» SRS-One-Click-Root.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SRS-One-Click-Root.exe

SRS One Click Root

123 Unlock

It runs as a scheduled task under the Windows Task Scheduler. This file is installed with the program SRS-Root.

File name:

Publisher:

123Unlock GSM Service (signed by 123 Unlock)

Product:

SRS One Click Root

Version:

4.05

MD5:

9639acc78642fbee59880491ecafc204

SHA-1:

7892c554061c2c3ad7bd5e24ea44d3d8650fe63d

SHA-256:

975bc93590b630d0af8d1aec670b0b8ed61288a16b8025d2a6b35627356463b8

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/18/2024 7:00:18 AM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

TROJ_GEN.F47V0601

7.2.272

File size:

151.4 KB (155,000 bytes)

Product version:

4.05

Original file name:

SRS-One-Click-Root.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\srsroot\srs-one-click-root.exe

Digital Signature

Signed by:

123 Unlock

Authority:

Starfield Technologies, Inc.

Valid from:

8/1/2012 4:58:57 PM

Valid to:

8/1/2014 4:58:57 PM

Subject:

CN=123 Unlock, OU=Development, O=123 Unlock, L=Apeldoorn, S=N/A, C=NL

Issuer:

SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

081CB8296AF5D9

File PE Metadata

Compilation timestamp:

3/23/2013 2:27:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:xrg+bcrx2gikB7B8B/XLI0SDgExXxTTHRBKFA5:xrzQ12RUtE/JAgOXx3H2u

Entry address:

0x914C0

Entry point:

60, BE, 00, 50, 47, 00, 8D, BE, 00, C0, F8, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Packer / compiler:

UPX 2.90LZMA

Code size:

116 KB (118,784 bytes)

Scheduled Task

Task name:

{35210F60-A4DA-416F-AE21-0DC217330283}

Trigger:

Registration (Runs on registration)

The file SRS-One-Click-Root.exe has been discovered within the following program.

SRS-Root by 123Unlock GSM Service

Publisher's description - “SRS-Root is an easy to use solution for rooting your android device, the software contains multiple exploits to gain root access on your device. Sometimes apps require special permission that the Android OS, which is based on Linux doesn’t allow.”

www.srsroot.com

About 2% of users remove it

Scan SRS-One-Click-Root.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.