home

UnlockRoot.exe

UnlockRoot

广州市海珠区维思计算机网络服务部

Publisher:
广州市海珠区维思计算机网络服务部  (signed and verified)

Product:
UnlockRoot

Version:
2, 3, 1, 0

MD5:
1f2e188ca27b3e0596e5cb02da34ac07

SHA-1:
8a96938d7976e16f6ef2785a1ecfd1c4a57311bd

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/13/2025 7:49:05 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
UnclassifiedMalware
17982

ESET NOD32
Win32/UnlockRoot
8.9582

File size:
3.8 MB (3,989,808 bytes)

Product version:
2, 3, 1, 0

Copyright:
Copyright 2011-2012 Anshouj.com

Original file name:
UnlockRoot.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\documents and settings\nano\سطح المكتب\حقيبة الملفات جديد\unlockroot\unlockroot.exe

Digital Signature
Signed by:
广州市海珠区维思计算机网络服务部

Authority:
WoSign, Inc.

Valid from:
11/2/2010 3:00:00 AM

Valid to:
11/2/2012 2:59:59 AM

Subject:
CN=GuangZhou HaiZhu District WeiSi Computer Network Services, OU=WoSign Class 3 Code Signing, O=广州市海珠区维思计算机网络服务部, L=GuangZhou, S=GuangDong, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
351BE252AD6CBD0ECC0011B8C39EA3BB

File PE Metadata
Compilation timestamp:
4/1/2006 1:05:09 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:K6wnES7fpDvfdtsnkaTbD+d6GBALDkQmQ6yrxob+0ua6JJr7aiUwGaIP7vpxecL+:TBcXt2ky+8c8hm86b+nlOiWpjRT+5

Entry address:
0x28E7F0

Entry point:
E8, 1B, 00, 00, 00, 56, 50, 72, 6F, 74, 65, 63, 74, 20, 55, 6C, 74, 69, 6D, 61, 74, 65, 20, 76, 32, 2E, 31, 2E, 30, 2E, 30, 00, 8D, 64, 24, 04, E8, C6, F9, 02, 00, 5E, 66, 1C, 26, 44, 82, 30, 1D, 16, 84, 66, E3, 5D, 41, 70, 05, 47, 53, 77, 82, 26, 71, 44, D3, 4D, 73, 6A, 6A, 33, 64, 5A, 2F, 04, 5E, 31, B6, 0D, FC, 55, 40, 2F, A8, 6A, D0, 2F, 11, 03, D7, 09, 86, 3E, 41, 01, 13, 36, EA, 3E, 8E, 64, C7, 44, F1, 1F, 45, 68, BD, 36, A8, 2C, 39, 19, 7C, 65, BE, 75, 47, 09, 80, 28, 24, 1F, 69, 22, F5, 45, 04, 48...
 
[+]

Entropy:
7.9519  (probably packed)

Code size:
18 KB (18,432 bytes)

Scan UnlockRoot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.