VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

File information

Scanner results
Scanner results:15%Scanner(s) (6/39)found malware!
Behavior analysis report:         Habo file analysis
Time: 2014-10-31 10:01:46 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
ahnlab 9.9.9 9.9.9 2013-05-28 Found nothing 4
antivir 1.9.2.0 1.9.159.0 7.11.182.106 Found nothing 15
antiy 114714 AVL141029 2014-10-30 Found nothing 5
arcavir 1.0 2011 2014-05-30 Found nothing 8
asquared 9.0.0.4324 9.0.0.4324 2014-07-03 Found nothing 1
avast 141030-1 4.7.4 2014-10-30 Found nothing 29
avg 2109/7906 10.0.1405 2014-10-17 Found nothing 2
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Found nothing 2
baidusd 1.0 1.0 2014-04-02 Found nothing 1
bitdefender 7.57450 7.90123 2014-10-31 Android.Riskware.Agent.gXWSX 6
clamav 19554 0.97.5 2014-10-30 Found nothing 1
comodo 15023 5.1 2014-10-30 Found nothing 3
ctch 4.6.5 5.3.14 2013-12-01 Found nothing 1
drweb 5.0.2.3300 5.0.1.1 2014-10-31 Found nothing 43
fortinet Found nothing 1
fprot 4.6.2.117 6.5.1.5418 2014-10-30 Found nothing 1
fsecure 2014-04-02-01 9.13 2014-04-02 Android.Riskware.Agent.gXWSX 7
gdata 24.4683 24.4683 2014-10-31 Android.Riskware.Agent.gXWSX 8
hauri 2.73 2.73 2014-10-30 Found nothing 1
ikarus 1.06.01 V1.32.31.0 2014-10-30 PUA.AndroidOS.KingRoot 14
jiangmin 16.0.100 1.0.0.0 2014-08-20 Found nothing 33
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 21
kingsoft 2.1 2.1 2013-09-22 Found nothing 5
mcafee 7520 5400.1158 2014-08-04 Found nothing 9
nod32 0436 3.0.21 2014-09-18 multiple threats 1
panda 9.05.01 9.05.01 2014-10-30 Found nothing 5
pcc 11.242.06 9.500-1005 2014-10-29 Found nothing 2
qh360 1.0.1 1.0.1 1.0.1 Found nothing 13
qqphone 1.0.0.0 1.0.0.0 2014-10-31 Found nothing 1
quickheal 14.00 14.00 2014-10-28 Found nothing 3
rising 25.38.01.01 25.38.01.01 2014-10-28 Found nothing 3
sophos 5.04 3.51.0 2014-08-05 Andr/KnigRt-A 7
sunbelt 3.9.2595.2 3.9.2595.2 2014-10-29 Found nothing 2
symantec 20141028.001 1.3.0.24 2014-10-28 Found nothing 1
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 5
thehacker 6.8.0.5 6.8.0.5 2014-10-27 Found nothing 2
tws 17.47.17308 1.0.2.2108 2014-10-30 Found nothing 7
vba 3.12.26.3 3.12.26.3 2014-10-30 Found nothing 4
virusbuster 15.0.952.0 5.5.2.13 2014-10-28 Found nothing 14
权限列表
许可名称 信息
com.kingroot.kinguser.permission.REQUEST
android.permission.INTERNET 连接网络(2G或3G)
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.INSTALL_PACKAGES 安装应用
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_LOGS 读取系统日志
android.permission.GET_PACKAGE_SIZE 获取应用大小
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
文件信息
VirSCANVirSCAN
安全评分 :74
基本信息
VirSCANVirSCAN
MD5:93a48a07b3152547ac7ff430aa8beeac
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
包名:com.kingroot.kinguser
最低运行环境:Android 2.0
版权:kingroot工作室
关键行为
VirSCANVirSCAN
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [InstallShield Wizard,#32770]
[Window,Class] = [Windows Installer,#32770]
进程行为
VirSCANVirSCAN
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [InstallShield Wizard,#32770]
[Window,Class] = [Windows Installer,#32770]
文件行为
VirSCANVirSCAN
行为描述: 写权限映射文件
详情信息: \DOCUME~1\ADMINI~1\LOCALS~1\Temp\~2.tmp
\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\Setup.INI
\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\0x0409.ini
\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\Applied Discovery"s Redaction and Print Components.msi
DfSharedHeapBEDC7
DfRoot0000BEDC7
DfSharedHeapBEFF3
DfRoot0000BEFF3
行为描述: 创建可执行文件
详情信息: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI4.tmp
行为描述: 修改文件内容
详情信息: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~2.tmp---> Offset = 1024
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\Setup.INI---> Offset = 1024
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\_ISMSIDEL.INI---> Offset = 0
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\0x0409.ini---> Offset = 4096
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\_ISMSIDEL.INI---> Offset = 70
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is3\Applied Discovery"s Redaction and Print Components.msi---> Offset = 4096
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\14ad75.msi---> Offset = 89286
其他行为
VirSCANVirSCAN
行为描述: 窗口信息
详情信息: Pid = 1748, Hwnd=0xd0166, Text = Cancel, ClassName = Button.
Pid = 1748, Hwnd=0xb016a, Text = Preparing to Install..., ClassName = Static.
