kingoroot.exe

Sase

Finger Power Technology Co., Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.filetowerfun.com and multiple other hosts.
Publisher:
Cekudureh   (signed by Finger Power Technology Co., Ltd.)

Product:
Sase

Description:
Sase Setup

Version:
2.4.2.8

MD5:
d7179e0e95cd7bf38dafe3c29a826103

SHA-1:
76a30cc5bc66b3017c881e7fe1dab21b0767b629

SHA-256:
bc67c185280daf873e860662e1ae6d7e1780fbfdb1568e4c6bfe6f0ab72c4da2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:15:08 PM UTC  (today)

File size:
1021.3 KB (1,045,784 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\kingoroot.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
5/31/2016 8:00:00 AM

Valid to:
7/1/2017 7:59:59 AM

Subject:
CN="Finger Power Technology Co., Ltd.", OU=Development, O="Finger Power Technology Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2EC9B6209E7B6AC9D3A4DB1DC33852F3

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:UWhTSbxYW25JB9HaVLK/7F0jngn7A3q4yIHjFsvNPnFtF:Jh+FYt5P9HaVLKJ0jniAaqHxOFL

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9271

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file kingoroot.exe has been seen being distributed by the following 50 URLs.

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=eyejoD8H9IJDeWgbvGiS/C0dDpyngDUajNoNrDgfdhY=&downloadAs=KingoRoot.exe&c=bj7lLkfyvan0Qd5fysd6Jd6cl9bOIRf22034DyF/Hyd /1DIJzBpwCVb 1SQQ4dcOxWsvA4u1/m2kGu9NMkzJtJGxDaLhw6cCn0VLHsAUJnDrT/.../xrhuZ0pL

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../pcaNRvKlWq3TUPLRrQ7MbhwV6T8WsEanvze2THQqtD4w5lVRsQWjcwC937h7kZORZDueXZct

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=K7/hqlZV1mgrw/hm2y54QkY9mBF8P3Uj0QsKUPzywS4=&downloadAs=KingoRoot.exe&c=r 5XX0CO6jMq3vtJY7/.../lgBDahcBuYfj9SyeD0mrtPqv27sgolKxU0CWfTdfup1yCdBb6

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../8lBsSsYmGqt34UykjqxJtDTHPEX38

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../nf1s4neNTZVwaP8qXeX6Y6jRxXH4XmhI41A9FZo0mljwSoFaFDWJPuNB0DRRBi1oHszsfiwJXRHDTFG4EKW4h8ue

http://www.filetowerfun.com/c?fallback_url=http://.../android_root.exe&x=BSCgB3vQrb1n8TMC2JEbvwSDkvnGguhn1JADb8BoUhw=&downloadAs=KingoRoot.exe&c=KRin4j90RtIkLgapLxfVRfVemOtzIgg1S1U3zPWiqvk80cORenBH1VTHwbHsXdeM7vOJvYIPReS0WuUYcCwkGm98nCgyijV9QXeqce9nxcRwJVDP8fR1CeY L0sgvcfP

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../fr2ye hNzyiGVmkHB Wo iFfViT2QdkHIsQ541lVGAUcr6jFCrshhfs28XlxGyscHNo200uNFS 1nne1vF07xGnMbH7TqEU

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=CCwyC/diu00Hqao663E Lda3RUHKcuV/rBaRK8E30yo=&downloadAs=KingoRoot.exe&c=Gd6X1NGEc1Qc3Y0P4mtx I6yTeNbDb6bHyIA5tHeDd09qaGWU0jqXh Mt5/VgxLC7ER9CnVkrHyOWcEdnt1E4L5Xb3j1qvdZ4Zpmm22/XG/.../m2Ff4ECqMFZ3

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=a5asmr694/RVVrdsy1uPQwh HxpmkMlGdORunlhPEAA=&downloadAs=KingoRoot.exe&c=9s4a5m0TAusRjSw6ecC31b/SEn6BU/clgFTptot/.../XRTaC6lnh

