home

kingoroot.exe

Didoruro

Finger Power Technology Co., Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.filetowerfun.com and multiple other hosts.
Publisher:
Kekahabeda   (signed by Finger Power Technology Co., Ltd.)

Product:
Didoruro

Description:
Didoruro Setup

Version:
1.1.1.0

MD5:
6dbf7073d2ce8faf2961cd7e7a3b1cb8

SHA-1:
99304026fa839916a7c26d038b0e9b768a236b1f

SHA-256:
189f666752a4622b9e9d29deea7cc2be3a0e97586b8c83591f5889c79cad9c16

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 12:41:30 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM06.1.0000.Malware.Gen
1.0.0.1120

File size:
1 MB (1,049,536 bytes)

Product version:
5.1.7

Copyright:
Wizard Installer

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\kingoroot.exe

Digital Signature
Signed by:
Finger Power Technology Co., Ltd.

Authority:
Symantec Corporation

Valid from:
5/30/2016 7:00:00 PM

Valid to:
6/30/2017 6:59:59 PM

Subject:
CN="Finger Power Technology Co., Ltd.", OU=Development, O="Finger Power Technology Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2EC9B6209E7B6AC9D3A4DB1DC33852F3

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:5KNv0McuCTk1MIMVZtbtzC2KB/cXiwH0WyR2+KXvy0T+x+5aaeDjAXh7:56v5c1I1ZIZV5fvSwH0lM+atyxuat/At

Entry address:
0xAA98

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 2E, 86, FF, FF, E8, 35, 98, FF, FF, E8, 9C, 9B, FF, FF, E8, B7, 9F, FF, FF, E8, 56, BF, FF, FF, E8, ED, E8, FF, FF, E8, 54, EA, FF, FF, 33, C0, 55, 68, 69, B1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 32, B1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, D0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, C2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, 24, 93, FF, FF, 8D, 55, F0, 33, C0, E8, 66, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9205

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
40.5 KB (41,472 bytes)

The file kingoroot.exe has been seen being distributed by the following 50 URLs.

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=lXNpBfC2lJqi5ydMQfZZ067BdeHMd2kDTFVCQMQoI4Q=&downloadAs=KingoRoot.exe&c=qYkvT0rNtzLlUj5txtOv07VkKfUj6IHOjWNDCBQ5YZJ50fOiNkzZcUk9f/.../t42MSqKIh

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../EtiotTox5WrqutqO3vGkzLoAnyizq01oYgz34=&downloadAs=KingoRoot.exe&c=8D6jn4QGS6OtVDQwOTu0rGBRxoxqMx7QpriZNHja2S3cJq5vgw3B RwCuLvvG5tQkes4J JQ5y7hJzQUyzsHIuAIzGw2qyRSEYxnInsUcptVLUeCBBkTOYPcRuj18Wv8

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../r3zFbUDLGKKQzFHl u9YpgPhCmy9zo7SVvLnrFk55Kqxj42JEOJOF8EqB75Lz

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=lAA6AykjUZHCOI8azEhOJ1xIAWxeLM NnfdV sPrukQ=&downloadAs=KingoRoot.exe&c=K6IKuo37qCITGtrN Cbf2EmXcw/.../9G8dmB4o2KtSOjksieyL74VllflBgqEZwon75R55O67xKCV4WTM ZSwLDjnXoCqJmIDG8Vpt9IWyncC0

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../6OsagNpma81ftT2v5Rmk1bS63fErYR4HeBlNnwojTm00cAdka7ql5Wlc3FAzs

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=kaQZsqVwudIU5ye0wiKOdzw4l7lpwCZRtUnzxLUUZzE=&downloadAs=KingoRoot.exe&c=7mVXwCpnzqn5Za9SVnK1WgKSPJz24uYhqE4miHeUEB Lubj3Vu/vRSDFCJh/.../uNBHbLXVpRXdZTZhCQPYkxuWb6A62YY46RKwoz2F MF5wfIoayk6zE36F14g

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=4jmgtg K/XTIh/ftlXk1f75pYGBgP7onDMtSTI/.../SU=&downloadAs=KingoRoot.exe&c=5w6lkoisikfI1Iudw sgN67aGhuybIlDdEXrLTZygjN70NOe9rACNhUWeH7BSeAy9GGd1tUR9MU6VADsCieqk1Fop6XAYsrdeWiOBBAs5IhncPx7vGwyTBX0b IBP3zU

