06bd97deb8ffad39178f63920d081c88e507f13782f3aaceac02be252d046fb9

Analysis

max time kernel
3078081s
max time network
57s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 15:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

06bd97deb8ffad39178f63920d081c88e507f13782f3aaceac02be252d046fb9.apk
Size

1.8MB
MD5

48eae2e689e87ca4b32136d6022e9a9c
SHA1

f68e74a7833fb0bcaddd8c7f78b04d9624dae971
SHA256

06bd97deb8ffad39178f63920d081c88e507f13782f3aaceac02be252d046fb9
SHA512

244038e1ed02f93945d435fa40dc435c1f3ba1eb53ecaa15c507a2b7b6c2cf3b1951a5678e06c67a6676a39158f2ba2f2e4734de31643839d82dc87f461df6ea
SSDEEP

49152:G4UubVS1ajDu533LWcThB/d9T+x0pUVjKQiQCllw7CiHlOdDHB8molg3L:tUubVgWDc33KAhB1I2pUsQiQCllfhXoK

Score

7^/10

evasion ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

com.sex.position.superman.advanced

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.sex.position.superman.advanced
Checks Android system properties for emulator presence. 1 IoCs

Processes:

com.sex.position.superman.advanced

description ioc process

Accessed system property key: ro.hardware com.sex.position.superman.advanced

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sex.position.superman.advanced

description	ioc	process
Accessed system property	key: ro.hardware	com.sex.position.superman.advanced

Loads dropped Dex/Jar 4 IoCs

Runs executable file dropped to the device during analysis.

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_ttmp/t.jar --output-vdex-fd=46 --oat-fd=52 --oat-location=/data/user/0/com.kingroot.master/app_ttmp/oat/x86/t.odex --compiler-filter=quicken --class-loader-context=&com.sex.position.superman.advanced/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_dx/do.jar --output-vdex-fd=54 --oat-fd=59 --oat-location=/data/user/0/com.kingroot.master/app_dx/oat/x86/do.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.kingroot.master/app_ttmp/t.jar	4192	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_ttmp/t.jar --output-vdex-fd=46 --oat-fd=52 --oat-location=/data/user/0/com.kingroot.master/app_ttmp/oat/x86/t.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.kingroot.master/app_ttmp/t.jar	4119	com.sex.position.superman.advanced
/data/user/0/com.kingroot.master/app_dx/do.jar	4231	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_dx/do.jar --output-vdex-fd=54 --oat-fd=59 --oat-location=/data/user/0/com.kingroot.master/app_dx/oat/x86/do.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.kingroot.master/app_dx/do.jar	4119	com.sex.position.superman.advanced

Requests dangerous framework permissions 11 IoCs

Processes:

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Removes a system notification. 1 IoCs
evasion

Processes:

com.sex.position.superman.advanced

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag com.sex.position.superman.advanced
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.sex.position.superman.advanced

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.sex.position.superman.advanced

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.sex.position.superman.advanced

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.sex.position.superman.advanced

com.sex.position.superman.advanced
1⤵
- Acquires the wake lock.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4119

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_ttmp/t.jar --output-vdex-fd=46 --oat-fd=52 --oat-location=/data/user/0/com.kingroot.master/app_ttmp/oat/x86/t.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4192

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kingroot.master/app_dx/do.jar --output-vdex-fd=54 --oat-fd=59 --oat-location=/data/user/0/com.kingroot.master/app_dx/oat/x86/do.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4231

sh
2⤵
PID:4534

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.kingroot.master/app_rtt/r1 /data/user/0/com.kingroot.master/app_rtt/r1 /data/user/0/com.kingroot.master/app_rtt/rsh
3⤵
PID:4552

sh
2⤵
PID:4573

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.kingroot.master/app_rtt/r2 /data/user/0/com.kingroot.master/app_rtt/r2 -c /data/user/0/com.kingroot.master/app_rtt/rsh
3⤵
PID:4590

sh
2⤵
PID:4611

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.kingroot.master/app_rtt/r3 /data/user/0/com.kingroot.master/app_rtt/r3 -c /data/user/0/com.kingroot.master/app_rtt/rsh
3⤵
PID:4630

sh
2⤵
PID:4651

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.kingroot.master/app_rtt/r4 /data/user/0/com.kingroot.master/app_rtt/r4 -c /data/user/0/com.kingroot.master/app_rtt/rsh
3⤵
PID:4667