Pid = 1748, Hwnd=0xb01de, Text = Applied Discovery"s Redaction and Print Components Setup is preparing the InstallShield Wizard, which will guide you through the , ClassName = Static.
Pid = 1748, Hwnd=0xc01d6, Text = Configuring Windows Installer, ClassName = Static.
Pid = 1748, Hwnd=0xd01c8, Text = Progress1, ClassName = msctls_progress32.
Pid = 1748, Hwnd=0xb01b0, Text = IDR_GIF1, ClassName = is_gif_class.
Pid = 1748, Hwnd=0xa0186, Text = InstallShield Wizard, ClassName = #32770.
Pid = 180, Hwnd=0xe016e, Text = &OK, ClassName = Button.
Pid = 180, Hwnd=0xa0198, Text = Adobe Acrobat cannot be found. Please install Adobe Acrobat Full Version 6.0 or greater., ClassName = Static.
Pid = 180, Hwnd=0xd01a4, Text = NewBinary4, ClassName = Static.
Pid = 180, Hwnd=0xe0180, Text = Applied Discovery"s Redaction and Print Components Installer Information, ClassName = MsiDialogCloseClass.
行为描述: 隐藏指定窗口
详情信息: [Window,Class] = [InstallShield Wizard,#32770]
[Window,Class] = [Windows Installer,#32770]
行为描述: 创建互斥体
详情信息: SHIMLIB_LOG_MUTEX
行为描述: 获取系统权限
详情信息: SE_SHUTDOWN_PRIVILEGE
SE_INCREASE_QUOTA_PRIVILEGE
SE_CREATE_TOKEN_PRIVILEGE
危险行为
VirSCANVirSCAN
行为描述: 执行系统命令
详情信息: sh
su
/system/xbin/su
动态列表行为
VirSCANVirSCAN
行为描述: 数据泄露
详情信息: sink:File operation:write data:data:H3gm_P"j{*F9u["(>m= W] XH$wwY
sink:File operation:write data:data:<?xml version='1.0' encoding='utf-8' standalone='yes' ?> <map> <int name="KStatusReportSuReplaceCoun
行为描述: 调用哈希算法
详情信息: MD5
SHA-1
行为描述: 读取文件
详情信息: path:pipe:[3504] length:105
path:pipe:[3505] length:105
path:/proc/783/cmdline length:105
path:/proc/798/cmdline length:105
path:/proc/810/cmdline length:105
path:/proc/840/cmdline length:105
path:/proc/851/cmdline length:105
path:pipe:[3523] length:105
path:pipe:[3522] length:105
path:pipe:[3523] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:102
path:pipe:[3527] length:105
path:pipe:[3528] length:105
path:pipe:[3551] length:105
path:pipe:[3552] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:99
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:21
path:pipe:[3570] length:105
path:pipe:[3571] length:105
path:/proc/871/cmdline length:105
path:/proc/893/cmdline length:105
path:pipe:[3583] length:105
path:pipe:[3582] length:105
path:pipe:[3583] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:83
path:pipe:[3598] length:105
path:pipe:[3597] length:105
path:pipe:[3598] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:70
path:pipe:[3605] length:105
path:pipe:[3604] length:105
path:/data/data/com.kingroot.kinguser/files/cl.conf length:56
path:pipe:[3605] length:105
path:pipe:[3610] length:105
path:pipe:[3609] length:105
path:pipe:[3610] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:72
path:/proc/cpuinfo length:105
path:pipe:[3620] length:105
path:pipe:[3619] length:105
path:pipe:[3624] length:29
path:pipe:[3619] length:105
path:/proc/meminfo length:6
path:pipe:[3620] length:105
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:/proc/meminfo length:6
path:pipe:[3633] length:105
path:pipe:[3630] length:105
path:pipe:[3629] length:105
path:pipe:[3634] length:105
path:pipe:[3629] length:105
path:pipe:[3629] length:105
path:pipe:[3642] length:105
path:pipe:[3629] length:105
path:pipe:[3643] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:71
path:pipe:[3629] length:105
path:pipe:[3647] length:105
path:pipe:[3646] length:105
path:pipe:[3653] length:105
path:pipe:[3654] length:105
path:pipe:[3658] length:105
path:pipe:[3659] length:105
path:pipe:[3662] length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:48
path:pipe:[3663] length:105
path:pipe:[3666] length:105
path:pipe:[3667] length:105
path:pipe:[3670] length:105
path:pipe:[3671] length:105
path:pipe:[3674] length:105
path:pipe:[3675] length:105
path:pipe:[3678] length:29
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:105
path:pipe:[3682] length:29
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:38
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:99
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so (deleted) length:89
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:98
path:pipe:[3690] length:105
path:pipe:[3689] length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:101
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/proc/985/cmdline length:105
path:/proc/987/cmdline length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:78
path:pipe:[3804] length:105
path:pipe:[3803] length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:75
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:54
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:21
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:55
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:51
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:86
path:pipe:[3937] length:29
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:83
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:70
行为描述: 对指定数据计算哈希
详情信息: @MD5SHA@ZF@
Kinguser_Defualt_PassWord_Author_Zfhuang_008
