Should I block it?

No, this file is 100% safe to run.

Additional versions

11.2.09170.0	89.47%
11.0.8268.0	7.89%
11.0.8252.0	2.63%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

kernel32.dll

LoadLibraryW, GetLastError, GetCurrentDirectoryW, FreeLibrary, GetProcAddress, SetEnvironmentVariableA, CompareStringW, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringA, GetConsoleMode, GetConsoleCP, InitializeCriticalSectionAndSpinCount, LCMapStringW, VirtualAlloc, GetTimeZoneInformation, GetDateFormatA, GetTimeFormatA, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, VirtualFree, HeapCreate, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStdHandle, ExitProcess, GetModuleHandleW, GetSystemTimeAsFileTime, GetStartupInfoA, GetCommandLineA, RtlUnwind, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetProcessHeap, HeapSize, LocalAlloc, LocalFree, InterlockedExchange, LoadLibraryA, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, InterlockedIncrement, ReleaseMutex, InterlockedDecrement, GetCurrentThreadId, WriteFile, SetEndOfFile, SetFilePointer, lstrlenA, Sleep, InterlockedCompareExchange, SizeofResource, LockResource, LoadResource, TlsFree, TlsSetValue, TlsGetValue, FileTimeToSystemTime, SystemTimeToFileTime, LocalFileTimeToFileTime, TlsAlloc, WaitForMultipleObjects, GetCurrentProcess, GetCurrentThread, GetSystemInfo, GetModuleFileNameA, SetLastError, GetCurrentProcessId, ReadFile, GetTickCount, QueryPerformanceCounter, CompareStringA, GetModuleHandleA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc

shell32.dll

SHGetSpecialFolderPathW

shlwapi.dll

PathCombineW, PathFileExistsW, PathRemoveFileSpecW, PathAppendW, UrlCanonicalizeW, PathAddBackslashW

user32.dll

GetSystemMetrics

nmsrvc.exe

Pure Networks Platform by Cisco-Linksys LLC (Signed)

Remove nmsrvc.exe

Version:	11.2.09170.0
MD5:	cd569fa91ec6f59d045c19d0d3850f44
SHA1:	acd65d8b50a5bd46fc10ed12dc81f28e4049e1a2
SHA256:	8ddd03bb5eb614689d62fd9bdd89a2af960ec07ba18792afaa87d1e565e74ebc

Overview

nmsrvc.exe runs as a service under the name Pure Networks Platform Service (nmservice) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Cisco-Linksys LLC which was issued by the VeriSign certificate authority (CA).

Details

File name:	nmsrvc.exe
Publisher:	Cisco Systems, Inc.
Product name:	Pure Networks Platform
Description:	Pure Networks Platform Service
Typical file path:	C:\Program Files\common files\pure networks shared\platform\nmsrvc.exe
File version:	11.2.09170.0
Size:	632.05 KB (647,216 bytes)
Certificate
Issued to:	Cisco-Linksys LLC
Authority (CA):	VeriSign
Effective date:	Monday, May 18, 2009
Expiration date:	Wednesday, July 11, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'nmservice' (Pure Networks Platform Service)
nmservice

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe'

Network connections

Access through an approved Windows firewall exception

[UDP] listens on port 1196

[UDP] listens on port 57377

[UDP] listens on port 63270

[UDP] listens on port 54861

[UDP] listens on port 58192

[UDP] listens on port 54289

[UDP] listens on port 5353

[UDP] listens on port 57655

[UDP] listens on port 65412

[UDP] listens on port 58606

[UDP] listens on port 57303

[UDP] listens on port 59156

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00249914%	0.028634%
Kernel CPU:	0.00139521%	0.013761%
User CPU:	0.00110393%	0.014873%
Kernel CPU time:	5,595,042 ms/min	100,923,805ms/min
CPU cycles:	15,895,828/sec	17,470,203/sec
Context switches:	96/sec	284/sec
Memory
Private memory:	16.08 MB	21.59 MB
Private (maximum):	21.25 MB
Private (minimum):	3.55 MB
Non-paged memory:	16.08 MB	21.59 MB
Virtual memory:	124.98 MB	140.96 MB
Virtual memory (peak):	141.22 MB	169.69 MB
Working set:	11.09 MB	18.61 MB
Working set (peak):	26.71 MB	37.95 MB
Page faults:	3,987,688/min	2,039/min
I/O
I/O read transfer:	63.67 KB/sec	1.02 MB/min
I/O read operations:	47/sec	343/min
I/O write transfer:	813.16 KB/sec	274.99 KB/min
I/O write operations:	93/sec	227/min
I/O other transfer:	393.67 KB/sec	448.09 KB/min
I/O other operations:	4,706/sec	1,671/min
Resource allocations
Threads:	23	12
Handles:	2891	600
GUI GDI count:	5	103
GUI USER count:	6	49

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\common files\pure networks shared\platform\nmsrvc.exe"
Owner:	SYSTEM
Windows Service
Service name:	nmservice
Display name:	Pure Networks Platform Service
Description:	“Enables Pure Networks Platform services such as file sharing, printer sharing, and network monitoring.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

nmsrvc.exe (main module)
Total CPU:	0.04026696%	0.272967%
Kernel CPU:	0.01601901%	0.107585%
User CPU:	0.02424795%	0.165382%
CPU cycles:	1,681,455/sec	5,741,424/sec
Context switches:	4/sec	79/sec
Memory:	660 KB	1.16 MB
nmcore.dll (Pure Networks Platform by Cisco Systems)
Total CPU:	0.03457519%
Kernel CPU:	0.01751728%
User CPU:	0.01705790%
CPU cycles:	893,059/sec
Context switches:	4/sec
Memory:	3.4 MB
ntdll.dll
Total CPU:	0.01411622%
Kernel CPU:	0.01260859%
User CPU:	0.00150762%
CPU cycles:	93,274/sec
Memory:	1.66 MB
wow64.dll
Total CPU:	0.00503117%
Kernel CPU:	0.00320180%
User CPU:	0.00182936%
CPU cycles:	118,204/sec
Memory:	252 KB
nmagnt.dll (Pure Networks Platform by Cisco Systems)
Total CPU:	0.00101694%
Kernel CPU:	0.00028515%
User CPU:	0.00073179%
CPU cycles:	138,057/sec
Context switches:	4/sec
Memory:	608 KB
advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:	0.00065715%
Kernel CPU:	0.00031128%
User CPU:	0.00034587%
Memory:	620 KB
wow64cpu.dll
Total CPU:	0.00052282%
Kernel CPU:	0.00027060%
User CPU:	0.00025222%
CPU cycles:	43,928/sec
Memory:	32 KB
wlanapi.dll
Total CPU:	0.00003127%
Kernel CPU:	0.00001564%
User CPU:	0.00001564%
CPU cycles:	5,534/sec
Memory:	72 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	44.74%
Windows 7 Ultimate	23.68%
Windows Vista Home Premium	15.79%
Microsoft Windows XP	7.89%
Windows 8 Pro with Media Center	5.26%
Windows 7 Professional	2.63%

Distribution by country

United States installs about 80.56% of Pure Networks Platform.

Distribution by PC manufacturer

PC Manufacturer	distribution
Toshiba	35.00%
Dell	30.00%
Hewlett-Packard	20.00%
GIGABYTE	10.00%
Acer	5.00%

Remove Adware and Spyware Programs, FREE Download!