Analysis

  • max time kernel
    306263s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    02-02-2023 13:43

General

  • Target

    6e54f1fe6fb57c6548a303d4e2172bca3adcac89.apk

  • Size

    6.8MB

  • MD5

    3bf8d7db32e0b9a02e225d90e46be541

  • SHA1

    6e54f1fe6fb57c6548a303d4e2172bca3adcac89

  • SHA256

    c776f0f2e6ae97d602f2d4e2ef61bb78c6702a1e9931467905af731d9396e49e

  • SHA512

    82fd2d8b5d9b6830cedc7eecea9d0f8c06364ce488b647444a7c99b9b260a46bdc324a0ec8f2813815c1b49e6485e73698b6821b0f0139453dc07b74cdb6cc27

  • SSDEEP

    196608:17cHvScXWAMclUHh+KK9XPvCX2E+By39tw+sU+40s9i:17cHvDV+HoKKxPvuhvNtwpGXi

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • kingoroot.supersu
    1⤵
      PID:4120
      • su
        2⤵
          PID:4153
        • su
          2⤵
            PID:4207
          • sh
            2⤵
              PID:4305
              • cat proc/cpuinfo
                3⤵
                  PID:4378
            • kingoroot.supersu:salmon
              1⤵
                PID:4231
                • su
                  2⤵
                    PID:4349

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/user/0/kingoroot.supersu/cache/weather.zip
                  Filesize

                  75KB

                  MD5

                  fc58fc7e17b6baaf2ad987b8cad6ce0d

                  SHA1

                  6ad03eb20fddda2aee1438d11c414c91d8fe12cf

                  SHA256

                  47988bb29a458d2ad9d38d3b1e2370793f22ded7bee07c8f9e72952d285ce39f

                  SHA512

                  0c713d9cb51c55ecae21490b0ad6c9a27d398ea594ab691d215a1f03e47df50e1f81d352ce46710ae6236eae1589b689481afc18e4d9a36d5d8fde85c265105c

                • /data/user/0/kingoroot.supersu/databases/du_ad_cache.db
                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/user/0/kingoroot.supersu/databases/du_ad_cache.db-journal
                  Filesize

                  524B

                  MD5

                  79cfa76bca3d4ee42e2db6a3659f7e76

                  SHA1

                  c351682ca8692be85ae13704cc1598e4df2d0cae

                  SHA256

                  e9d48d847ebdeb152ee2505d7c892ab545bdd5029b20252237699de6cbb5f7ea

                  SHA512

                  1a6e12056c51566341cabee747689bb18a40de0c3c2400d99769a8f7410b71e1d44dc9bd80cdc12e5781ef18fe3138350b56f9095633ba7aa08b6e8015234b3f

                • /data/user/0/kingoroot.supersu/databases/du_ad_cache.db-shm
                  Filesize

                  8B

                  MD5

                  7dea362b3fac8e00956a4952a3d4f474

                  SHA1

                  05fe405753166f125559e7c9ac558654f107c7e9

                  SHA256

                  af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                  SHA512

                  1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                • /data/user/0/kingoroot.supersu/databases/du_ad_cache.db-wal
                  Filesize

                  40KB

                  MD5

                  40daf3a08614d4f4ddd141d108096bd7

                  SHA1

                  28bfafd80d38732059ac6b4892ea0949318a3986

                  SHA256

                  f83526674ace1e6fd4ba270f2a3cb4aa2a4eb643877c34836bd63c81ddc3f079

                  SHA512

                  4512a7a774743b1c69aa92068d58d8c20bf8fc2b0193aeb4224044f52eeeb61e9c9d127ce7065f9946b666ab7304e0e9690176a0031c91285ec47a0baad48fc0

                • /data/user/0/kingoroot.supersu/databases/du_ad_ts.db
                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/user/0/kingoroot.supersu/databases/du_ad_ts.db-journal
                  Filesize

                  524B

                  MD5

                  3a3b3d8993ce3ae25d6ca9027f5926a5

                  SHA1

                  b33917bc8741ec352923e684cdf366e9ad05c217

                  SHA256

                  50d720de7a73aab5c6397193d5ff5377c73b3c001dde0b11eaa836b68c06c490

                  SHA512

                  f24a79d2682d728ebdaa52517ff1450a296a6812109bf4a5a3ce5beb2545949039a07283c666887177c45750f3063b2ff24dd137c8ae7e60e757f8ffe8f7413b

