home

nsfx.exe

Netsweeper Client Filter

Netsweeper Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NetSweeperAgent’.
Publisher:
netsweeper  (signed by Netsweeper Inc.)

Product:
Netsweeper Client Filter

Description:
Server Connection Manager

Version:
3,40,10,10

MD5:
b53eb89458aa51614c78987d422490c5

SHA-1:
2625911fb877afb3bbcf55c1d64015201d610d78

SHA-256:
748c57ddfe13741b26dab665232680fe22d79e6183c336afa6c0b223d587fe09

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 11:37:50 AM UTC  (today)

File size:
326.3 KB (334,144 bytes)

Product version:
3,40,10,10

Copyright:
Copyright (C) 2010

Original file name:
nsfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\netsweeper client filter\nsfx.exe

Digital Signature
Signed by:
Netsweeper Inc.

Authority:
VeriSign, Inc.

Valid from:
12/18/2013 12:00:00 AM

Valid to:
12/24/2014 11:59:59 PM

Subject:
CN=Netsweeper Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Netsweeper Inc., L=Guelph, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7CDE9E8912CEB44BFA85AAA12DC31A3F

File PE Metadata
Compilation timestamp:
3/5/2014 5:46:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:Mr0T0I7NBo005bT1AF98fuBAMl3BLOt+xNcdJiPUcfSqaBer6n45iy2CRIvNjHKe:MgThHo005bT1y98f0R30af796nX1H7

Entry address:
0xB24E

Entry point:
E8, BD, A4, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 56, E8, 45, A6, 00, 00, 59, 83, F8, FF, 74, 50, A1, 00, B3, 43, 00, 83, FE, 01, 75, 09, F6, 80, 84, 00, 00, 00, 01, 75, 0B, 83, FE, 02, 75, 1C, F6, 40, 44, 01, 74, 16, 6A, 02, E8, 1A, A6, 00, 00, 6A, 01, 8B, F8, E8, 11, A6, 00, 00, 59, 59, 3B, C7, 74, 1C, 56, E8, 05, A6, 00, 00, 59, 50, FF, 15, 58, E0, 42, 00, 85, C0, 75, 0A, FF, 15, 60, E0, 42, 00, 8B, F8, EB, 02, 33, FF, 56, E8, 61, A5, 00, 00, 8B, C6, C1, F8, 05, 8B, 04, 85...
 
[+]

Entropy:
6.3249

Code size:
178.5 KB (182,784 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NetSweeperAgent

Command:
C:\Program Files2\netswe~1\nsfx.exe


Scan nsfx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.