rohos Disk, Rohos Logon Key

Tesline-Service s.r.l.

It runs as a separate (within the context of its own process) windows Service named “Rohos welcome screen elements”.
Publisher:
Tesline-Service SRL  (signed by Tesline-Service s.r.l.)

Product:
Rohos Disk®, Rohos Logon Key®

Description:
Rohos Welcome Screen support service.

Version:
1.9.1

MD5:
6c0b714d401b72297aa2ed2d07630331

SHA-1:
5fe23828c1367348461bfadc2750f496bd00123d

SHA-256:
f42a3cc7c212c97a8255bf9a7d95024c29584b5e0a3eb180f5085a3e680a6357

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:34:15 AM UTC  (today)

File size:
74.3 KB (76,120 bytes)

Product version:
1.1.2005

Copyright:
(c) Tesline-service. 2003-2012.

Original file name:
Rohos NTServ.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\rohos\ntserv.exe

Digital Signature
Signed by:
Tesline-Service s.r.l.

Authority:
GlobalSign nv-sa

Valid from:
11/17/2010 3:42:13 PM

Valid to:
1/14/2013 5:15:16 PM

Subject:
CN=Tesline-Service s.r.l., O=Tesline-Service s.r.l., L=Chisinau, S=MD, C=MD

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012C5A7B63E2

File PE Metadata
Compilation timestamp:
11/22/2012 12:09:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
1536:QZJWiw0cXEt7nIDKsbJYt+JxsQ7kZafT5:uJW1XE1nIDKsbJYEJuQ7IE5

Entry address:
0x89AF

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 93, 40, 00, 68, E8, 8A, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 20, 53, 56, 57, 89, 65, E8, 83, 65, FC, 00, 6A, 01, FF, 15, B8, 91, 40, 00, 59, 83, 0D, C0, 33, 41, 00, FF, 83, 0D, C4, 33, 41, 00, FF, FF, 15, B4, 91, 40, 00, 8B, 0D, BC, 33, 41, 00, 89, 08, FF, 15, B0, 91, 40, 00, 8B, 0D, B8, 33, 41, 00, 89, 08, A1, AC, 91, 40, 00, 8B, 00, A3, C8, 33, 41, 00, E8, CA, 00, 00, 00, 83, 3D, C0, C5, 40, 00, 00, 75, 0C, 68, E4, 8A, 40, 00, FF, 15, A8, 91...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
32 KB (32,768 bytes)

Service
Display name:
Rohos welcome screen elements

Service name:
Rohos

Type:
Win32OwnProcess

Group:
UIGroup


Scan ntserv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.