Detects the use of Advanced IP Scanner. Seems to be a popular tool for ransomware groups.
Read the full analysis on IntelFusions