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.kingroot.master/app_dx/do.jar
Filesize
15KB

MD5
f7fae58e12330e2351b9ca95f0685f87

SHA1
6c3e8614ffed7b09793015ba8ab79db058bf4af1

SHA256
d832410ba9400a60fd8b6cff8ce635f46d570f692f5060faca0526098e7b571a

SHA512
afdac6a1ffed6e0fb1434f4499ed2e7bcbb45a4583f2ef54704707fbe8941743df2ea5db68b007ac3916cf48564fa7ccc4b244ebaa16c27c5428115b46062e88

Download Submit
/data/user/0/com.kingroot.master/app_dx/do.jar
Filesize
34KB

MD5
13dc57b189c7d3fbbd3a877c109bd07a

SHA1
e1ab69542a82bae1b8218740b05652a2c8a84404

SHA256
f7682c3d2e08b312a55d1fbe191aa5cb023c745c9c70df75aa1405d5875bf74e

SHA512
25fd82037bc659fdc0a90a461771fb09096ebb93ff71270c979fefd88adbed6039c13d576a1b556db73f85b966d5e9563d2bc8723bf67f166c3d219f55591e17

Download Submit
/data/user/0/com.kingroot.master/app_dx/do.jar
Filesize
34KB

MD5
9b2fca6ae1b6463f5d4ead087b5e6587

SHA1
848b97f6ad5f27cd8c84cf74637af73f0b34789d

SHA256
4b10e73c9957fea2ddd846eebf8e13197f86160f95951b67a97a408ba4306b42

SHA512
d0fb7d2b9f842ea80bd914bc8800987ab9892ca9708224ef24a9f65932eb2aa97b593c3f6d1a7fce712c82da285c655e6f40ada19516497158603b3f99450716

Download Submit
/data/user/0/com.kingroot.master/app_dx/do.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_dx/do.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_dx/oat/do.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_dx/oat/x86/do.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_dx/oat/x86/do.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_rtt/SettingProvider.apk
Filesize
24KB

MD5
4d014a5e8129647cd75e05866e89ce63

SHA1
cd0f98d39cff89dc6a48980bccf13b095e25752f

SHA256
c05b4cecea7cacd30e875644b5bf4a29db608611e4c6b03f313e925e4d6f19e9

SHA512
4e044da13f08ac08150072e3a7f7c6839e50614b94ba40bebaead83f3864be5e3d9224a8e9f2047b89c698be9617f014908ca7a2b16cbd160ab5d6f93397345a

Download Submit
/data/user/0/com.kingroot.master/app_rtt/dtlrt
Filesize
68KB

MD5
1df194c96e813ebe22f02fc4938e7e48

SHA1
6016ddcfa641e5f114091599fda9e5cb0a79e02e

SHA256
0ebf055b0518543611f4a3c19c25147eef3a7a11a0088ce8f00f3a46d5782458

SHA512
153cacfc901b197a428cb4af9d4020e09dca033ebe46a4718a067b6c62c24d999ac0d9190c02181ecd623dadeac0b16087a10e5c6b120910fe7398971e5d5957

Download Submit
/data/user/0/com.kingroot.master/app_rtt/etlrt
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_rtt/nis
Filesize
21KB

MD5
62c3cf862f30d0d06ae94113386db837

SHA1
c2247bfa1201db8e68f5ef61ad0dce21edc2a781

SHA256
93f15ffd1a95787751e874352376ac71d96ae9c8d3b7828835796510cce66b95

SHA512
7293716c464c0c5a5f3e94c6854e45954c63c32765ed0b1437ccf404cf49829cfada9918c5b40e42e300fd2d43e7ec14353fe96b13fd2eb6514ce0e87f0a1981

Download Submit
/data/user/0/com.kingroot.master/app_rtt/r1
Filesize
27KB

MD5
c27e59f0f943cf7cc2020bda7efb442a

SHA1
c72596d5db85c791757c7eacd030d11ca96ed1e4

SHA256
2389246bc2687dcbacb4fa592175393cb3e1b0322bc52380eb744a095f4fa7dc

SHA512
17d6fc29dfc525b06f0038e159ac5411d4a085bd613239465382c21d560faa820fe25c99fd7a1bc52207a7aa45755bae2e4faf02b813d76142785805582c6806

