home

rootgenius_en.exe

RootGenius

深圳瓶子科技有限公司

This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.com and multiple other hosts.
Publisher:
深圳瓶子科技有限公司  (signed and verified)

Product:
RootGenius

Version:
1. 8. 7

MD5:
7f3a6e64a5921b2b64e0cc6a31bce066

SHA-1:
de20d78fff32be09dd718abfa4a1554994587b2a

SHA-256:
0542e205946cef8d32a5851299cf2fcd7d4903e39e1ea76e878d7f29e76b65c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:56:38 PM UTC  (today)

File size:
4.7 MB (4,954,744 bytes)

Product version:
1. 8. 7

Copyright:
Copyright 2013

Original file name:
RootGenius.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
深圳瓶子科技有限公司

Authority:
WoSign eCommerce Services Limited

Valid from:
6/20/2013 5:12:22 AM

Valid to:
7/23/2016 5:03:22 PM

Subject:
E=admin@shuame.com, CN=深圳瓶子科技有限公司, O=深圳瓶子科技有限公司, L=深圳市, S=广东省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
04BC78BD029541

File PE Metadata
Compilation timestamp:
3/14/2014 11:55:07 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:eorjQCm2wAPq4M5TIWXvcHedCzbp5k8ARqOI5fLVAxxmo:ZjQ3lACxsWcSRqH5x0Ao

Entry address:
0x3219

Entry point:
E8, C4, 31, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, 68, 2C, 41, 00, 00, 74, 05, E9, 73, 32, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7...
 
[+]

Entropy:
7.9809  (probably packed)

Code size:
51 KB (52,224 bytes)

The file rootgenius_en.exe has been seen being distributed by the following 50 URLs.

https://downloader.disk.yandex.com/disk/2cd5bdea3ec825655c9e4fcae08b44ee3196ee2c95ccea16915304a385163495/57f2f2e6/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

http://dc746.4shared.com/download/.../RootGenius.exe

http://download1106.mediafire.com/8adaz49f6ddg/.../RootGenius_1.8.7.exe

https://downloader.disk.yandex.com/disk/8b0dc1b4d4fe2e5fe4071c05484971d6c9b348964dce2a074ba38ae1a816d914/57d4a51e/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

http://download1200.mediafire.com/o3lmo55nudrg/.../RootGenius.exe

https://downloader.disk.yandex.com/disk/de573db313077396c40cba283ecfd91a7870f7f644e5a83843061d6ffb9ece6c/574064a7/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/db2f8eaaf99eb77829f851d8069e285590b3ec6225290c5ab5b511c0d09def21/577581b8/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/4b790899184eeaf9fd0359e8f758822baba57a85d1f82eebf348a2da500669b2/580680f1/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://mega.nz/temporary/.../KZQCzbiK

https://downloader.disk.yandex.ru/disk/ec8590babc979161968d545576e4d69a53b41efef9fefd49db3a52708257543c/58322740/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/3c3271cb5761f403a8d9e3e4e7351a001912dba1b1549fa5afe9e66544be22e0/57db8d76/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

http://download1664.mediafire.com/icc7tkxbpkug/.../RootGenius_1.8.7.exe

http://download1200.mediafire.com/c81c4qr9a95g/.../RootGenius androidssolution.blogspot.in.exe

http://download2033.mediafire.com/iq7pbqtkd8yg/.../RootGenius_1.8.7.exe

http://download636.mediafire.com/lpncjt2lyjig/.../RootGenius_1.8.7.exe

https://docs.google.com/uc?id=0B9FhjB1UQaITdVZTZzlBcWtPVTQ&export=download

temp:RootGenius-download.exe

https://downloader.disk.yandex.com/disk/dd376b1e33d7ee8324a3b2971929391cdfe44c7ddd144c2ab61c03dcdaf85afe/578ea907/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

temp:Root Genius v1.8.7.exe

http://download1200.mediafire.com/bcrectyem8wg/.../RootGenius.exe

https://dl.dropboxusercontent.com/.../KHfCmj23Ux9CLfoNGAongEnmAC9C9XoxS4edf294XrTdU2b8l6FjeNJgsK7K3Xl8?dl=1

https://mega.nz/temporary/.../Lt01XYxS

https://downloader.disk.yandex.com/disk/7014d921a6c9074b0ae08c5d7537d856ae6aba0542d726baf192531d824e5bfc/5740fa2e/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

http://download1106.mediafire.com/ken1fdlylk3g/.../RootGenius_1.8.7.exe

https://downloader.disk.yandex.com/disk/a1ce32805a63da2fcf32adbf28fd5daf42989a9a5e909083afd72f330944fb18/56c1745c/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/de47a92d619ba8a5dbf26ae5fd594e89f0808ff07903e3aa50d10d39ced78103/573f7c7f/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2

https://zima271h.storage.yandex.net/rdisk/1be3788c1de892d6004c9ca356733d65e45a03db9f12fef90b819474f0fedd04/572c02dc/ZlL9smQLURLispDUL56TcEOXfciksKoGwL2Ass7n8dRcBZTxrXB9uM96bX_g-gBNwCXFPkZ7wv7y2tsTO12WGg==?uid=0&filename=RootGenius_en.exe&disposition=attachment&hash=77vVubqwkaxNuK/.../x-msdownload&fsize=4954744&hid=1e6f7f238400921551bbdb970ad3a13a&media_type=executable&tknv=v2&rtoken=nrHhZ6tB36tu&force_default=no&ycrid=na-495541fd4eca24e8e2f6a3592dc986a2-downloader12g

http://www.needrom.com/wp-content/uploads/2014/.../RootGenius_en.exe

http://download.softpedia.com/dl/b1e66641d3aabfde15ec479a3623e891/565993b7/100248037/software/.../RootGenius_en.exe

http://download1947.mediafire.com/7c76767r3fqg/.../RootGenius.exe

Latest 30 of 62 download URLs

Scan rootgenius_en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.