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=vRYUTcmcu26w/4UWkgpycSJQWJcwZm1AO/7N9SdbmI4=&downloadAs=KingoRoot.exe&c=pJk8iZ9Kii4jKkEBWQ9WkOKpl8GCi 7wh3I1fWdQ7OYgog/ iilznQBhKLUczMjPG38KvfH3KzprtRPQwrGikzvWu8C0A3peT3WrgRNdG7OJh/cUX0vn/JBbDJbB//57

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=hrHmCAbnzZFghOW56gfjOIL4vSP9076gEmuwxROatz4=&downloadAs=KingoRoot.exe&c=Ugw5Ny5Mfgd41m2a6dUCNWdJtNL5T7ndo1vb HyZW ASrZ0MtlScrs8JAHVIkSY5OAhRm2FBzzALwITYp81VZOzKwx0wJ7/.../GtZnywG0v5

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../aSeOLrP5aSpMILH7itsKshJ07yCI=&downloadAs=KingoRoot.exe&c=3nhXNRKGocP8 PhixP3KeAZyPMmxZnGEcXXwtYY7mPUeJNlMtt1 kE4IzuJhfZCQ HufuUw7swOnNvDd6YbUAl5pTlb5IlWmkTHaA5RBq2jLdKByAeOLRmh RwIE10y

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=Xg09znP0vCUs4UabyFtWsJ4WMsp3njdVUXQB3PvNQJY=&downloadAs=KingoRoot.exe&c=QRxWuWREgbSqxBk8qkS10KylYXWncFbVOqL9y9Wbw8dLPV8sXufvDGl0gMLGDWynIhCHreW8ZE1/D8F5qNYNGMc3wQNxV5p/.../rP8LEP

http://www.filetowerfun.com/c?fallback_url=http://.../android_root.exe&x=qcvPSF6torWrOEMZzt2FyZwmbPpYZaa95Eh89vmm7vs=&downloadAs=KingoRoot.exe&c=73KKgygZba4BM131jdlngrrtaFQMgEB0PlykUb ad18TUrYUKQoOCUwrTWYnRnc1b9nV3ace6M7R uV6PmiUlLpwZd56XxKLUNaGQdvKpHH0FmbEPZpBDeQwf2epQqut

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=ff5koDYSKsDknSbtra1n1FfCKVD8PdI5FPyopTUCJMM=&downloadAs=KingoRoot.exe&c=PuJ0BF2Mvzon4huvW85Gxl4m ZD5/.../Rv34u2ESklDQXbJ3PXdADXMjAEskx85t1g

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=BVwsnAp22YASpzimeEFeBYR8pF1T9H3azBvvpSRULPE=&downloadAs=KingoRoot.exe&c=i5eZHWrLD8rpqAAOlA61alsLpS 9/H lhVTawlofIT W7yXweL4xoUj7For40TKqgeCZ1oxjpJ6RiG5vXF8i0mpH/.../c3VyazEWxATkqAmNWgVM3rIq

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=AeqI7IlVJdwuYvqTry8kTqkDixtNEjYALqO7S/Y I8A=&downloadAs=KingoRoot.exe&c=wbCuWbYtaSQU0c1EpIvgWtRXAdr5wFhBS ALKKlF5OWkNIKyo9x3av9nZ76Buum9bCNZtR33oSHAk8IW7 mpwtrVYBEUqcH5/wkReBt9J/.../IdOOLixv2zs10141

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=AtYff17QQfBZW8j1ZQFMP0G 5 0gaJ9dz2 G pZm/hQ=&downloadAs=KingoRoot.exe&c=mwPcu6bORhuKSchfmef6Haw3Xb9 azSqlGbJRrK 6ewmaE/.../a1U0SHUCQBK58HKSTo3P5ilOq8AbMP0GOMuwZSTIqK