                • /data/user/0/kingoroot.supersu/databases/du_ad_ts.db-shm
                  Filesize

                  8B

                  MD5

                  7dea362b3fac8e00956a4952a3d4f474

                  SHA1

                  05fe405753166f125559e7c9ac558654f107c7e9

                  SHA256

                  af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                  SHA512

                  1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                • /data/user/0/kingoroot.supersu/databases/du_ad_ts.db-wal
                  Filesize

                  40KB

                  MD5

                  22a8a5bbfcc1aa70e07a4bff3356af46

                  SHA1

                  f975cbc43d7138d216773b2e97629b0c4511c591

                  SHA256

                  857f773d0d6578d47e0b0d32b1848ecb5c4d92d1d4f7d1240b0b0a610ce730f5

                  SHA512

                  06232edfcb867288c0e88bde7a0dcb37090c28bd0703a2b741bbcae867095c69f092d4e4aeb9eb49d8eec049253e6c09cfaee4dcabb3c7cc4d2b1a7788248494

                • /data/user/0/kingoroot.supersu/databases/du_weather_data.db
                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/user/0/kingoroot.supersu/databases/du_weather_data.db-journal
                  Filesize

                  524B

                  MD5

                  932774290fa7fc29cd0ed7781deffe31

                  SHA1

                  22de0b6bcf4e6ccfdfc8dfd4a32a8d6f1ab1a2a5

                  SHA256

                  1e40e7709b50e6661ce737ab04067d0c595e6d04a9b371c32aae5b1cd6c854ef

                  SHA512

                  6003af9199969f70014fcf6f987533af5cd7630b7367cb4fa1ce5fc90a83d95aa072c94769d1a0c7a81fbc853db1cead50c79d5ef4b8215743f0e7002c00b0c2

                • /data/user/0/kingoroot.supersu/databases/du_weather_data.db-shm
                  Filesize

                  8B

                  MD5

                  7dea362b3fac8e00956a4952a3d4f474

                  SHA1

                  05fe405753166f125559e7c9ac558654f107c7e9

                  SHA256

                  af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                  SHA512

                  1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                • /data/user/0/kingoroot.supersu/databases/du_weather_data.db-wal
                  Filesize

                  40KB

                  MD5

                  29018b5e9a6167ce63104dce501ecd49

                  SHA1

                  039027925a2d23e7e61726970d705828f8d1dfbf

                  SHA256

                  d69f773982899261ad2ee092566de98776ee23833ce14cdf904a98bc242b4d6f

                  SHA512

                  80821da818c036761a35e2e8dcb231eadddf67235cedcea0c578f9ee31ca58c02cca24d06f4c5c2ed663067f7b97f58f93ebb7632358f843dd602356a31afcd8

                • /data/user/0/kingoroot.supersu/databases/salmon.sdk.db
                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/user/0/kingoroot.supersu/databases/salmon.sdk.db-journal
                  Filesize

                  524B

                  MD5

                  3fde3cea747c87ca98c85aec086f6ef0

                  SHA1

                  91212573822eceb72c4a3fa448df49950c3c344f

                  SHA256

                  a193ecca657d29bfc9c7a3d3160a680c34ae360d886586780a90f26d7c1594ae

                  SHA512

                  6a85f6f3801170cf6faf9dc41640f13ca77a4e4788259e3cd43df2e76e313e4e4d9573b8a4d76d45176d46d3f10d867f29cbf4c87b16a192c7ca36ef7f1dd8ff

                • /data/user/0/kingoroot.supersu/databases/salmon.sdk.db-shm
                  Filesize

                  8B

                  MD5

                  7dea362b3fac8e00956a4952a3d4f474

                  SHA1

                  05fe405753166f125559e7c9ac558654f107c7e9

                  SHA256

                  af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                  SHA512

                  1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                • /data/user/0/kingoroot.supersu/databases/salmon.sdk.db-wal
                  Filesize

