» nsctrl.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

nsctrl.exe

NovaBACKUP

NovaStor Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MapsGalaxy Search Scope Monitor’. This is installed with NovaBACKUP.

File name:

nsctrl.exe

Publisher:

NovaStor Corporation (signed and verified)

Product:

NovaBACKUP

Description:

NovaBACKUP Tray Control

Version:

1322

MD5:

01dcf5a20330d1c35055a7acdc76d1cf

SHA-1:

f8bc458a4c2b55d8f151d5c94fa4fb7e994b2542

SHA-256:

7d7eee16188e4ccb5d7d2dc074dce1a8cea03c1f582571026072cd4ca369262c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 3:47:54 AM UTC (today)

File size:

951.6 KB (974,448 bytes)

Product version:

17.5.1322

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\novastor\novastor novabackup\nsctrl.exe

Digital Signature

Signed by:

NovaStor Corporation

Authority:

VeriSign, Inc.

Valid from:

2/14/2013 9:00:00 AM

Valid to:

3/16/2016 8:59:59 AM

Subject:

CN=NovaStor Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NovaStor Corporation, L=Agoura Hills, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

31632969BD3A5D3C192A8962F88087D2

File PE Metadata

Compilation timestamp:

1/26/2016 3:38:59 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

12288:VtEhJR7MfZTElbGhcsZjD8uLGfQ9HTs45sCqTK:VKMRTCyv8uB9HQ45sBW

Entry address:

0x5A9B5

Entry point:

E8, CA, 09, 00, 00, E9, 03, FE, FF, FF, CC, FF, 25, B4, A3, 46, 00, 83, 3D, A4, BF, 4A, 00, 00, 74, 03, 33, C0, C3, 56, 6A, 04, 6A, 20, FF, 15, F4, A2, 46, 00, 59, 59, 8B, F0, 56, FF, 15, 78, A1, 46, 00, A3, A4, BF, 4A, 00, A3, A0, BF, 4A, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 14, 68, 00, 78, 48, 00, E8, D2, 06, 00, 00, 83, 65, DC, 00, FF, 35, A4, BF, 4A, 00, 8B, 35, 24, A1, 46, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, EC, A2, 46, 00, 59, EB, 65, 6A... 
[+]

Entropy:

6.0090

Code size:

416.5 KB (426,496 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

MapsGalaxy Search Scope Monitor

Command:

"C:\Program Files2\mapsga~2\bar\1.bin\39srchmn.exe" \m=2 \w \h

The file nsctrl.exe has been discovered within the following program.

NovaBACKUP by NovaStor

Publisher's description - “Hard drive and system failures happen every day, whether it's just a breakdown - or a completely unexpected disaster. Selecting the correct backup software package is extremely important.”

www.novastor.com/en/software/windows-backup

19% remove it

Scan nsctrl.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.