00 30 ff ff ff 82 00 01 ff ff ff ff 00 30 ff ff ff 82 00 01 00 68 ff ff ff a0 00 03 00 02 00 01 00 02 00 02 00 04 00 50 00 17 ff ff ff 9b 00 68 00 30 00 0d 00 06 00 09 00 2a ff ff ff 86 00 48 ff ff ff 86 ff ff ff f7 00 0d 00 01 00 01 00 05 00 05 00 00 00 30 00 44 00 31 00 0b 00 30 00 09 00 06 00 03 00 55 00 04 00 06 00 13 00 02 00 38 00 36 00 31 00 10 00 30 00 0e 00 06 00 03 00 55 00 04 00 08 00 13 00 07 00 42 00 65 00 69 00 6a 00 69 00 6e 00 67 00 31 00 10 00 30 00 0e 00 06 00 03 00 55 00 04 00 07 00 13 00 07 00 42 00 65 00 69 00 6a 00 69 00 6e 00 67 00 31 00 11 00 30 00 0f 00 06 00 03 00 55 00 04 00 03 00 13 00 08 00 4b 00 75 00 6e 00 20 00 59 00 61 00 6e 00 67 00 30 00 1e 00 17 00 0d 00 31 00 32 00 30 00 37 00 33 00 31 00 30 00 38 00 34 00 36 00 33 00 32 00 5a 00 17 00 0d 00 33 00 37 00 30 00 37 00 32 00 35 00 30 00 38 00 34 00 36 00 33 00 32 00 5a 00 30 00 44 00 31 00 0b 00 30 00 09 00 06 00 03 00 55 00 04 00 06 00 13 00 02 00 38 00 36 00 31 00 10 00 30 00 0e 00 06 00 03 00 55 00 04 00 08 00 13 00 07 00 42 00 65 00 69 00 6a 00 69 00 6e 00 67 00 31 00 10 00 30 00 0e 00 06 00 03 00 55 00 04 00 07 00 13 00 07 00 42 00 65 00 69 00 6a 00 69 00 6e 00 67 00 31 00 11 00 30 00 0f 00 06 00 03 00 55 00 04 00 03 00 13 00 08 00 4b 00 75 00 6e 00 20 00 59 00 61 00 6e 00 67 00 30 ff ff ff 81 ff ff ff 9f 00 30 00 0d 00 06 00 09 00 2a ff ff ff 86 00 48 ff ff ff 86 ff ff ff f7 00 0d 00 01 00 01 00 01 00 05 00 00 00 03 ff ff ff 81 ff ff ff 8d 00 00 00 30 ff ff ff 81 ff ff ff 89 00 02 ff ff ff 81 ff ff ff 81 00 00 ff ff ff 84 ff ff ff ba 00 1b 00 19 ff ff ff a7 ff ff ff a5 ff ff ff fc ff ff ff a4 ff ff ff 86 00 28 00 2a ff ff ff bd 00 47 00 2e 00 06 00 17 ff ff ff 93 ff ff ff ef 00 69 ff ff ff e2 ff ff ff d6 00 36 ff ff ff e1 00 07 ff ff ff f5 ff ff ff f9 00 2f 00 32 ff ff ff bf ff ff ff e9 00 18 ff ff ff c9 ff ff ff 8e 00 15 00 61 00 64 ff ff ff ef ff ff ff ae 00 79 00 6a 00 66 ff ff ff e8 ff ff ff 88 00 1e 00 45 00 2a ff ff ff e9 00 08 ff ff ff c4 ff ff ff f7 ff ff ff 9d 00 4c ff ff ff a2 00 12 ff ff ff d2 00 5c 00 14 ff ff ff e9 ff ff ff a4 00 53 00 16 00 44 ff ff ff f3 ff ff ff e4 ff ff ff ed ff ff ff 9d 00 2f 00 60 ff ff ff b9 ff ff ff a1 00 31 00 2d 00 20 ff ff ff fc 00 75 00 48 00 42 00 09 ff ff ff ba ff ff ff b1 ff ff ff 9f 00 35 ff ff ff fa 00 0f 00 39 ff ff ff a4 ff ff ff fe ff ff ff c3 00 52 ff ff ff d9 ff ff ff 8c ff ff ff ef 00 6d ff ff ff cd ff ff ff 8f 00 62 ff ff ff e2 ff ff ff b6 ff ff ff b7 ff ff ff b4 00 0e ff ff ff ba 00 3a 00 0e ff ff ff eb 00 19 00 54 00 36 00 58 ff ff ff e4 00 06 00 15 00 17 00 0b ff ff ff be ff ff ff ed 00 50 ff ff ff d2 ff ff ff 98 00 59 00 31 00 11 ff ff ff ee 00 2a ff ff ff 80 00 0b 00 02 ff ff ff e7 00 02 00 03 00 01 00 00 00 01 00 30 00 0d 00 06 00 09 00 2a ff ff ff 86 00 48 ff ff ff 86 ff ff ff f7 00 0d 00 01 00 01 00 05 00 05 00 00 00 03 ff ff ff 81 ff ff ff 81 00 00 ff ff ff 84 00 22 ff ff ff f2 ff ff ff d4 ff ff ff de ff ff ff 81 00 36 00 37 ff ff ff 8c 00 21 00 0e 00 54 ff ff ff d1 ff ff ff 9b 00 2d 00 46 ff ff ff f5 00 1e 00 08 ff ff ff e8 00 79 00 1a ff ff ff af 00 00 ff ff ff e4 ff ff ff f1 00 5e 00 2b ff ff ff 90 00 4b 00 47 00 1a ff ff ff de 00 38 ff ff ff cb 00 1b 00 02 ff ff ff c4 00 0c ff ff ff fa 00 3b ff ff ff cd 00 2a 00 54 ff ff ff cb 00 1c ff ff ff 9b 00 39 00 15 ff ff ff 8d ff ff ff a8 ff ff ff aa ff ff ff d0 00 1d ff ff ff 83 ff ff ff ed ff ff ff a0 ff ff ff df ff ff ff fc 00 50 ff ff ff d9 00 6d ff ff ff fd 00 74 00 42 ff ff ff d4 00 6f ff ff ff 94 ff ff ff f8 ff ff ff 99 00 0f ff ff ff ef 00 7b 00 64 00 65 00 0e ff ff ff aa ff ff ff c2 ff ff ff ae 00 46 00 4a 00 4e ff ff ff e1 00 0c ff ff ff 87 00 0a 00 4b 00 73 ff ff ff c6 00 28 ff ff ff c9 ff ff ff d2 00 08 ff ff ff d8 ff ff ff d5 00 2a ff ff ff a6 ff ff ff ce 00 14 00 3b ff ff ff be 00 3b 00 20 00 0f ff ff ff ff 00 3b 00 17 00 69 00 77 00 74 00 43 ff ff ff 99 00 40 ff ff ff 98 ff ff ff c6 00 37 ff ff ff 9c ff ff ff 81 ff ff ff e8 ff ff ff d8 ff ff ff c2 00 03 00 35 ff ff ff d4 00 7b ff ff ff ac ff ff ff d6 00 6f
行为描述: 数据加密
详情信息: {u'operation': u'keyalgo', u'algorithm': u'AES', u'key': u'51, 69, 66, 52, 67, 67, 67, 51, 57, 53, 67, 68, 67, 67, 50, 50, 57, 69, 51, 52, 48, 48, 57, 52, 70, 49, 65, 57, 55, 49, 66, 50'}
行为描述: 类加载
详情信息: path:/system/app/PicoTts.apk
path:/system/app/MusicFX.apk
path:/system/framework/am.jar
path:/data/app/com.kingroot.kinguser-1.apk
行为描述: 执行SQL查询
详情信息: select * from apps order by rule asc, rtime desc
select * from permission_log
行为描述: 获取用户ID
详情信息: 310260000000000
行为描述: 执行系统命令
详情信息: sh
su
/system/xbin/su
行为描述: 启动服务
详情信息: com.android.musicfx.Compatibility$Service
com.kingroot.kinguser.service.SuService
com.android.mms.transaction.SmsReceiverService
行为描述: 写入文件
详情信息: path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.android.musicfx/shared_prefs/musicfx.xml length:105
path:pipe:[3503] length:52
path:pipe:[3503] length:18
path:pipe:[3503] length:56
path:pipe:[3503] length:10
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:102
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:101
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:101
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:102
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:98
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:99
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:93
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:22
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:79
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:76
