home

nsconnsvrui.exe

AviTice Remote Manager

NetSupport Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Connectivity Server’.
Publisher:
NetSupport Ltd  (signed and verified)

Product:
AviTice Remote Manager

Description:
AviTice Gteway dll

Version:
V12.10

MD5:
8a08a1dac25b8aca632f371821871e2b

SHA-1:
e62aaf11e9594b3f0903c558dc7951551f0dc1ae

SHA-256:
ff657171fdc6420274715681aea889af99ff65e63a9262e25ced1ed48f4a7b87

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 5:27:54 AM UTC  (today)

File size:
763.3 KB (781,616 bytes)

Product version:
V12.10

Copyright:
Copyright (c) 2015, NetSupport Ltd

Original file name:
PCIGW.DLL

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\Program Files\common files\nsl\connectivity server\nsconnsvrui.exe

Digital Signature
Signed by:
NetSupport Ltd

Authority:
VeriSign, Inc.

Valid from:
6/23/2014 2:00:00 AM

Valid to:
9/22/2017 1:59:59 AM

Subject:
CN=NetSupport Ltd, O=NetSupport Ltd, L=Peterborough, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2947C59F3A9D705C589106B8793FDE

File PE Metadata
Compilation timestamp:
7/31/2015 4:43:52 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4A6A8

Entry point:
E8, 20, 18, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, 33, 48, 00, 89, 0D, 74, 33, 48, 00, 89, 15, 70, 33, 48, 00, 89, 1D, 6C, 33, 48, 00, 89, 35, 68, 33, 48, 00, 89, 3D, 64, 33, 48, 00, 66, 8C, 15, 90, 33, 48, 00, 66, 8C, 0D, 84, 33, 48, 00, 66, 8C, 1D, 60, 33, 48, 00, 66, 8C, 05, 5C, 33, 48, 00, 66, 8C, 25, 58, 33, 48, 00, 66, 8C, 2D, 54, 33, 48, 00, 9C, 8F, 05, 88, 33, 48, 00, 8B, 45, 00, A3, 7C, 33, 48, 00, 8B, 45, 04, A3, 80, 33, 48, 00, 8D, 45, 08, A3, 8C, 33, 48...
 
[+]

Code size:
431 KB (441,344 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Connectivity Server

Command:
C:\Program Files\common files\nsl\connectivity server\nsconnsvrui.exe \hideui


Scan nsconnsvrui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.