Versions

12.11.2.9	33.33%
12.11.0.16	58.33%
12.10.0.42	8.33%

nst.exe has 3 known versions, the most recent one is 12.11.2.9. It is started as a Windows Service called 'Norton Identity Safe' with the name 'NCO'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 126.61 KB. It is an authenticode code-signed executable issued to Symantec Corporation by the certification authority VeriSign. Some variations of the file have been seen to be installed with the program Norton Identity Safe from Symantec Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0021% including both foreground and background operations, the average private memory consumption is about 15.2 MB with the maximum memory reaching around 15.89 MB. Addionally, typically read and write I/O disk operations is about 1.14 KB per minute for reads and 5 Bytes per minute for writes.