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:74
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:81
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:77
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:83
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:67
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:72
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:91
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:67
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:73
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:82
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:79
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:71
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:73
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:61
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:68
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:70
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:73
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:77
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:81
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:61
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:57
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:71
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:72
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:62
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:54
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:85
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:35
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:93
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:103
path:/data/data/com.kingroot.kinguser/applib/libNativeRQD.so length:105
path:pipe:[3521] length:52
path:pipe:[3521] length:18
path:pipe:[3521] length:72
path:pipe:[3521] length:10
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:49
path:/data/data/com.kingroot.kinguser/shared_prefs/switchStats.xml length:70
path:pipe:[3526] length:8
path:/data/data/com.kingroot.kinguser/shared_prefs/switchStats.xml length:105
path:/data/data/com.kingroot.kinguser/shared_prefs/switchStats.xml length:105
path:pipe:[3526] length:10
path:/data/data/com.kingroot.kinguser/shared_prefs/switchStats.xml length:105
path:/data/data/com.kingroot.kinguser/shared_prefs/switchStats.xml length:105
path:pipe:[3550] length:8
path:pipe:[3550] length:10
path:/data/data/com.kingroot.kinguser/shared_prefs/actionStats.xml length:105
path:/data/data/com.kingroot.kinguser/shared_prefs/RootManagerSetting.xml length:105
path:/data/data/com.kingroot.kinguser/applib/su length:96
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/su length:94
path:/data/data/com.kingroot.kinguser/applib/su length:95
path:/data/data/com.kingroot.kinguser/applib/su length:102
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/su length:13
path:/data/data/com.kingroot.kinguser/applib/su length:21
path:/data/data/com.kingroot.kinguser/applib/su length:53
path:/data/data/com.kingroot.kinguser/applib/su length:51
path:/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences.xml length:105
path:/data/data/com.kingroot.kinguser/applib/su length:45
path:/data/data/com.kingroot.kinguser/applib/su length:51
path:/data/data/com.kingroot.kinguser/applib/su length:57
path:/data/data/com.kingroot.kinguser/applib/su length:50
path:/data/data/com.kingroot.kinguser/applib/su length:57
path:/data/data/com.kingroot.kinguser/applib/su length:21
path:/data/data/com.kingroot.kinguser/applib/su length:50
path:/data/data/com.kingroot.kinguser/applib/su length:43
path:/data/data/com.kingroot.kinguser/applib/su length:51
path:/data/data/com.kingroot.kinguser/applib/su length:53
path:/data/data/com.kingroot.kinguser/applib/su length:61
path:/data/data/com.kingroot.kinguser/applib/su length:48
path:/data/data/com.kingroot.kinguser/applib/su length:63
path:/data/data/com.kingroot.kinguser/applib/su length:40
path:/data/data/com.kingroot.kinguser/applib/su length:45
path:/data/data/com.kingroot.kinguser/shared_prefs/actionStats.xml length:105
path:/data/data/com.kingroot.kinguser/applib/su length:54
path:/data/data/com.kingroot.kinguser/applib/su length:45
path:/data/data/com.kingroot.kinguser/applib/su length:52
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:98
path:/data/data/com.kingroot.kinguser/applib/su length:43
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:104
path:/data/data/com.kingroot.kinguser/applib/su length:39
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:97
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/su length:52
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:94
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:99
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:93
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:97
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:95
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/su length:94
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/su length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/su length:100
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:82
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:63
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:78
