home

hdbNetStat.exe

hdbNetStat

Systemberatung Gregor Schommer

Publisher:
Systemberatung Gregor Schommer  (signed and verified)

Product:
hdbNetStat

Description:
Netstat GUI Tool

Version:
1.0.0.0

MD5:
78a151fa660816bac0bd5b2dbfcd233c

SHA-1:
267c30021dc7da02875e1862a5b9eb4e8f8bf851

SHA-256:
fac8c3b8e52fd545615c23e125072d34762347c37f72a27f00cbcd77ce87c2d9

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 9:40:52 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
336.4 KB (344,520 bytes)

Product version:
1.0

Copyright:
hdb, köln

Original file name:
hdbNetStat.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\hdbnetstat.exe

Digital Signature
Signed by:
Systemberatung Gregor Schommer

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/16/2009 2:00:00 AM

Valid to:
6/17/2011 1:59:59 AM

Subject:
CN=Systemberatung Gregor Schommer, O=Systemberatung Gregor Schommer, L=Königswinter, S=NRW, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3A3B4F7FC4AD6D713AF9FAC791394119

File PE Metadata
Compilation timestamp:
7/29/2008 7:18:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:Xc9gslf3+sZ4NigG+GvBrYJHtaJeFdcXaDBGlCvv6CuK3:XcDf3+s6rG+EBUVtacFV136K

Entry address:
0x1000

Entry point:
B8, F4, 43, 4F, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CC, E9, FB, C8, 4F, 1B, 22, 7C, B4, C8, 0D, BD, 71, A9, C8, 1F, 5F, B1, 29, 8F, 11, 73, 8F, 00, D1, 88, 87, A9, 3F, 4D, 00, 6C, 3C, BF, C0, 80, F7, AD, 35, 23, EB, 84, 82, 6F, 8C, B9, 0A, FC, EC, E4, 82, 97, AE, 0F, 18, D2, 47, 1B, 65, EA, 46, A5, FD, 3E, 9D, 75, 2A, 62, 80, 60, F9, B0, 0D, E1, AC, 12, 0E, 9D, 24, D5, 43, CE, 9A, D6, 18, BF, 22, DA, 1F, 72, 76, B0, 98...
 
[+]

Packer / compiler:
PECompact v2

Code size:
714.5 KB (731,648 bytes)

Scan hdbNetStat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.