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=dG8rxsBIMvFAuveeL7mZkIFE0x4k6cMEf1Mc/YYcdfg=&downloadAs=KingoRoot.exe&c=LMRAkfrR 8r0N8zmTJ1StldAbI0PWVZTTSkpw0R2f3v8SJ/ej/QZpeQF9ekD4exH9ZLRHZ/.../xPKN0PABCvsrbnOV6MyYFzjpFoczzeeRrAZVZr

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../yLvJdg33Bl2GWG57wwkMbvaYhC9NSbryJoVIdFfoVRYJS0zA2CN3swiOXujTN4gi96avKEresN6saeNrbnzJzrBKafjEthHJ2BYULAsz6w1dzGoiSAtLnCyrUmX4V2

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../6FPwo0rk7oYyn1u7itkj2xYur0wOp3ZkMM8RfhT6UCv6zFnjTRaUqvuWVHAqxIM4YqM5WlDXEev28ofhxevcHo26ekCI19YJnWPdRJGuGg1bwVFTppQ4gPSrp8R is

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=h UxyAnoGyb0z2x6rohcG9w8ipeSgHq23HYX7C73bl4=&downloadAs=KingoRoot.exe&c=ZXWbJttjQF9A4xO9nx4Fd5kuuSxW1cLKggGX36VGTn/eAkBkH/VL 1xfTl4jC /7QJMVuXFXBDcys4roGrX9gqcGUNzlO Si6I/RiicxPrGN6bcOqs//6X8GIlJxyTEl

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=U0SRPvaadk7LfLFOYfE74UbqFgGYBL3ycL1CAzb8rxs=&downloadAs=KingoRoot.exe&c=N4R0R6wQUmLGyFlTF4wUNBETvn8t2O9kR9lrWTBf7Kl9s Vm0NPQmkPqz3gH6/ToiV2d3kGbmvsnlngkwxXzG2td1KB4C/.../fvOXszkH8OHNFUJYxGkIDkSLsJrx

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=z7FttPxoAU/.../AmPU2cmC9oEvsZVVJ0Y8

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=762wrZqWqKZbJf0sTB8zU61DVOzLukFYcNUo/ubIS9g=&downloadAs=KingoRoot.exe&c=lJYA4OFk1G9G3HVK5a8Ac7SJAg5qS HecwoRKztkDAAQkzPwB2QzCYUAyRX gxXhLkILFuTTIilJy/.../Xo0ICNxcHGY0FI013hzrO9R Grh

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=3qThZSHUaaLRi1B/VwRX2uhScrkOF9G8sXJceULbUi0=&downloadAs=KingoRoot.exe&c=ia9IjtxzrVwDKinMP9oUYAm3fQXHcmv1JG5y12q19qy7wyCKeDkfg8nbAunaFtgbeX/.../pEi6agE6

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../IQnub0pUTH2vs=&downloadAs=KingoRoot.exe&c=9u8spxAVcDwN7vuKloL75foZIMqT0T4f86Tnd3x6xri9dov9gbyuD77wRfbYkAkbRInbodEgJO gHjXDCUTXjtxTijbNTMRWj7AG54fKzTayzrWgHbboqBKWROh65eqU

http://www.filetowerfun.com/c?fallback_url=http://.../android_root.exe&x=WFAXBJ9EdfhERuExn43Wu8AeebS8u6PTcCTw6X4xbUE=&downloadAs=KingoRoot.exe&c=aH6aEN0xxB1vZMIZDmz23qF5JfCN2dD3tMtxpv44QwguFLKp0KQFsvMY2CCmHRIURft5qD5gh4dI 21td8KE6cpQ9yqwBJ2pdeIs52Uo7Twx30IvtWEcsvBKeQP0MhXS

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../Yv8sMpzZ24VOmE5usNQFIv3jNAdfpxr

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../QnPgWYBBjQeD9kMhxcmqtN9NOzCaFcAG38sGLnxpovI65ELkbLFSse1khRNexhG7IDyP 65 noCQQH2Ti0BF8cLtGWy5ukSOVFjUi5fWGPbN2N

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=ZoU8aBkWClHyhSAghCbcZwgFezT5z10Ae2dru2EYYX0=&downloadAs=KingoRoot.exe&c=YXyXGiP5Xi1 yXTso3UK8g13U4z64tT5TMCTz1wVJnmvGdD951 cmxk40vSVd3Pd2uaIPpV/UG516DbQP711NvuEI5 rg/.../bhWAjHeGa7yW82j