path:pipe:[3569] length:52
path:pipe:[3569] length:18
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:55
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:80
path:pipe:[3569] length:59
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:85
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:63
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:78
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:64
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:74
path:pipe:[3569] length:10
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:75
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:76
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:79
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:89
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:57
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:54
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:50
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:51
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:42
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:72
path:pipe:[3581] length:52
path:pipe:[3581] length:18
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:56
path:pipe:[3581] length:72
path:pipe:[3581] length:10
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:57
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:64
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:51
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:59
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:54
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:33
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:96
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:91
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:102
path:/data/data/com.kingroot.kinguser/applib/libxy.so length:105
path:pipe:[3596] length:52
path:pipe:[3596] length:18
path:pipe:[3596] length:65
path:pipe:[3596] length:10
path:/data/data/com.kingroot.kinguser/shared_prefs/RootManagerSetting.xml length:105
path:/data/data/com.kingroot.kinguser/files/cl.conf length:56
path:pipe:[3603] length:52
path:/data/data/com.kingroot.kinguser/files/cl.conf length:14
path:pipe:[3603] length:18
path:pipe:[3603] length:10
path:pipe:[3608] length:52
path:pipe:[3608] length:18
path:pipe:[3608] length:65
path:pipe:[3608] length:10
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:103
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:103
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:100
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:97
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:97
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:22
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:6
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:55
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:44
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:50
path:/data/data/com.kingroot.kinguser/shared_prefs/RootManagerSetting.xml length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:51
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:46
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:58
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:40
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:44
path:pipe:[3618] length:52
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:49
path:pipe:[3618] length:18
path:pipe:[3618] length:11
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:60
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:60
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:48
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:55
path:pipe:[3618] length:10
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:45
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:58
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:pipe:[3628] length:52
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:105
path:pipe:[3628] length:18
path:pipe:[3632] length:8
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:102
path:pipe:[3628] length:18
path:pipe:[3632] length:10
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:100
path:/data/data/com.kingroot.kinguser/applib/libsuc.so length:28
path:pipe:[3641] length:8
path:pipe:[3645] length:52
path:pipe:[3645] length:18
path:pipe:[3641] length:10
path:pipe:[3628] length:10
path:pipe:[3645] length:66
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:pipe:[3645] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:98
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:/data/data/com.kingroot.kinguser/applib/busybox length:78
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:96
path:/data/data/com.kingroot.kinguser/applib/busybox length:95
path:pipe:[3652] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:92
path:pipe:[3652] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:92
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:93
path:pipe:[3657] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:27
path:pipe:[3657] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:28
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:14
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:pipe:[3661] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:64