                  36KB

                  MD5

                  c00b73bed3b2e1ab25015b403361390b

                  SHA1

                  f01e93a7b7a14ac56e49538aee57bca22caf69ca

                  SHA256

                  e725fc1570a59ed898f8202306e2c9a72b6cf24e9f9c024c07e6cfb74635f05a

                  SHA512

                  422868c133846939d27610e69dab7ee155b7868ed1538b47d7f79328440140f42340745a891cb98c2f37856706c2204794a9668fd4fb29386256a0762abbb57c

                • /data/user/0/kingoroot.supersu/databases/whitelist.sqlite
                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/user/0/kingoroot.supersu/databases/whitelist.sqlite-journal
                  Filesize

                  524B

                  MD5

                  72968c497010a850f9c2409ced52ed8d

                  SHA1

                  1e48a1361bd7e941b52a5b92c2bde20fcc3cac09

                  SHA256

                  c4b76a8691b3ddf3878fc24fc2db94adccdd9711a95db71f0270f9c759cc9584

                  SHA512

                  a0dcff10d59359a88a31fc45ee5c0730ca62540039b9519976de9d9c18c3fec9f4c799ab99238fa86c19d242e4449bf6145861713dc42a341ba31a7b046c710e

                • /data/user/0/kingoroot.supersu/databases/whitelist.sqlite-shm
                  Filesize

                  8B

                  MD5

                  7dea362b3fac8e00956a4952a3d4f474

                  SHA1

                  05fe405753166f125559e7c9ac558654f107c7e9

                  SHA256

                  af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                  SHA512

                  1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                • /data/user/0/kingoroot.supersu/databases/whitelist.sqlite-wal
                  Filesize

                  68KB

                  MD5

                  b5590891998bd743c0c6570b510ffece

                  SHA1

                  18866e543e8f67d7b923d287f0d015913a0d3833

                  SHA256

                  67720e0018bd8aef0d5dfd7ba54ad79ec290188718c6803f68fa8a23ed32992c

                  SHA512

                  9f13adfc99062565d160aaaf1188a6b11abf591d7f7e98bc171d4759e285d0f1b8463958406852858ae4d0ed2ab4b18a2a850ee7732dbdc9c5af2df79da0ac8e

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB618019D-0001-1018-C15A51B2B01FBeginSession.cls_temp
                  Filesize

                  79B

                  MD5

                  7a6ab1432cbaa74d0306a72c85d47ce0

                  SHA1

                  51a6190d8fd7ed5ea701045c69f143bc0fa072d5

                  SHA256

                  977d7371c61f232b183f0315061ae8b58dad89ebc2cbd06fc7faa163e4c7932b

                  SHA512

                  51263fe4d2fd899fc3d79559a94eec303f5d041b87ad754a6f079d64ae24d1a8dd9337667443da2025b0cd930c73655a979adf31f638ea8bdcfecbd2a750d41a

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB618019D-0001-1018-C15A51B2B01FSessionApp.cls_temp
                  Filesize

                  115B

                  MD5

                  ce689c1111bc14ace608831fdf55c8a7

                  SHA1

                  9e72dfb85349fff3b170ca3e0ad10f8b972525df

                  SHA256

                  f6dcf9bf3fc582ff9f15afde221981eaabebe6c28098613877e2984d6e38399e

                  SHA512

                  009a96487517d72e79c5d8aeaf52ab61abcc660c150d807c3f9262e020eb56f9d19da5f8465323ee70bec9ac4be440e3c9a2eba9f7cfc633b278841493f76818

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB618019D-0001-1018-C15A51B2B01FSessionDevice.cls_temp
                  MD5

                  d41d8cd98f00b204e9800998ecf8427e

                  SHA1

                  da39a3ee5e6b4b0d3255bfef95601890afd80709

                  SHA256

                  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                  SHA512

                  cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB618019D-0001-1018-C15A51B2B01FSessionOS.cls_temp
                  Filesize

                  14B

                  MD5

                  9b3d4522944ce6396563812bfdb92fa9

                  SHA1

                  6d2a6133c8f01938a48ccc77ef86ad8ca335c020

                  SHA256

                  d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

                  SHA512

                  091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB61C0107-0001-1087-C15A51B2B01FBeginSession.cls_temp
                  Filesize

