filename	netscan.exe
size	655872 (0xa0200)
md5	5c7a67fa3a60c469f6a01cb4e40044af

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x1a6e00
SizeOfInitializedData	0x50400
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1fe001
BaseOfCode	0x1000
BaseOfData	0x1a8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x208000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0x1a7000	0x89200	RW- IDATA
DATA	0x1a8000	0x6000	0x2400	RW- IDATA
BSS	0x1ae000	0x2000	0	RW- IDATA
.idata	0x1b0000	0x4000	0x1400	RW- IDATA
.tls	0x1b4000	0x1000	0	RW- IDATA
.rdata	0x1b5000	0x1000	0x200	RW- IDATA
.reloc	0x1b6000	0x18000	0	RW- IDATA
.rsrc	0x1ce000	0x30000	0xac00	RW- IDATA
.aspack	0x1fe000	0x9000	0x8600	RW- IDATA
.adata	0x207000	0x1000	0	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1fefac	0x434
RESOURCE	0x1ce000	0x2f800
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1fef54	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1fef3c	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

TLS

raw start	raw end	index	callbks	zero fill	flags
0x5b4000	0x5b407c	0x5a80a0	0x5b5010	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
CURSOR	#9	308
CURSOR	#10	308
CURSOR	#11	308
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	DROPDOWNGLYPH	64
BITMAP	ELHEADERASCBMP	152
BITMAP	ELHEADERDESCBMP	152
BITMAP	ELHEADERLEFTBMP	132
BITMAP	ELHEADERPOINTBMP	124
BITMAP	ELHEADERRIGHTBMP	132
BITMAP	ELPOPUPBUTTONDOWNARROW	120
BITMAP	LEAFBMP	176
BITMAP	MINUSBMP	176
BITMAP	PLUSBMP	176
BITMAP	PREVIEWGLYPH	232
ICON	#1	1384
ICON	#2	1736
ICON	#3	2216
ICON	#4	3752
ICON	#5	1128
ICON	#6	2440
ICON	#7	4264
ICON	#8	9640
DIALOG	DLGTEMPLATE	82
STRING	#4074	304
STRING	#4075	1372
STRING	#4076	1116
STRING	#4077	1088
STRING	#4078	1332
STRING	#4079	632
STRING	#4080	512
STRING	#4081	248
STRING	#4082	820
STRING	#4083	412
STRING	#4084	236
STRING	#4085	308
STRING	#4086	864
STRING	#4087	1020
STRING	#4088	920
STRING	#4089	920
STRING	#4090	972
STRING	#4091	244
STRING	#4092	196
STRING	#4093	704
STRING	#4094	1056
STRING	#4095	816
STRING	#4096	788
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	2308
RCDATA	POWEROFF_SERVICE	17408
RCDATA	TAPPFORM	1063
RCDATA	TFORMABOUT	6905
RCDATA	TFORMPOWEROFFPARAMETERS	1441
RCDATA	TFORMSHUTDOWNPARAMETERS	1801
RCDATA	TFRIENDLYNAMES	3576
RCDATA	TFRIENDLYNAMESMODIFY	756
RCDATA	TFRMHEADERSETUP	3147
RCDATA	TINTERFACELISTFORM	3110
RCDATA	TMODALCONTROL	259
RCDATA	TOPTIONSFORM	11771
RCDATA	TPUBLICIPFORM	1075
RCDATA	TSCANNERFORM	73519
RCDATA	TSCANNERLEGENDFORM	886
RCDATA	TUNIVERSALWAITFORM	450
RCDATA	TWAITFORM	489
GROUP_CURSOR	DRAGMULTICOPY	20
GROUP_CURSOR	DRAGMULTIMOVE	20
GROUP_CURSOR	DRAGMULTINO	20
GROUP_CURSOR	DRAGSINGLECOPY	20
GROUP_CURSOR	DRAGSINGLEMOVE	20
GROUP_CURSOR	DRAGSINGLENO	20
GROUP_CURSOR	ELDRAGDROPCURSOR	20
GROUP_CURSOR	ELDRAGDROPNORMALCURSOR	20
GROUP_CURSOR	URLCURSOR	20
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	118
VERSION	#1	864
MANIFEST	#1	581
MANIFEST	#1	946

module_name	hint	ord	function_name
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
user32.dll			GetKeyboardType
advapi32.dll			RegQueryValueExA
oleaut32.dll			SysFreeString
advapi32.dll			RegSetValueExA
mpr.dll			WNetDisconnectDialog
version.dll			VerQueryValueA
gdi32.dll			UnrealizeObject
user32.dll			CreateWindowExA
oleaut32.dll			SafeArrayPtrOfIndex
ole32.dll			DoDragDrop
comctl32.dll			ImageList_SetIconSize
imm32.dll			ImmGetVirtualKey
shell32.dll			ShellExecuteExA
comdlg32.dll			FindTextA
snmpapi.dll			SnmpUtilVarBindFree
wsock32.dll			WSACleanup
winmm.dll			timeSetEvent
advapi32.dll			StartServiceA