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:pipe:[3661] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:18
path:pipe:[3665] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:pipe:[3665] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:61
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:44
path:/data/data/com.kingroot.kinguser/applib/busybox length:71
path:pipe:[3669] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:pipe:[3669] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:42
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:pipe:[3673] length:8
path:/data/data/com.kingroot.kinguser/applib/busybox length:83
path:/data/data/com.kingroot.kinguser/applib/busybox length:44
path:pipe:[3673] length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:77
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:39
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:41
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:92
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:50
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:42
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:33
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:64
path:/data/data/com.kingroot.kinguser/applib/busybox length:71
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:61
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:47
path:/data/data/com.kingroot.kinguser/applib/busybox length:45
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:61
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:34
path:/data/data/com.kingroot.kinguser/applib/busybox length:47
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:48
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:66
path:/data/data/com.kingroot.kinguser/applib/busybox length:66
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:77
path:/data/data/com.kingroot.kinguser/applib/busybox length:43
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:39
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:59
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:44
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:47
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:24
path:/data/data/com.kingroot.kinguser/applib/busybox length:68
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:71
path:/data/data/com.kingroot.kinguser/applib/busybox length:73
path:/data/data/com.kingroot.kinguser/applib/busybox length:68
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:70
path:/data/data/com.kingroot.kinguser/applib/busybox length:50
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:65
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:42
path:/data/data/com.kingroot.kinguser/applib/busybox length:44
path:/data/data/com.kingroot.kinguser/applib/busybox length:47
path:/data/data/com.kingroot.kinguser/applib/busybox length:43
path:/data/data/com.kingroot.kinguser/applib/busybox length:59
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:26
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:11
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:16
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:72
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:64
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:64
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:23
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:64
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:68
path:/data/data/com.kingroot.kinguser/applib/busybox length:71
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:46
path:/data/data/com.kingroot.kinguser/applib/busybox length:30
path:/data/data/com.kingroot.kinguser/applib/busybox length:30
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:63
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:70
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:74
path:/data/data/com.kingroot.kinguser/applib/busybox length:59
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:49
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:38
path:/data/data/com.kingroot.kinguser/applib/busybox length:61
path:/data/data/com.kingroot.kinguser/applib/busybox length:67
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:58
path:/data/data/com.kingroot.kinguser/applib/busybox length:56
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:51
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:59
path:/data/data/com.kingroot.kinguser/applib/busybox length:54
path:/data/data/com.kingroot.kinguser/applib/busybox length:67
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:52
path:/data/data/com.kingroot.kinguser/applib/busybox length:70
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:62
path:/data/data/com.kingroot.kinguser/applib/busybox length:57
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:41
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:10
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:85
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:97
path:/data/data/com.kingroot.kinguser/applib/busybox length:98
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:71
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:87
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:53