                  79B

                  MD5

                  1e78162c62da2ba54e4f409913a1a70e

                  SHA1

                  8772e967abd1bc509f5b714c0c6dd039b9e74089

                  SHA256

                  d9dfaa21b324e71ba2c399c7c8ce6842e3b519793d7f7789e60e64182805dcaf

                  SHA512

                  17e6126c4126a9a087d39f38de0e227275997b3187226bfe8051616a35630a8eb79ec882a20170a4e87afc79d69562715ae5febb00e9b149fb7a5f1cae32b5f0

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB61C0107-0001-1087-C15A51B2B01FSessionApp.cls_temp
                  Filesize

                  115B

                  MD5

                  ce689c1111bc14ace608831fdf55c8a7

                  SHA1

                  9e72dfb85349fff3b170ca3e0ad10f8b972525df

                  SHA256

                  f6dcf9bf3fc582ff9f15afde221981eaabebe6c28098613877e2984d6e38399e

                  SHA512

                  009a96487517d72e79c5d8aeaf52ab61abcc660c150d807c3f9262e020eb56f9d19da5f8465323ee70bec9ac4be440e3c9a2eba9f7cfc633b278841493f76818

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB61C0107-0001-1087-C15A51B2B01FSessionDevice.cls_temp
                  Filesize

                  131B

                  MD5

                  d87f53a34efe5cbe996ca5666219f768

                  SHA1

                  80bb5f6eb25aa3bdecd64ff404efdfb915f70b34

                  SHA256

                  fa189d5243fd3991ecebd754855ac993b0cdd1c4a6a7cc7eeab3c864285267d4

                  SHA512

                  b5a4bb1a6bbf9e1e080fc8790422f50fe25092ec3b70b4425970c9e2cc7c2342e32988d8e7a79202de74f53a6d72ac82b554eead4a7c276392198d16f447ec29

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/63DBB61C0107-0001-1087-C15A51B2B01FSessionOS.cls_temp
                  Filesize

                  14B

                  MD5

                  9b3d4522944ce6396563812bfdb92fa9

                  SHA1

                  6d2a6133c8f01938a48ccc77ef86ad8ca335c020

                  SHA256

                  d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

                  SHA512

                  091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

                • /data/user/0/kingoroot.supersu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
                  MD5

                  d41d8cd98f00b204e9800998ecf8427e

                  SHA1

                  da39a3ee5e6b4b0d3255bfef95601890afd80709

                  SHA256

                  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                  SHA512

                  cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                • /data/user/0/kingoroot.supersu/files/log/sr_agent_log
                  MD5

                  d41d8cd98f00b204e9800998ecf8427e

                  SHA1

                  da39a3ee5e6b4b0d3255bfef95601890afd80709

                  SHA256

                  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                  SHA512

                  cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                • /data/user/0/kingoroot.supersu/shared_prefs/TwitterAdvertisingInfoPreferences.xml
                  Filesize

                  213B

                  MD5

                  4bfae0ca54a488849ff83899b4e08107

                  SHA1

                  db4f1557af9bf75f82ae6dfc6d4682d9adda90f2

                  SHA256

                  394c2bfd097a2e17f3b2b62326b8c9d517b48ca4470a22b2a5ecdfa5300eecbc

                  SHA512

                  81562c39a65cb11679bfe993bbe0fb1e9962857a60c6b30451eaf7157fc1b0c6a52bbc1c9602a71d141caa51b7aa114f2fd6a53cc7dfe0b156ff2cdfbd902349

                • /data/user/0/kingoroot.supersu/shared_prefs/_toolbox_prefs.xml
                  Filesize

                  115B

                  MD5

                  6ccabd56a43f72932503ab10f6960f17

                  SHA1

                  de8211df4f6d42fc182fb7318ef14c008bdc5da4

                  SHA256

                  479818e4e5ecaaa469da7ae54cd41d4f66fcd95b75381a2da2d438112967865e

                  SHA512

                  88cfb84341901f62d9ca8b53a94095fb3724834958549f626b4e699f166fc7ea812ec4140dfc6db669f422775ad2118d229f085565d201336d058a051ac97a19

                • /data/user/0/kingoroot.supersu/shared_prefs/_toolbox_prefs.xml
                  Filesize

