home

nvrstoragesever.exe

NvrStorageServer

HIKVISION DIGITAL TECHNOLOGY CO.,LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NvrStorageSever’.
Publisher:
HIKVISION DIGITAL TECHNOLOGY CO.,LTD.  (signed and verified)

Product:
NvrStorageServer

Version:
2, 1, 0, 3

MD5:
698ff2aeff9686d7cc5d3e4d881cdc90

SHA-1:
63cc353531d5dcdabdd4ab409fe7dd6ebd9fdddd

SHA-256:
ca17c41c19981e3b8ffa26a6f9bd049cdb06acc37470106b6ee48bbfc290a441

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 2:38:56 PM UTC  (today)

File size:
1.8 MB (1,909,120 bytes)

Product version:
2, 1, 0, 3

Copyright:
Copyright (C) 2014

Original file name:
NvrStorageServer

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe

Digital Signature
Signed by:
HIKVISION DIGITAL TECHNOLOGY CO.,LTD.

Authority:
VeriSign, Inc.

Valid from:
7/30/2014 7:00:00 AM

Valid to:
7/30/2016 6:59:59 AM

Subject:
CN="HIKVISION DIGITAL TECHNOLOGY CO.,LTD.", OU=Product Development Dept., O="HIKVISION DIGITAL TECHNOLOGY CO.,LTD.", L=Hangzhou, S=Zhejiang, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
302DC8ABA5EE9CA6C41862ECF1EC8320

File PE Metadata
Compilation timestamp:
12/18/2014 6:49:40 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xAE3F3

Entry point:
E8, 16, 06, 00, 00, E9, D7, FC, FF, FF, CC, FF, 25, F4, D8, 61, 00, FF, 25, F0, D8, 61, 00, FF, 25, EC, D8, 61, 00, FF, 25, E8, D8, 61, 00, FF, 25, E0, D8, 61, 00, 68, 75, E4, 4A, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 80, AE, 5B, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D...
 
[+]

Code size:
746.5 KB (764,416 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NvrStorageSever

Command:
C:\Program Files\ivms-4200 station\ivms-4200\ivms-4200 storage\nvrstoragesever.exe


Scan nvrstoragesever.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.