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=jsjRaW09 zpMidQcuASaQYAMfHgu4U ZD41GS6MEwsI=&downloadAs=KingoRoot.exe&c=LPUQbM tetzQnJsTJGyhpOA/7JmJ5exuWyVIWZRhjg6HdyqIM5dDNRvEtH6HIGsk3/.../JzhIgwNs6C0e

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=hdcqnhWyE9fpI8GGc5E/NP9oKduWrQt1CyiYIADDg1M=&downloadAs=KingoRoot.exe&c=5cWZpVl/.../RdZqizpfRe5bJqL4414yoxVF2YxX7CMi5YZeEB9DKNZ lf4pjzo g1AjHll

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=eln NeZzqNIdZ2pptQ1l7k eQKvPwAiMzHIXZd2vbh0=&downloadAs=KingoRoot.exe&c=/.../lKyUCn8zcac4Op IlX6PELdZ8qLGFMMsteOj4 ue6cZ EqC31bJjxBLWEP6WG2Ly1uoaBR71RgbNF

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../CoWqY36fx2tC3Sd2rXyz4raoeROBhS77w8vPYVEh9GKW5SPufr2ImObGLs19Cq xop

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=wzyxslQGaIAfDMNYbkTDf9vGosaJaY/V6xHYeYASaz8=&downloadAs=KingoRoot.exe&c=GW7WM9MWtokzYv 3BGovUozbyDeTsk8JU4z4F3CStHsXrPdjQLr1m0C3E9JkUv0DCXPeM/cNL2F6W0pwAw3/.../v8D57NKdY0oyJMbaXYPdGWqR

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=QE4RvQwjk7pthMTD5ifh/LwiDFHFibaYtFI1fmevjIQ=&downloadAs=KingoRoot.exe&c=42/.../2HInsMYGlSjTIRDuLr6vXWG1D8ivrWGRtzfZkMezzycUHMA5J63gZxoQO T0MRSoCiG267P 6DNb9w6OEMwaexi5BPHT2VoO2Vc7OzGOxl57m3SH1

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=uGPLcAIlVdRcgV/.../gHGUvOCsa644YNKItUpPyRL0 ZVHohmP6hbBgWrJHwViYYj7 6 TDDodWmUIviguhyDsMEAjkAI1JFuv03aoPLrmeYYsdExc7If88dyQhUfpHu5

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=kFzfeqehCdt8dLG823oemXz87/Ge0x6 XO14vmxKH0E=&downloadAs=KingoRoot.exe&c= ITy99XwWlwrz7 iuqxY7db U74otUiFcZEr9xQ0z2C9e7xL4f/.../

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=8QeYhaGF08muFyiwByW6l0jixzHjzocZFUQTACQHHgY=&downloadAs=KingoRoot.exe&c=WGICiqdZaASUnBBxJ3qGl/sdTtEKSY7pWQgYP4rRznI0dNwrmGz/.../OFSLljDV2rGf3yPoobTQPiUikXzuKj25NiL942zZlNUnVAyQK9LPIOkjujs5hUJxpuG

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=NhFzRkn6lH/.../N6xy0hrher51L1yFteukABOWcT7bYVSYBhERJpRNXjvbiEwW6g68s79RqKgBfieWiKzNcthwkH6toUVq6hIlkjRGOQkJruilX34et38nHLGLCws4wCNDivaBo 7

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=z3n6YBcUD9YcwWQkQHMRGI7v0IF S0H7dAuAw Q83Kg=&downloadAs=KingoRoot.exe&c=DVODD/.../TKJ6n617M

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../8AChQcNisjo b9i8eNFQXShbHEKCT2I=&downloadAs=KingoRoot.exe&c=R2AMXwUIzjzX9vgyxv 4Sr5Sjc6oueMjawNhMfRZRWirBNGoW0EEt3RAIKA64XWN ttoD0Q idyTgALgvKyuPfAfjZ0kb3WYmVKaOOvM1uSc4pvWh BFCd gvLG3ytmu

Latest 30 of 252 download URLs

Scan kingoroot.exe - Powered by Reason Core Security