                  5KB

                  MD5

                  ce089c7b6dba6a5da1009909f43d8904

                  SHA1

                  3ac8aa6fe023d89420f8356133f54c78fdc82473

                  SHA256

                  c82d7fbcb3e70b6342ecf5bf987d2de4da32d09f013755e52e6f2164476dd70a

                  SHA512

                  064c9b1a7c98a18a93d519a81b67e9e3d614718765afa39ac080c26d9bed0abee37ea458f14aabb7eee405c63d204df8d33b848488dbed1d1a9618544c13d65c

                • /data/user/0/kingoroot.supersu/shared_prefs/_toolbox_prefs.xml
                  Filesize

                  5KB

                  MD5

                  0537bd3114ca40cb93d0106b4ec1ab13

                  SHA1

                  d21ce5f08a646b1ea6199649ecd69ff431988bb7

                  SHA256

                  8b0d8861c186d8f7917b522046ea9634d62324139ccda9bd40474b7d5e7392ed

                  SHA512

                  9ec8340ec9cfa486ebd7b3e33697128886b49a9add38562aaede6cec44e3db8890a5a22a66476c1fe0fbea6f60458d4bc40ad4ce5c4e4d232ad7e832710a9e19

                • /data/user/0/kingoroot.supersu/shared_prefs/_weather_prefs.xml
                  Filesize

                  115B

                  MD5

                  860f6f9cb32f94fb0e1d4d70a64035d6

                  SHA1

                  35edccb4879aac34faad2fb33aa62e30f2719b57

                  SHA256

                  d3a8ca3f20c0a0d713a66bb7071661d64489a8173d4410d89328ea725d472e5d

                  SHA512

                  c7805981193ac43954e75abc5b0e32848c35b9e07a1f995e642a71c2561c4b0bd45f512795a04ff658d0eaa1cd0957d94453c766ab3c777fcde721ad5bf7f5d9

                • /data/user/0/kingoroot.supersu/shared_prefs/_weather_prefs.xml
                  Filesize

                  393B

                  MD5

                  a66e8e3dd6b8819ef5e581187abbc70e

                  SHA1

                  d8ce4f8d102a4d4d71ba8337e725b0a90b3f4619

                  SHA256

                  8a38963e0ce2a826908b0ae2c89e289382456ec927c3e4f2119a71e159b16391

                  SHA512

                  5e56deb3eb4dd42d792bd25e55628092e48630d84c292f756878be6d9a36e72f32afc65c5a2d7b34bd4a29745b57ef15f7faa67e20431b708481cebfe07e9e1c

                • /data/user/0/kingoroot.supersu/shared_prefs/com.best.clean.phone.boost.util.prefs.xml
                  Filesize

                  134B

                  MD5

                  f9093cd3d440e195978eb78eaa0c52ef

                  SHA1

                  e07dfc89e6a58c7d4ff6c96674d92986027b1927

                  SHA256

                  9cb2158dddc6d433862ffdc675e4e2147e69a15f41ecbc46d4e96f624d4ea66c

                  SHA512

                  5a2be80c47a5985e8cd06b79c232fb1f91d305cc53f4ae3faeede66e3eed3fa2e1d39294715db51fda72c483805250d1fbe641487c6c08c72b46b559dfaa71ff

                • /data/user/0/kingoroot.supersu/shared_prefs/com.crashlytics.prefs.xml
                  Filesize

                  159B

                  MD5

                  9fe0a674468da84e935f4c2931d44588

                  SHA1

                  d6dec19e9d4fe2adac107cd59c4ba480eb6ec8df

                  SHA256

                  8c1820b8e5a2cefe06c4a61f86de4a3db44b26838a03589984ebd5aaf60e13b0

                  SHA512

                  5d46d276d21f062fca7b8e0770bf37f2189042d4c992f63a3063b6101349eab835a2d0cec8aa9b6ad2718933f939866622a2f2800b306355e8e2936b80e2116c

                • /data/user/0/kingoroot.supersu/shared_prefs/com.crashlytics.sdk.android.crashlytics-core:com.crashlytics.android.core.CrashlyticsCore.xml
                  Filesize

