home

net1.exe

Wipe, Secret Disk, Prevent Restore, Safe Startup

Yury Saprykin

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Prevent Restore by PrivacyRoot.com. The file has been seen being downloaded from privacyroot.com.
Publisher:
www.privacyroot.com  (signed by Yury Saprykin)

Product:
Wipe, Secret Disk, Prevent Restore, Safe Startup

Description:
Application Installer

Version:
2.06.0.0

MD5:
fa9fbf9c6e84377593615210de6e78c5

SHA-1:
6250d294b5cf27465d538a05ce4e3991872f07a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:43:21 PM UTC  (today)

File size:
517.6 KB (530,072 bytes)

Product version:
2.06.0.0

Copyright:
privacyroot.com 2002 - 2015

Original file name:
NET2.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\prevent restore\net1.exe

Digital Signature
Signed by:
Yury Saprykin

Authority:
COMODO CA Limited

Valid from:
3/13/2014 1:00:00 AM

Valid to:
3/13/2017 12:59:59 AM

Subject:
CN=Yury Saprykin, O=Yury Saprykin, STREET=Prospekt Revolucii 25, L=Voronezh, S=VO, PostalCode=394000, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C71956DD75CB37084C7A30D3E4519F3E

File PE Metadata
Compilation timestamp:
9/2/2015 3:19:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:nNc+pq8/bi1hiiBGQn+DAab0fYoW/Lfp/ylRyrjYBSReqWZ5oi79HRPp8ly:NpAv1hiw+DAnAoW/LBKlAB5WzoiVgy

Entry address:
0x76A7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
467 KB (478,208 bytes)

Program Uninstaller
Program name:
Prevent Restore

Display publisher:
PrivacyRoot.com

Display version:
4.11

Uninstall string:
"C:\Program Files\Prevent Restore\net1.exe" uninstall


The file net1.exe has been seen being distributed by the following URL.

https://privacyroot.com/software/.../setup_prevent_restore.exe

Scan net1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.