path:/data/data/com.kingroot.kinguser/applib/busybox length:102
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:26
path:/data/data/com.kingroot.kinguser/applib/busybox length:48
path:/data/data/com.kingroot.kinguser/applib/busybox length:69
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:104
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:/data/data/com.kingroot.kinguser/applib/busybox length:60
path:/data/data/com.kingroot.kinguser/applib/busybox length:74
path:/data/data/com.kingroot.kinguser/applib/busybox length:55
path:/data/data/com.kingroot.kinguser/applib/busybox length:105
path:pipe:[3688] length:52
path:pipe:[3688] length:18
path:pipe:[3688] length:64
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:pipe:[3688] length:10
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
path:pipe:[3802] length:52
path:pipe:[3802] length:18
path:pipe:[3802] length:72
path:pipe:[3802] length:10
path:/data/data/com.kingroot.kinguser/files/SuTimeCtrl.dat length:69
行为描述: 获取设备ID
详情信息: 357242043237511
Activities
VirSCANVirSCAN
活动名 类型
com.kingroot.kinguser.activitys.SliderMainActivity android.intent.action.MAIN
com.kingroot.kinguser.activitys.SliderMainActivity android.intent.category.LAUNCHER
危险函数
VirSCANVirSCAN
函数名称 信息
ContentResolver;->query 读取联系人、短信等数据库
android/app/NotificationManager;->notify 信息通知栏
HttpClient;->execute 请求远程服务器
java/net/URL;->openConnection 连接URL
getRuntime 获取命令行环境
java/lang/Runtime;->exec 执行字符串命令
TelephonyManager;->getDeviceId 搜集用户手机IMEI码、电话号码、系统版本号等信息
TelephonyManager;->getSimSerialNumber 获取SIM序列号
启动方式
VirSCANVirSCAN
名称 信息
com.kingroot.kinguser.receiver.PackageReceiver 应用安装时启动服务
com.kingroot.kinguser.receiver.PackageReceiver 应用卸载时启动服务
com.kingroot.kinguser.receiver.BootReceiver 开机启动服务
com.kingroot.kinguser.receiver.InstallReceiver 应用安装时启动服务
com.kingroot.kinguser.receiver.InstallReceiver 应用卸载时启动服务
com.kingroot.kinguser.receiver.ScreenEventReceiver 屏幕解锁启动服务
com.kingroot.kinguser.receiver.AlarmReceiver 开机启动服务
权限列表
VirSCANVirSCAN
许可名称 信息
com.kingroot.kinguser.permission.REQUEST
android.permission.INTERNET 连接网络(2G或3G)
android.permission.WRITE_EXTERNAL_STORAGE 写外部存储器(如:SD卡)
android.permission.RECEIVE_BOOT_COMPLETED 接收开机启动广播
android.permission.READ_PHONE_STATE 读取电话状态
android.permission.ACCESS_NETWORK_STATE 读取网络状态(2G或3G)
android.permission.INSTALL_PACKAGES 安装应用
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 挂载、反挂载外部文件系统
android.permission.SYSTEM_ALERT_WINDOW 显示系统窗口
android.permission.ACCESS_WIFI_STATE 读取wifi网络状态
android.permission.READ_LOGS 读取系统日志
android.permission.GET_PACKAGE_SIZE 获取应用大小
android.permission.WAKE_LOCK 手机屏幕关闭后后台进程仍运行
服务列表
VirSCANVirSCAN
名称
com.kingroot.kinguser.service.KingRootAppListService
com.kingroot.kinguser.service.SuService
文件列表
VirSCANVirSCAN
文件名 校验码
META-INF/MANIFEST.MF 0x33ce851
META-INF/KINGROOT.SF 0x815125e5
META-INF/KINGROOT.RSA 0xa089f74e
assets/channel.ini 0x1d0fa764
assets/chr.conf 0xc189dce
assets/cl.conf 0xfa294970
assets/config.properties 0x7119baec
assets/cpm 0x42123a37
assets/ipme 0xfdf2b649
assets/ku.conf 0x6b771a58
assets/kup.conf 0x50b845ce
assets/kutx.conf 0xd69d8e50
assets/lpm 0x43f3e97b
res/anim/progress_rotation_anim.xml 0x7e617d62
res/anim/slide_left_in.xml 0x1ec02029
res/anim/slide_left_out.xml 0xe05b830e
res/anim/slide_right_in.xml 0x5575c00e
res/anim/slide_right_out.xml 0x2dc9c894
res/drawable/app_list_selector.xml 0x5add1d0
res/drawable/autostart_btn_selector.xml 0x172c046
res/drawable/back_btn_selector.xml 0xb2135e86
res/drawable/btn_nomal_selector.xml 0x4716eee6
res/drawable/button_left_selector.xml 0xdae45684
res/drawable/button_right_selector.xml 0xbb64ceb6
res/drawable/button_selector.xml 0xd0af25fc
res/drawable/checkbox_selector.xml 0xd88a3acc
res/drawable/dialog_btn_left.xml 0xc4627fe5
res/drawable/dialog_btn_mid.xml 0xd941599f
res/drawable/dialog_btn_right.xml 0x560012f4
res/drawable/dialog_button_selector.xml 0x80258ca4
res/drawable/dialog_circle_bg_shape.xml 0x958f9266
res/drawable/dialog_shape_bg.xml 0xae2f9b7a
res/drawable/file_management_btn_selector.xml 0x4a516614
res/drawable/king_tool_back_btn_selector.xml 0xb22a0cad
res/drawable/list_item_bg.xml 0x4fca0d09
res/drawable/list_item_bg_selector.xml 0x43e3c038
res/drawable/list_view_divider_shape.xml 0x57e3f98f
res/drawable/loading_drawable.xml 0xd2278bdc
res/drawable/progressbar_style.xml 0x28b634eb
res/drawable/request_button_selector.xml 0x4716eee6
res/drawable/setting_btn_selector.xml 0x84e63fc0
res/drawable/software_backup_btn_selector.xml 0xebee671a
res/drawable/software_remove_btn_selector.xml 0x7eefea1
res/drawable/switchbox_selector.xml 0x9791d11a
res/drawable/update_bar_press_shape.xml 0xad14f6b1
res/drawable/update_bar_shape.xml 0x72ae81b8
res/drawable/update_button_selector.xml 0x8b9f7175
res/drawable/update_progressbar.xml 0xac8b9fff
res/drawable-hdpi/app_backup_icon_def.png 0x37f6ab01
res/drawable-hdpi/app_backup_icon_on.png 0x589cd1b2
res/drawable-hdpi/app_icon.png 0xb25050bf
res/drawable-hdpi/arrow_down.png 0x3b3857aa
res/drawable-hdpi/arrow_in.png 0x45978a53
res/drawable-hdpi/arrow_up.png 0x68a88862
res/drawable-hdpi/automatic_star_icon_def.png 0x855e5a9d
res/drawable-hdpi/automatic_star_icon_on.png 0x2705287
res/drawable-hdpi/btn_back_default.png 0x30b9e8f6