                  137B

                  MD5

                  d3841f5d93fdd0753146ab42b311f58f

                  SHA1

                  0053aa5e87ec96611b8694f24b1318b8ffd2c3a3

                  SHA256

                  2497c778a2a5878f937f5f7969a1e705dd584a45156dd31cb593cfded89fcd52

                  SHA512

                  02914054a6f0add844323f3dc122b39a156427cd4ac7d6f3b911b3a13cb00525c7e613f8f9a3bbbb55bff755ec4cc2edb9169f8eff7aac7e138670264cd1a4ed

                • /data/user/0/kingoroot.supersu/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
                  Filesize

                  125B

                  MD5

                  7f72a0e25eafdeb4c7d2dc814d70fc89

                  SHA1

                  bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae

                  SHA256

                  f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424

                  SHA512

                  696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  109B

                  MD5

                  c877439127c3fc4bd3ad4b5b2465a8a1

                  SHA1

                  328ecae220282642401147132f8a6d1fc2887120

                  SHA256

                  8c99f8747dd7bf1889dad9f6eba70f55f3838aa587f79f217b5340c2006177f5

                  SHA512

                  ee9cf9582f75b769357da22abeb973ae2fa8f9ca4e434534bdc5449ea7aab865876432707d5e9d64ac4fe83624aca3e27e8a8b4b5b15237a53b62fa2d852623d

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  177B

                  MD5

                  d3ade0bc1dc1a34e06df11de4281cd86

                  SHA1

                  647bb4e4b5a1cc15763c7f99a7b9f70993913f58

                  SHA256

                  ea4d399eb6f5fe684f8682c94872ce10f464b10c450b8729745de8a7295c74d8

                  SHA512

                  3a60eee73a5667053118e7b96223d587d70b1cfb03957a24e7c698bf8771baaf0a0faf6a957ca158438751534286ce551505e674332d3c367ced621950621614

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  734e14a5a1d8295d1ef8b528b2a0837c

                  SHA1

                  8b755c8fa2af28679cd38c550954dd64e07705ba

                  SHA256

                  3529f7088563766cf6b844e5f2fa50855664ac3cd5c79120e81305be57cf61a3

                  SHA512

                  fd94114b66fa33d1b49fc5d54a3a145cf0eb1c14487073081a2501b43a83523f422e304405e88208ec058a1aad7b5b8989375c376e96b4420fad8cd830967311

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  5925ccf7bb0ad2859b95c9bc7dbc119f

                  SHA1

                  4b0ddadbda24fe97c3ed0d48f407c9fd3bfd315e

                  SHA256

                  9ec1d7bb48ea4aa3159dec9bc4925518888b1bf9c2e97a3f96f163493b07f32d

                  SHA512

                  b59354b16535ef69124273d0ba85399974d94e34f86a8ef840df211644b6c3d6c3b1a62e48fc5f2acafc9c0fdbd25d07774b14d1dd432f4aa2b293c7a5b522eb

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  734e14a5a1d8295d1ef8b528b2a0837c

                  SHA1

                  8b755c8fa2af28679cd38c550954dd64e07705ba

                  SHA256

                  3529f7088563766cf6b844e5f2fa50855664ac3cd5c79120e81305be57cf61a3

                  SHA512

                  fd94114b66fa33d1b49fc5d54a3a145cf0eb1c14487073081a2501b43a83523f422e304405e88208ec058a1aad7b5b8989375c376e96b4420fad8cd830967311

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  5925ccf7bb0ad2859b95c9bc7dbc119f

                  SHA1

                  4b0ddadbda24fe97c3ed0d48f407c9fd3bfd315e

                  SHA256

                  9ec1d7bb48ea4aa3159dec9bc4925518888b1bf9c2e97a3f96f163493b07f32d

                  SHA512

                  b59354b16535ef69124273d0ba85399974d94e34f86a8ef840df211644b6c3d6c3b1a62e48fc5f2acafc9c0fdbd25d07774b14d1dd432f4aa2b293c7a5b522eb

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  543B

                  MD5

                  68c5420091c901c6720ef7d248358c31

                  SHA1

                  cf3f915c0d5b63bb3c4fa3a00cae416a58256448

                  SHA256

                  e985a12ea57d5b715dae2d025a6cb51f536202776c6b76f26caab891d0db60e7

                  SHA512

                  25d26e1d87dd9e39bed7bcb4e7655e52ef873d01f96ae187d01dbfb275da6e889ec18be6f1aef8112c584f34b0e5c02659305053155fa14c77e049157f57ee22

