NbkCtrl.EXE

Data Backup PC

Prosoft Engineering, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DataBackup PC Tray Control’.
Publisher:
Prosoft Engineering, Inc.  (signed and verified)

Product:
Data Backup PC

Description:
Data Backup PC Service

Version:
1.0.4.0

MD5:
d0d39845c18a3c56444d47feeb5274f6

SHA-1:
6676c428d99e6703cb67d672b652c1c9918c893a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:37:52 AM UTC  (today)

File size:
397.4 KB (406,936 bytes)

Product version:
1.0.4.0

Copyright:
Prosoft Engineering, Inc. All rights reserved.

Original file name:
NbkCtrl.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\prosoft\databackuppc\nbkctrl.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/12/2007 5:00:00 PM

Valid to:
3/12/2008 4:59:59 PM

Subject:
CN="Prosoft Engineering, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Prosoft Engineering, Inc.", L=Pleasanton, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
697885242EA570891FE6149AE4E9AEDE

File PE Metadata
Compilation timestamp:
7/9/2007 5:28:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x18673

Entry point:
E8, 05, 08, 00, 00, E9, 36, FD, FF, FF, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, FE, 90, 41, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, FC, 00, 00, 00, F6, C3, 01, 74, 07, 57, E8, A2, F6, FF, FF, 59, 8B, C7, 5F, EB, 13, E8, 4B, 0A, 00, 00, F6, C3, 01, 74, 07, 56, E8, 8C, F6, FF, FF, 59, 8B, C6, 5E, 5B, C2, 04, 00, FF, 25, 08, C7, 41, 00, 3B, 0D, A0, 67, 42, 00, 75, 02, F3, C3, E9, 36, 08, 00, 00, CC, FF, 25, 0C, C7, 41, 00, FF, 25, 18, C7, 41, 00, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24...
 
[+]

Entropy:
4.9005

Code size:
108 KB (110,592 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DataBackup PC Tray Control

Command:
"C:\Program Files\prosoft\databackuppc\nbkctrl.exe"


Scan NbkCtrl.EXE - Powered by Reason Core Security