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=HV72JrgzrfRia6MUp6dg/Y5jhtLrP cDDkyPOz trTY=&downloadAs=KingoRoot.exe&c=h3CuXXqNYdO/.../d3GHknBfZT 7FpP4JjTRKj7OOCpFMPNMx8L0ViyqLTBBV979DWfNpWJJ0GmymXKSqy5Vd4o4orvQlZ

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../2F9x4LGjbs Fr0YFcB8=&downloadAs=KingoRoot.exe&c=OW8S86HgRJLfkyQ9fYuTPBFhUIOLqQVSP1z1zNeWGndbGJancJpkTApvWFcHPnClhp2josSfYxDsbV75CrHyWSxhHv2zuTQFw VgXrQd 58jEIlh0gvywhPAkUvD ek2

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/.../qkU9QewsjT4fVBbmyaJ4 10Cjyu8sTq3Z6QPsa0kehVw17FlebSSw30ITSL7dH7qrhpRA78eOPk1jYRSfffjyN

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=DjdrZplN QKtett FqORdUWq7aBMP5rmJF4pEV/CHc4=&downloadAs=KingoRoot.exe&c=Zd0uSjp5G2raHS65ZAd32RGYQ0cRQO0UEWzGsA/rgHc8qXgR4riNyZhTMxfJGMWx1O1va41cblp9SSSq3ZOawcsa/Is0/LjvNN/.../CGry6P4MostxG35Oq

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=FOb4aT/If8gR7Xrdid8DgqTVCHIQ9Y3/JOTkMolrxjk=&downloadAs=KingoRoot.exe&c=Ebt3ra2mQLByRjzIU/8tSv3ilnh57EbJT9uJQHhujvwFUCRTf0Yjp5OL32zQadiFrYA9PLagemIWzjkMs5F5WL3nC/.../w8HsygzA8Rt0sZpoc

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=jt2QSTG2qVRdOQkxNTzvWws99XERM6cNtraxm4z14Xo=&downloadAs=KingoRoot.exe&c=B4kmC6xsl7BSZIWBvZV3B3wSnBlxN3/xPZG5FfzfLHCt7ickljdmi hSbEIRQzgaHQ9 VguCe9jIFsiUwb7tGME/e/.../VYkg1drNEncXntH

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=PLns8yRazJUq0Qmg4bMJEsrgNmXkT3ww1gxErT2tAIU=&downloadAs=KingoRoot.exe&c=ztIIkSG/.../VimvLBC1elIAbLDLK8ptu78swYUEgaMnLETszUOEXTJ7BNlnOictXm0WOZ3MHWFfPGuybTOuDLSJ2K4km4qG3bSrRnDrmXxiMr

http://www.filetowerfun.com/c?fallback_url=http://.../android_root.exe&x=TstuoZFS44cYOy0YsrPg5AmdXQAM1WjZe0IHeoEeNDQ=&downloadAs=KingoRoot.exe&c=btvVOA EqA y0KfNNXfiB5tmw9A9zZMibrygdMxnoRCe0M2Z6HdEgkNFc L7Lnrh46q3VVhd7743Y UTs8OiGQ11lhocEmj6o6Cgm e7bqxyFNbCWE5Swt83RnN0XMYE

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=ohZjj aKUC0ijxrVBzREq21gSxzVqdfZoNHWKS93J34=&downloadAs=KingoRoot.exe&c=VI4S9E1fhEfpPMJX/2BIJYK0agH/bGTFGC7aVgO3K9XBcQKu88tmIxaSP3okPam/.../M tgv6ZU2QlhZo02tTa5zE lH4q zm9p6JfletkBkR0Ha2iYn98Om DCLtEEP

http://www.filetowerfun.com/c?fallback_url=http://d.kgroot.com/android_root.exe&x=XxTRNqKaBoy6XtCZ7VXAUAHvBt/.../Jr3vP2eY3TAbQdCDJ5sPKW0DSpYXt5 lLtJmVoH7b6tumnQEWE6bk6CSDuDlq3uCoV YtDHmqQC60PMzdHlkRx7Vwh2z3QDF1jSK2aN0S124K

Latest 30 of 1,283 download URLs

Scan kingoroot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.