Categories: Crack

What is “HackTool.Win32.NetScanner”?

The HackTool.Win32.NetScanner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What HackTool.Win32.NetScanner virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
A process attempted to delay the analysis task.
Dynamic (imported) function loading detected
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine HackTool.Win32.NetScanner?


File Info:
name: 97E9BE0AF4400C34B5F5.mlwpath: /opt/CAPEv2/storage/binaries/a71a82e7f285a94e1d4e7b1154ff623f4fa3099a4f960c1f6ef4aa25191dedb6crc32: AD59F05Fmd5: 97e9be0af4400c34b5f5c07754949a09sha1: 166d2a233007d4caba66d95baea0ce2b7c0474e1sha256: a71a82e7f285a94e1d4e7b1154ff623f4fa3099a4f960c1f6ef4aa25191dedb6sha512: 6b15db2f999d855cbdae6afb7e3a8239f51dc59a0d8ff4adb9203cd5fdba97f88d8407fc378dce715846b69e11a0bcaf7644c1582c437ed23e4c56a3bfefbfccssdeep: 49152:F5Zi+ggdFr9Ud8cZgmK3bdbIVBFNTOcglz0Ch98hcVl0oWgX+s8KuqGaX0ToIBAT:lPggdFrKPZgmK3CBLyrucUo4JBAUZLoHtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD16C012B282C0F2D6121530547BBB7BD63AEE620B298AC773D4FF6C5D322D09A76157sha3_384: 85fa68ca75dc4bd5391b4bd5908d62d95be2ee2ffe03f553c11fbdc92b64bfa161a8bed251a44421ca4b257c55ecf340ep_bytes: 558bec6aff6800776f006804224b0064timestamp: 2021-11-05 08:48:45
Version Info:
FileVersion: 1.0.0.0FileDescription: EA开包ProductName: EA开包ProductVersion: 1.0.0.0CompanyName: EA开包LegalCopyright: EA开包Comments: EA开包Translation: 0x0804 0x04b0

HackTool.Win32.NetScanner also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.48746027
FireEye	Generic.mg.97e9be0af4400c34
McAfee	Artemis!97E9BE0AF440
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
CrowdStrike	win/malicious_confidence_60% (D)
Cyren	W32/A-2521f541!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Generic-9820446-0
Kaspersky	HEUR:HackTool.Win32.NetScanner.gen
BitDefender	Trojan.GenericKD.48746027
Avast	Win32:Malware-gen
Ad-Aware	Trojan.GenericKD.48746027
Emsisoft	Trojan.GenericKD.48746027 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
McAfee-GW-Edition	BehavesLike.Win32.Generic.wh
Sophos	Generic PUA BG (PUA)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D2E7CE2B
GData	Win32.Trojan.PSE.15PTMPD
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Evo-gen.C5037759
VBA32	BScope.Trojan.Win64.Agent
ALYac	Trojan.GenericKD.48746027
TACHYON	Trojan/W32.Agent.4141056.J
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	TROJ_GEN.R002H0CCV22
Rising	Trojan.Generic@AI.98 (RDMK:cmRtazr5f/zFJpy5fPGN0H5w6Zb9)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.65CA!tr
BitDefenderTheta	Gen:NN.ZexaF.34638.8t0@a88Qv1pb
AVG	Win32:Malware-gen
Cybereason	malicious.33007d