home

net1.exe

Application Manager

Yury Saprykin

Publisher:
Yury Saprykin  (signed and verified)

Product:
Application Manager

Version:
1.29.0.0

MD5:
608cb44e71494df524e9047fad22ce84

SHA-1:
bee5b1800574a2bfd5fa86bd7d71088bc4a10c70

SHA-256:
f054ca23b67e494e292149fb6097c5e774ef7d5cb77e8b71749804587030da6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:35:23 AM UTC  (today)

File size:
477.3 KB (488,760 bytes)

Product version:
1.29.0.0

Original file name:
net1.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\net1-wfds\net1.exe

Digital Signature
Signed by:
Yury Saprykin

Authority:
COMODO CA Limited

Valid from:
3/12/2014 7:00:00 PM

Valid to:
3/12/2017 6:59:59 PM

Subject:
CN=Yury Saprykin, O=Yury Saprykin, STREET=Prospekt Revolucii 25, L=Voronezh, S=VO, PostalCode=394000, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C71956DD75CB37084C7A30D3E4519F3E

File PE Metadata
Compilation timestamp:
6/16/2014 5:17:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:OOOz8iLTNfPRJlW1w+FM1WoFh+jLBr+zp3MylRyrAnpY1/8yYkd4R99bVpkp:/K8iLTNfkS+G1Wov+jLBSlVlAKS8jlQ

Entry address:
0x6CB0E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0252

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
427 KB (437,248 bytes)

The file net1.exe has been seen being distributed by the following 2 URLs.

http://www.softportal.com/getsoft-19646-prevent-restore-2.html

http://privacyroot.com/software/.../setup_prevent_restore.exe

Scan net1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.