Download Submit
/data/user/0/com.kingroot.master/app_rtt/r2
Filesize
13KB

MD5
368df668d4b62bdbb73218dd1f470828

SHA1
566e3fd17b4d984785e8a513bccad7fee33e3da3

SHA256
03b1913aac00dfc09269678e6b272aa1c6bee6edaef68fff22ceed57f0fd9c1d

SHA512
9375c5c7430736195a62da522b2c31c675bb2cd280c0f3b52c9574b137a016306ffd5190ffaa1a05f2b70f00129a56424de47aee804354a91ed7afe6818bc49d

Download Submit
/data/user/0/com.kingroot.master/app_rtt/r3
Filesize
17KB

MD5
fb8449d1142a796ab1c8c1b85c7f6569

SHA1
c381e2aba0c023dd322b2bf1222f9404d61e12bd

SHA256
1427926697bd6b766eee626c41129503df9f436692d5e88ad62e259daf5293b3

SHA512
165392d72d8337ff0eb86539f6ba8b27c621a1b0bd1c57e5f72bdf957734d0d557bf8e6003a1cbe6c1438f379c1d82ca101cafccad38183ba122517f1ae0957c

Download Submit
/data/user/0/com.kingroot.master/app_rtt/r4
Filesize
13KB

MD5
04dd488783dffcfd0fa9bbac00dbf0f9

SHA1
3d6f71f4cc7562b813364b70950c577b04541627

SHA256
4fc98a1df9db3598b4c490273ed961e0fce819fb021bb77d277324cefb7851e6

SHA512
b914b97daffe3c1da68294ae6cfa72e107e393a45ef49e7b7f989b9297de7548f5eb8236e0b0d9cb343a4a372ba8d03e8e856a1fe40269d589292d6ccd93a373

Download Submit
/data/user/0/com.kingroot.master/app_rtt/rsh
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/oat/t.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/oat/x86/t.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/oat/x86/t.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/t.jar
Filesize
104KB

MD5
c76b4c615a6be8670e68f00a36e038e4

SHA1
771f645a59e0d8c8623d62c5e15b219b6dc8baa6

SHA256
d8358f897aa498032a706a0eb846419ffb7c9d9e055007a9f9ebfba7cda149d4

SHA512
ea90c5fb93d150f3de42779efac8ce80afb03e833eb839fa85968ea7ff519600f580b324d009c17d8667d2f4a88a7c421c96d7eba31001b93ddae4fea862fda1

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/t.jar
Filesize
104KB

MD5
3040c40b063f22c33d98489460100bc1

SHA1
0edf4f33579ecf1e641557442f9739bb78418064

SHA256
19b9bcd5925ba2b0fd7a4110d9c27ba93f85e36dfc29aa4f1167ee35f13d105f

SHA512
c8c5ab838d9b3e7e568500cbbe20f6111d07f454e5aa4b19fecd280511f899bc8fb8c3491afcc4dc6afb1263c99e5467cfb67db9312a4253d419a853e205213a

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/t.jar
Filesize
250KB

MD5
808fc20c698f9f027c4a646f56dcfeb9

SHA1
a222805f25171d8c5e9e20ca56fe2781830fa929

SHA256
f8114e703d1421f901c25c8f762b2be9b4754b5076fa8468f6579324ca37f5a0

SHA512
a598becf5fb10544f197d5a156d412d6e1510f525286f8f92374c5b8f64f7a6af5b6985d1e41256d53b9a5d8a2580cebce42dd4d31c2f536077875f0eb0b0ed0

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/t.jar
Filesize
250KB

MD5
15ae69a75d62bea24c6692b49eec1129

SHA1
0553cda03040782db315bb973dbbc0b4d12ccc43

SHA256
89d4a2b347eeb0c09379803f3df4e36a0d4be30dafc2974f7f0a8eeb25e812e8

SHA512
173b688fbe5ef107b4764361fa216fd0cfb3531d1d711dcde64bbc1116b28feacf77a951aa6d62dca6a4ec6d0becf5bae1a26e1ef816ca13c134747747bdae84

Download Submit
/data/user/0/com.kingroot.master/app_ttmp/t.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.kingroot.master/app_webview/Web Data-journal
Filesize
1KB

