» NMsvc.exe
Overview
Analysis
File Details

NMsvc.exe

10-Strike Network Monitor

10-Strike Software

File name:

NMsvc.exe

Publisher:

10-Strike Software (signed and verified)

Product:

10-Strike Network Monitor

Description:

Network Monitor Service

Version:

2.1.0.0

MD5:

1cb6b7a3223b7a93a0d6ea85a8ae18ef

SHA-1:

2631295bd1ec1cecfdf1bcc361c2d19658192f35

SHA-256:

4dc5267922f83093e56898dc69f5222838df366b09102f7b1354114364ddba81

Scanner detections:

2 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/8/2024 6:27:37 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/18155

Dr.Web

BACKDOOR.Trojan

9.0.1.0132

File size:

1.4 MB (1,416,880 bytes)

Product version:

2.1

Original file name:

NMsvc.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\10-страйк мониторинг сети\nmsvc.exe

Digital Signature

Signed by:

10-Strike Software

Authority:

VeriSign, Inc.

Valid from:

2/29/2012 3:00:00 AM

Valid to:

3/1/2013 2:59:59 AM

Subject:

CN=10-Strike Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=10-Strike Software, L=Ulyanovsk, S=Ulyanovsk region, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

396CB55C4CD4D09083E8D5776DB90003

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:svHLhrjvo55nH+2HsulttSi0DEgB+lGlHfYuFxjgi/UvpLHdZBwW4DsO6bF3:KVqZbrSi0DEgB+lGlHfYuFxjgi/UvpLd

Entry address:

0x1000

Entry point:

68, 01, 70, 61, 00, E8, 01, 00, 00, 00, C3, C3, F8, 4A, 40, 4A, DE, 0F, AC, C5, 43, 4B, 8A, 85, C3, 13, 7F, 9B, 24, 6B, 08, D5, A8, 42, 4B, FA, E8, 99, 34, 7D, 0E, 7B, 4C, 0B, D3, 34, 8A, 6C, BA, 82, 16, 8E, 7E, 13, 89, 8B, D9, 76, 52, C2, 1F, D8, 71, 7A, 3B, FD, B0, D0, CF, 0E, 57, D2, 70, 39, 35, E9, 14, 8E, 79, 52, FF, 39, 3F, 45, 3E, D4, 5A, 5E, 1B, 73, 35, 69, 11, 1E, 0B, 6C, 59, A3, CF, 5D, 69, 9F, 32, 19, 15, 2B, EE, 46, 7D, FD, BB, 62, 18, 34, BB, 42, 0F, F1, 5D, 7B, 44, 5C, B8, 72, EC, E8, 71, 02... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.2 MB (1,227,264 bytes)

Scan NMsvc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.