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  254B

                  MD5

                  dc07e68ed0f3d3bbe10ec18843e46c6b

                  SHA1

                  481724262b35d4183a8ef6f5b78e91c47e2ccd36

                  SHA256

                  71ffcb2ea3db78f86e5e487cf8af21d69890fbe8405ab7a5f3831c139b870e72

                  SHA512

                  128dcea4a4d6caed078d7f26bb14725f29456c4464b40d2b64ce5fd0ec81effcfc3621cfd35c601008990107157d460be2f6bde9d994c339fc943565e5208c6d

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  dc8654e9f27df879d129749802b0dcd9

                  SHA1

                  25791e23fca1c12caafa076811cdb645e11d2278

                  SHA256

                  ee795db28e5f43d6c4889428218e77982b50438ef36dbab3a155304116b407e8

                  SHA512

                  d83c0d1841857c8618829aee8b8628c0b0c566f39333823c135f3c412146d7387d76ea7c6bf95f818c40b2207fc9706e0e4f280b77d8e30a016a403fcfd82971

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  8a7cfa93a69b6ac78b334002a4eb2a6f

                  SHA1

                  78d146b00018f3318371b4de4986af9cc099b0f3

                  SHA256

                  36a88ce82b52e1f65dbf474a4322ce485a39e36ac1ef3629fef7b3920722b115

                  SHA512

                  51bfe0cf28858192554806fbae30906dc703ce7fd6f5e32f3db7ffc8d32b2fd1a0f8b12ecf23c23abadf662c12d636b07b0a5d207351352d1b05f7cd4c71f247

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  dc8654e9f27df879d129749802b0dcd9

                  SHA1

                  25791e23fca1c12caafa076811cdb645e11d2278

                  SHA256

                  ee795db28e5f43d6c4889428218e77982b50438ef36dbab3a155304116b407e8

                  SHA512

                  d83c0d1841857c8618829aee8b8628c0b0c566f39333823c135f3c412146d7387d76ea7c6bf95f818c40b2207fc9706e0e4f280b77d8e30a016a403fcfd82971

                • /data/user/0/kingoroot.supersu/shared_prefs/com.salmon.xml
                  Filesize

                  357B

                  MD5

                  8a7cfa93a69b6ac78b334002a4eb2a6f

                  SHA1

                  78d146b00018f3318371b4de4986af9cc099b0f3

                  SHA256

                  36a88ce82b52e1f65dbf474a4322ce485a39e36ac1ef3629fef7b3920722b115

                  SHA512

                  51bfe0cf28858192554806fbae30906dc703ce7fd6f5e32f3db7ffc8d32b2fd1a0f8b12ecf23c23abadf662c12d636b07b0a5d207351352d1b05f7cd4c71f247

                • /data/user/0/kingoroot.supersu/shared_prefs/sdk_scl_pid_config.xml
                  Filesize

                  191B

                  MD5

                  9ccf04e8fd73993100a2fa469788ca1f

                  SHA1

                  342064480616a4c0ca79e092522e889266ddd9d8

                  SHA256

                  41c30cecfc0cf4f2f4206ef4b63212f78e7e7e40ff0f4a91d7e84a5ac66e0542

                  SHA512

                  e7f5cbf8ab94dd1782b3d7db5afab6a47a39d6d0d7711b50e151479c9711624c0f97541a99daef56b3a4c4279816a4050e552466e2c7423499d56cdf5b65d2e7

                • /storage/emulated/0/.googlex9/.xamdecoq0962
                  Filesize

                  82B

                  MD5

                  eb46350c1996031c4bf4c8a89d6f9d1c

                  SHA1

                  af07740a2a0d3a09dcff1ff34cac87a9bcb82b7e

                  SHA256

                  a7b6d8fc555cd8bb4513e9f906661534325c5d8f3da905212c4cd34c209e6229

                  SHA512

                  052c2cb2d4d05fe029ef55c268210d067d2c4e4d6d5d940d3ec029031a3c45a0ad90aeef0bbbce611a6157dffb63a6bbc2ac8d3f21ccd4a0311679ee743eee3c