MD5
afda5322fda0be02363a1e8b08da1fea

SHA1
563e315e1d8f02073985820ac026cc7d11e32d2d

SHA256
2efafdf6a154c49ad82833089e3dc0299b7844714d5655b2496ad9d69677f496

SHA512
43fb281f1cb45184d33ed06a373df6b87e738fd4496a0fb976b3a8e39c5d417a5dff953d64cf2360af31dee437ebc3556194829c02ed081c003fc2a6dce565ab

Download Submit
/data/user/0/com.kingroot.master/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_webview/metrics_guid
Filesize
36B

MD5
2e80dfef5cf307d9ea31630a091d7fb0

SHA1
0dc4f4bef38284748ba80316433c2322def93944

SHA256
603f31f0a3b76d2738b182222d7749c0300c9faa955373f5f5eacc8686d04aca

SHA512
9a8052525e680677e26328d68308cd6adc304a017eec1dede4bf1021488e6ff9fb9e49bca8db9c6c6f447aa9a2ceff4ab6584d6c48205bd5af65a43979f6b700

Download Submit
/data/user/0/com.kingroot.master/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kingroot.master/databases/content.db
Filesize
303KB

MD5
ffb1c532e56eab317ecef4e0768a13c5

SHA1
cb8c1cf85ed07a35765e593cbf9bf6a2c58c9453

SHA256
de3a7a84ae471ace55a13aed71e16cda21bbc84879ca0b0b30d86241cf3acfc5

SHA512
951dad43f10a14ddaa16055870319a39b15584b150b3a9501154fadf62fe74880b7c450c665a515abf8f26441ca5a34d0a6704ad591a57428c68e40acfd5e39a

Download Submit
/data/user/0/com.kingroot.master/databases/sdkdb_data
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.kingroot.master/databases/sdkdb_data-journal
Filesize
524B

MD5
af4e6c1dca1f1694f3ef81fe3f396c9d

SHA1
2055fd187829fcaad14a255c3baea0c510c335ee

SHA256
e2520c842f86e66a591ead49117e5b84b5f45b47dc2fa6d218c0c0a6dfdd2c0f

SHA512
cad25fb0cbba5ef3a6c639c9538262aa2bbb0c200787a61d52d5ee5ae21842c210535ab74f76f484a87a204f4e091d1342f7581518d23a3073ac6fc9f41cf4d6

Download Submit
/data/user/0/com.kingroot.master/databases/sdkdb_data-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.kingroot.master/databases/sdkdb_data-wal
Filesize
84KB

MD5
d83c9e2858af27f491608ea550f0b08d

SHA1
eefef2135c4736cd1bccf17e9f3aaa85a6db555c

SHA256
24c35b4350a283cc8429c1572bceb6bc534facf6bb3c6921b08a2b2b02fd40a5

SHA512
a1eee8cf8cc98c7ffb966c58870895109d4174b7fcd040f8e6118007375adb88daf151d0def545195487aa3a81695de6ea2ae21254cc1a9db1caf5811ac9942b

Download Submit
/data/user/0/com.kingroot.master/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.kingroot.master/shared_prefs/com.kingroot.master_preferences.xml
Filesize
102B

MD5
9af6bcb4adb779dcfbfce6b7d5f01a27

SHA1
b1e2aa5e8ce6932ef476b21d2dea55342c8b140e

SHA256
a4818e00394d2669170436df0e93990f081d1daa471283e84aa1d8731b3b59c4

SHA512
f28f7779e5accbec7ed974b48f4b7c5b8883962c207696d9f1d5166475c1bcc8d2e3afe1114042672f87d4538f240339b18f11607a1764bcc879fcd74428ec83

Download Submit
/data/user/0/com.kingroot.master/shared_prefs/com.kingroot.master_preferences.xml
Filesize
146B

MD5
ce2a41dff79fa553f757abe905adefc4

SHA1
9be2c1b0b772c96261cc3bed3f99ae57ecb31ecd

SHA256
0b0dec354960260f7b717f32593526b8d753bad5b88ba80fe300e6b765522ae7

SHA512
97e23490c351bc3db4c740abf1dfb44772330419479456090535ad63c6dd66162c3de535339bb91a2de74b4a531c85ec4307e5db1e51de1b76e2b443a03ed46e

Download Submit