StringTable 040904E4

CompanyName	SoftPerfect Research
FileDescription	Network Scanner
FileVersion	3.8.0.177
InternalName	Network Scanner
LegalCopyright	(c) 2003-2008 SoftPerfect Research
LegalTrademarks
OriginalFilename
ProductName	SoftPerfect Network Scanner
ProductVersion	1.0.0.0
Comments	Freeware

VS_FIXEDFILEINFO

FileVersion	3.8.0.177
ProductVersion	3.8.0.177
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	655872	EXE	06/19/1992 22:22:17	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x1d8db4

[?] can't find file_offset of VA 0x1d8e08

[?] can't find file_offset of VA 0x1d8f38

[?] can't find file_offset of VA 0x1d9494

[?] can't find file_offset of VA 0x1d98f0

[?] can't find file_offset of VA 0x1d9d30

[?] can't find file_offset of VA 0x1da264

[?] can't find file_offset of VA 0x1da4dc

[?] can't find file_offset of VA 0x1da6dc

[?] can't find file_offset of VA 0x1da7d4

[?] can't find file_offset of VA 0x1dab08

[?] can't find file_offset of VA 0x1daca4

[?] can't find file_offset of VA 0x1dad90

[?] can't find file_offset of VA 0x1daec4

[?] can't find file_offset of VA 0x1db224

[?] can't find file_offset of VA 0x1db620

[?] can't find file_offset of VA 0x1db9b8

[?] can't find file_offset of VA 0x1dbd50

[?] can't find file_offset of VA 0x1dc11c

[?] can't find file_offset of VA 0x1dc210

[?] can't find file_offset of VA 0x1dc2d4

[?] can't find file_offset of VA 0x1dc594

[?] can't find file_offset of VA 0x1dc9b4

[?] can't find file_offset of VA 0x1dcce4

[?] can't find file_offset of VA 0x1dcff8

[?] can't find file_offset of VA 0x1dd008

[?] can't find file_offset of VA 0x1dd90c

[?] can't find file_offset of VA 0x1e1d0c

[?] can't find file_offset of VA 0x1e2134

[?] can't find file_offset of VA 0x1e3c30

[?] can't find file_offset of VA 0x1e41d4

[?] can't find file_offset of VA 0x1e48e0

[?] can't find file_offset of VA 0x1e56d8

[?] can't find file_offset of VA 0x1e59cc

[?] can't find file_offset of VA 0x1e6618

[?] can't find file_offset of VA 0x1e7240

[?] can't find file_offset of VA 0x1e7344

[?] can't find file_offset of VA 0x1ea140

[?] can't find file_offset of VA 0x1ea574

[?] can't find file_offset of VA 0x1fc4a4

[?] can't find file_offset of VA 0x1fc81c

[?] can't find file_offset of VA 0x1fc9e0

[?] can't find file_offset of VA 0x1fcbcc

[?] can't find file_offset of VA 0x1fcbe0

[?] can't find file_offset of VA 0x1fcbf4

[?] can't find file_offset of VA 0x1fcc08

[?] can't find file_offset of VA 0x1fcc1c

[?] can't find file_offset of VA 0x1fcc30

[?] can't find file_offset of VA 0x1fcc44

[?] can't find file_offset of VA 0x1fcc58

[?] can't find file_offset of VA 0x1fcc6c

[?] can't find file_offset of VA 0x1fcc80

[?] can't find file_offset of VA 0x1fcc94

[?] can't find file_offset of VA 0x1fcca8

[?] can't find file_offset of VA 0x1fccbc

[?] can't find file_offset of VA 0x1fccd0

[?] can't find file_offset of VA 0x1fcce4

[?] can't find file_offset of VA 0x1fccf8

[?] can't find file_offset of VA 0x0

netscan.exe-