res/drawable-hdpi/btn_back_pressed.png 0x27c6d47b
res/drawable-hdpi/btn_default.9.png 0xacce8ed3
res/drawable-hdpi/btn_press.9.png 0xd1ccdd3e
res/drawable-hdpi/button_left_default.9.png 0xc9734607
res/drawable-hdpi/button_left_press.9.png 0x82391f11
res/drawable-hdpi/button_right_default.9.png 0x19b2c2fd
res/drawable-hdpi/button_right_press.9.png 0x750752b7
res/drawable-hdpi/checkbox_default.png 0x3eff61ff
res/drawable-hdpi/checkbox_press.png 0xec434f4e
res/drawable-hdpi/content_switch_default.png 0xce7f6989
res/drawable-hdpi/content_switch_pressed.png 0xc304a797
res/drawable-hdpi/dialog_blue_top.9.png 0x5555b296
res/drawable-hdpi/dialog_btn_left1.9.png 0x9d5dffc1
res/drawable-hdpi/dialog_btn_left2.9.png 0x1ce8c21c
res/drawable-hdpi/dialog_btn_mid1.9.png 0x801da7fc
res/drawable-hdpi/dialog_btn_mid2.9.png 0xd8fdbc24
res/drawable-hdpi/dialog_btn_right1.9.png 0xcd560e1a
res/drawable-hdpi/dialog_btn_right2.9.png 0x6bac5a1e
res/drawable-hdpi/dialog_title_line.png 0xcd3f1f78
res/drawable-hdpi/file_management_icon_def.png 0xb4efad3e
res/drawable-hdpi/file_management_icon_on.png 0x9a638c7e
res/drawable-hdpi/header_bg.9.png 0x84eb7584
res/drawable-hdpi/ic_launcher.png 0x808d9dd9
res/drawable-hdpi/icon.png 0xba24270a
res/drawable-hdpi/king_tool_icon.png 0x41c34c31
res/drawable-hdpi/line_close.9.png 0xab982412
res/drawable-hdpi/line_open.9.png 0xf14dff5a
res/drawable-hdpi/list_down_bg.png 0x681ca9d7
res/drawable-hdpi/list_line.9.png 0x61afb793
res/drawable-hdpi/loading_icon.png 0xf40f227a
res/drawable-hdpi/loading_icon_complete.png 0x5c5648ec
res/drawable-hdpi/loading_icon_hd.png 0xce37c0b7
res/drawable-hdpi/log_empty.png 0x17dfa7e2
res/drawable-hdpi/progress_bg.9.png 0xd12415c3
res/drawable-hdpi/progress_secondary_bg.9.png 0xd0ddbcf1
res/drawable-hdpi/progress_top.9.png 0x51c23cde
res/drawable-hdpi/radio_default.png 0xcedf1b6d
res/drawable-hdpi/radio_press.png 0x8d04ad3a
res/drawable-hdpi/right.png 0x702ed095
res/drawable-hdpi/root_empty.png 0x38cd9795
res/drawable-hdpi/setting_icon_default.png 0x6ae44a93
res/drawable-hdpi/setting_icon_pressed.png 0xda15867a
res/drawable-hdpi/software_remove_icon_def.png 0x6d00198e
res/drawable-hdpi/software_remove_icon_on.png 0x5f243cfc
res/drawable-hdpi/switcher_cn_default.png 0x420d46c9
res/drawable-hdpi/switcher_cn_press.png 0xdc46b1fc
res/drawable-hdpi/switcher_en_default.png 0x4d38772d
res/drawable-hdpi/switcher_en_press.png 0xd41f0fb2
res/drawable-hdpi/switcher_tw_default.png 0xb800058b
res/drawable-hdpi/switcher_tw_press.png 0x56cf0991
res/drawable-hdpi/tips_icon_4.png 0x689c9a3
res/drawable-hdpi/title_bg_default.png 0x478d919e
res/drawable-hdpi/title_bg_on.png 0xd9867382
res/drawable-hdpi/title_item_line.png 0xaa97b018
res/drawable-ldpi/radio_btn_selector.xml 0x7d77299c
res/drawable-ldpi/radio_button_selector.xml 0x7d77299c
res/layout/activity_common_dialog.xml 0xffff25b5
res/layout/activity_request_dialog.xml 0x19c63566
res/layout/activity_slidemain.xml 0xc00e2e3c
res/layout/all_app_list_item.xml 0xb693e001
res/layout/backup_detail_component.xml 0xa86921cb
res/layout/common_template.xml 0xca37c715
res/layout/covery.xml 0x30dcf31f
res/layout/dialog_cancelable_progress.xml 0xf8462759
res/layout/dialog_common.xml 0x89ac056a
res/layout/dialog_irrevocable_progress.xml 0x663d7d2f
res/layout/dialog_list_view.xml 0xcc5fc69a
res/layout/dialog_progress_bar.xml 0x5e6f8f5
res/layout/empty_tip.xml 0xce6f11c7
res/layout/king_tool_gridview.xml 0xb666dc3c
res/layout/king_tool_item.xml 0x495e8e1f
res/layout/list_item_autostart.xml 0x6a6aef30
res/layout/list_item_main_root_mgr.xml 0x98663455
res/layout/list_item_restore_set.xml 0x534d0469
res/layout/list_item_root_mgr_log_content.xml 0xb84384f7
res/layout/list_item_root_mgr_log_title.xml 0x52b20cf3
res/layout/list_item_selectable_app.xml 0x5eef67e0
res/layout/list_item_single_text.xml 0xd886aa6
res/layout/list_item_text_radio.xml 0xe08a80d3
res/layout/list_view_select_num_component.xml 0x8592a49c
res/layout/list_view_sub_title.xml 0x9afdd58c
res/layout/list_view_title.xml 0x3376a097
res/layout/loading_process.xml 0x7f626f9e
res/layout/only_one_listview.xml 0xd77d36e8
res/layout/open_prompt.xml 0x531c7b9b
res/layout/operation_bar.xml 0x51e490b
res/layout/operation_bar_2.xml 0x3e9f1714
res/layout/private_authorize_list_item.xml 0xff0c3a2e
res/layout/private_authorize_view.xml 0xb64c6b0d
res/layout/relativelayout_container_template.xml 0x83c277eb
res/layout/setting_item_text_checkbox.xml 0xe1a3830f
res/layout/setting_item_text_icon.xml 0xb719a617
res/layout/setting_item_two_text.xml 0x1f835585
res/layout/setting_item_update_bar.xml 0x36199c41
res/layout/slider_header.xml 0x4c90d2fb
res/layout/view_list_with_tips.xml 0x566c449e
res/layout/view_progress_bar.xml 0xe2bd5bc8
res/layout/view_root_mgr_log.xml 0x290e619e
res/layout/view_root_mgr_main.xml 0x790063a6
res/layout/view_root_mgr_setting.xml 0x4dabaada
res/layout/zpermission_mgr_list_item.xml 0x13188282
res/layout/zslider_permission_list_item.xml 0x225a1b2a
res/layout/zsoftware_detail.xml 0xf4e1fdca
res/raw/busybox 0x729c53b
res/raw/libsuc 0x1bc91f4d
res/raw/libxy 0xc68360d1
res/raw/lrqd 0x5d95c138
res/raw/su 0x7b91c7db
AndroidManifest.xml 0xaeaf3a0d
classes.dex 0x48497a5f
resources.arsc 0xdd643f46
运行截图
VirSCANVirSCAN
VirSCAN