NetScopVPN.exe

NetScopVPN Internet Anonyme

NetScop.Net

This is a self-extracting archive and installer. The file has been seen being downloaded from netscop01.com and multiple other hosts.
Publisher:
NetScop.Net

Product:
NetScopVPN Internet Anonyme

Description:
Cette base de données d'installation contient le code et les données nécessaires à l'installation de NetScopVPN Internet Anonyme.

Version:
1.1.0

MD5:
89837252bcc980ce9c80ec8120537e5a

SHA-1:
41ebd64283a8fb22d57bb2fc9ecdc8d0fdd1a17d

SHA-256:
9584d349940346ce655faeec97b88a8d50bc686af0391f5660fa0e814240449d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/21/2024 7:09:04 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsOval
1.3.0.4959

File size:
4.1 MB (4,312,780 bytes)

Product version:
1.1.0

Copyright:
Copyright (C) NetScop.Net

Original file name:
NetScopVPN.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\netscopvpn.exe

File PE Metadata
Compilation timestamp:
9/13/2013 3:54:36 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:ACf0yEVJ54/UjU8Cf0yEVJ54/UjGuFOY9OC9rR8GmvAX0tXTg:SC85C8nFX61RtU

Entry address:
0xB4B89

Entry point:
E8, F4, C9, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 56, FF, 75, 0C, 8D, 4D, E8, E8, 33, EB, FF, FF, 8B, 5D, 08, BE, 00, 01, 00, 00, 3B, DE, 73, 54, 8B, 4D, E8, 83, B9, AC, 00, 00, 00, 01, 7E, 14, 8D, 45, E8, 50, 6A, 01, 53, E8, 64, 7F, 00, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, C8, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 01, 85, C0, 74, 0F, 8B, 81, CC, 00, 00, 00, 0F, B6, 04, 18, E9, A3, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C3, E9, 9C, 00, 00, 00, 8B...
 
[+]

Code size:
930.5 KB (952,832 bytes)

The file NetScopVPN.exe has been seen being distributed by the following 11 URLs.

http://netscop01.com/Ghost_Navigator_setup.exe

http://www.netscop.net/.../Ghost.zip

http://gsf-cf.softonic.com/41e/bd6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69665260&instance=softonic_fr&type=PROGRAM&Expires=1479474498&Signature=H05LhSBogtUKaLTwV0bnXUfqERg2xU4cxGY1jnJUhf2poHSgh6c2wUUD83mCn6B-xbYYYnB~8YH-22eROwuttCpv1ptmbaUZ9irjASc9y3qJIin7tnNcMce5rhQwYpdrhWlhHuSOristQHSZ3XdCdPdVtp6JsBbkJESwQLrzoQk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NetScopVPN.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=RE&sid=c8c83fde7d9d0ce83251ae237461447d&upv=e104a5288c71dac116997aef278051e7&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6CC51E5F2F1CC0781D87EC9BB0C214C6E48ECAA65BC2689D755258A45EBA14D521992D40A1FB532EF95B1DC65980A738D3227389BD240CA8C4D16FF157D665E9D305F5F9424DA1086D259A01A2FE924078863B9651009303942145AD32D811060640BBB3DC44010067F991277B527FF25A44703E7F0672FC6B2E1613B6056709B789B3C738FD625F344150429631729A&h=438D4DB0C0A56EB615ADC3A1A5F52BA9EF41940AB3853868BE4A08E2CFF5451D&directdownload=1&f=69665260&d=http://.../NetScopVPN.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=PM&sid=26a25d14f5e4ed8f71d070f74e72a7cc&upv=4a9f9651b9bfa26aa1f00defed47ec9c&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA6CC51E5F2F1CC0781D87EC9BB0C214C6E48ECAA65BC2689D755258A45EBA14D5A3B6C333C8E9C66F74F5DDA38329FE4A981B4CBDEDCBB33A9FE35FAB35CEDB7324EE5BB74CC7E831F8C27FA0DEB58B2658846FAAADAF2901410F620696F029D06316ACCFBC7B41ED999BEAC6A8E8483E1EE5C870AD7945A04F023917BC1125580508F7584B576E16DCD3D3B55946C0A7&h=81AA842D92ABCAE30F8A9718CF2649ECB24553FC23E27B755E19D440CFEAFBAE&directdownload=1&f=69665260&d=http://.../NetScopVPN.exe

Scan NetScopVPN.exe - Powered by Reason Core Security