home

netscan.exe

SoftPerfect Network Scanner

SOFTPERFECT PTY. LTD.

This is a setup program which is used to install the application. The file has been seen being downloaded from dl-web.dropbox.com and multiple other hosts.
Publisher:
SoftPerfect Research  (signed by SOFTPERFECT PTY. LTD.)

Product:
SoftPerfect Network Scanner

Description:
Network Scanner Application (64-bit)

Version:
5.4.9.0

MD5:
6212f11a379a5e95c6d1b2de73fa1629

SHA-1:
8cd25e63817dfda120006e51f4b96d5c60823a9c

SHA-256:
c42d6ffb824ac9912e183c28fa0bb1520a26af7d84e76f3b8ef4e0b19f651df3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/1/2024 2:37:18 AM UTC  (today)

File size:
1.1 MB (1,187,016 bytes)

Product version:
5.4.9.0

Copyright:
2003-2012 SoftPerfect Research

File type:
Executable application (Win64 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\netscan.exe

Digital Signature
Signed by:
SOFTPERFECT PTY. LTD.

Authority:
GlobalSign nv-sa

Valid from:
9/17/2012 2:59:41 PM

Valid to:
12/17/2015 1:59:41 PM

Subject:
CN=SOFTPERFECT PTY. LTD., O=SOFTPERFECT PTY. LTD., L=KENSINGTON PARK, S=SOUTH AUSTRALIA, C=AU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D3E3CF8CC5546295D1696F43CEF8BA42

File PE Metadata
Compilation timestamp:
12/18/2012 2:25:47 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:SxJ4Wgvt5OrWa/LtNZzI5lD2lMgTEfYmmOd0Srgik9nm:I4vvDOrRNstkm

Entry address:
0x4CF80D

Entry point:
57, 56, 53, 51, 52, 41, 50, 48, 8D, 05, DE, 0A, 00, 00, 48, 8B, 30, 48, 03, F0, 48, 2B, C0, 48, 8B, FE, 66, AD, C1, E0, 0C, 48, 8B, C8, 50, AD, 2B, C8, 48, 03, F1, 8B, C8, 57, 44, 8B, C1, FF, C9, 8A, 44, 39, 06, 88, 04, 31, 75, F5, 41, 51, 55, 2B, C0, AC, 8B, C8, C1, E9, 04, 51, 24, 0F, 50, AC, 8B, C8, 02, 0C, 24, 50, 48, C7, C5, 00, FD, FF, FF, 48, D3, E5, 59, 58, 48, C1, E0, 20, 48, 03, C8, 58, 48, 8B, DC, 48, 8D, A4, 6C, 90, F1, FF, FF, 50, 51, 48, 2B, C9, 51, 51, 48, 8B, CC, 51, 66, 8B, 17, C1, E2, 0C...
 
[+]

Code size:
3.9 MB (4,049,920 bytes)

The file netscan.exe has been seen being distributed by the following 2 URLs.

https://dl-web.dropbox.com/get/Programas/Netscan/.../netscan.exe

http://brainy.mine.nu/.../netscan.exe

Scan netscan.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.